$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a9d89a8-3323-301e-b32f-8865f0aa503c.roa File: 8a9d89a8-3323-301e-b32f-8865f0aa503c.roa (raw, json) Hash identifier: wfMg1AGQPJG9vm1yscuNRbfFH+eanJyNu6UTIDotXrU= Subject key identifier: E8:CB:23:91:6C:5E:6C:0C:99:28:B3:51:4C:8E:02:F6:A3:F7:6C:22 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B2996E74EC2FC38A195472AC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a9d89a8-3323-301e-b32f-8865f0aa503c.roa Signing time: Thu 11 Sep 2025 19:59:54 +0000 ROA not before: Thu 11 Sep 2025 19:59:54 +0000 ROA not after: Wed 10 Dec 2025 20:59:54 +0000 asID: 7385 IP address blocks: 166.0.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:96:e7:4e:c2:fc:38:a1:95:47:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 11 19:59:54 2025 GMT Not After : Dec 10 20:59:54 2025 GMT Subject: CN=5ceba323-2b78-4105-812d-540459a75dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:a9:10:a7:76:02:58:23:ca:b6:7e:e9:e4: b7:70:08:83:8e:e8:43:a9:3f:c2:97:f9:39:00:a6: 06:06:9f:97:e7:f4:3c:8f:fd:3a:19:1e:d0:a8:e7: 26:ad:50:a6:06:75:c8:a9:35:0b:8e:3b:db:ba:91: a4:95:ba:88:80:55:90:67:58:7a:78:2d:90:7f:31: 3d:18:e0:12:0b:84:3b:8f:42:2e:77:c7:32:c6:c5: 31:2e:ef:50:55:7b:b8:55:e5:60:92:54:87:66:74: 7f:92:8b:90:45:45:59:a9:9a:c1:a4:47:40:9c:15: 81:79:e1:5c:96:5b:3a:3e:b6:e3:ed:3e:48:b1:05: 28:74:11:7b:7a:bf:ff:03:5c:36:98:17:4f:21:e0: e9:c7:ad:64:be:cf:29:f6:1a:fe:e5:8c:31:61:aa: 60:88:b7:18:1f:15:fc:00:81:31:54:65:08:29:a7: 37:f7:98:0f:c5:6f:02:58:e5:e4:20:5a:3b:1e:d7: 3e:00:20:b3:0e:39:6b:f4:db:9a:ad:ba:ab:39:07: 69:3c:f7:9a:dc:03:da:82:ed:da:7b:8a:45:8d:f4: 4a:c4:9b:1b:3c:47:1a:7d:d9:17:9e:f2:cc:91:13: 1b:0b:48:9e:a2:36:15:10:33:a0:2a:c0:ee:1a:a9: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CB:23:91:6C:5E:6C:0C:99:28:B3:51:4C:8E:02:F6:A3:F7:6C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a9d89a8-3323-301e-b32f-8865f0aa503c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ba:52:88:3e:90:3a:0f:9d:5e:f4:a3:44:d1:1f:ac:ce:90: 46:1a:09:17:02:49:6b:47:fa:d4:28:d6:39:56:e7:70:f7:54: be:98:a3:ff:29:01:5c:b6:8c:25:12:1f:b1:b5:4a:09:83:f7: cc:77:ef:b2:29:ce:01:38:84:b4:c0:b8:24:83:86:bd:69:47: 38:0b:9a:2d:bc:d2:40:59:73:71:ea:17:cc:2a:ac:03:cc:99: ff:01:cd:57:6f:d0:65:d4:73:8a:88:89:8a:75:d0:19:7f:60: 24:1a:4e:43:53:bd:93:d3:92:4b:30:f5:b1:61:5f:a6:af:29: 12:6b:87:32:5e:2a:30:36:f3:e8:ed:5d:36:ff:97:e7:7b:fc: a5:bc:90:45:4c:28:40:d9:b6:93:70:fd:ab:57:44:9e:22:cb: d1:a5:70:aa:43:7f:11:fb:d6:b0:e1:b8:60:39:79:15:15:4d: 04:14:8b:8e:85:9c:71:fb:d2:1d:60:30:1b:e3:e1:cf:27:56: 72:b7:14:41:ea:6f:2c:b5:08:1c:47:d0:79:42:7b:d3:5d:cf: 51:45:31:a3:cd:a4:db:0e:4c:79:56:9c:2b:89:2f:d5:c7:ad: bb:17:f9:be:98:77:9c:2e:ec:80:af:4c:28:a3:60:13:91:09: 45:84:bd:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspludOwvw4oZVHKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkxMTE5NTk1NFoXDTI1MTIxMDIwNTk1NFowLzEtMCsGA1UEAxMk NWNlYmEzMjMtMmI3OC00MTA1LTgxMmQtNTQwNDU5YTc1ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCpEKd2AlgjyrZ+6eS3cAiDjuhDqT/Cl/k5 AKYGBp+X5/Q8j/06GR7QqOcmrVCmBnXIqTULjjvbupGklbqIgFWQZ1h6eC2QfzE9 GOASC4Q7j0Iud8cyxsUxLu9QVXu4VeVgklSHZnR/kouQRUVZqZrBpEdAnBWBeeFc lls6Prbj7T5IsQUodBF7er//A1w2mBdPIeDpx61kvs8p9hr+5YwxYapgiLcYHxX8 AIExVGUIKac395gPxW8CWOXkIFo7Htc+ACCzDjlr9NuarbqrOQdpPPea3APagu3a e4pFjfRKxJsbPEcafdkXnvLMkRMbC0ieojYVEDOgKsDuGqlelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjLI5FsXmwMmSizUUyOAvaj92wiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGE5ZDg5YTgtMzMyMy0z MDFlLWIzMmYtODg2NWYwYWE1MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW6Uog+kDoPnV70o0TRH6zOkEYaCRcCSWtH+tQo1jlW53D3VL6Yo/8p AVy2jCUSH7G1SgmD98x377IpzgE4hLTAuCSDhr1pRzgLmi280kBZc3HqF8wqrAPM mf8BzVdv0GXUc4qIiYp10Bl/YCQaTkNTvZPTkksw9bFhX6avKRJrhzJeKjA28+jt XTb/l+d7/KW8kEVMKEDZtpNw/atXRJ4iy9GlcKpDfxH71rDhuGA5eRUVTQQUi46F nHH70h1gMBvj4c8nVnK3FEHqbyy1CBxH0HlCe9Ndz1FFMaPNpNsOTHlWnCuJL9XH rbsX+b6Yd5wu7ICvTCijYBORCUWEvQE= -----END CERTIFICATE-----Generated at Mon Sep 15 10:40:43 2025 by rpki-client