$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a84dc5ff-6170-3aae-96a5-f98d1359e528.roa File: a84dc5ff-6170-3aae-96a5-f98d1359e528.roa (raw, json) Hash identifier: D6TJmD6dzNbsCZhK2iTIQCEa4aOAO4LTKqXLgNUZGkg= Subject key identifier: 8B:78:0D:6A:A0:9B:CB:14:D2:4A:47:4F:5F:32:2D:94:32:06:24:D7 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B91776C742FD3B810A1FD8180 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a84dc5ff-6170-3aae-96a5-f98d1359e528.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 62240 IP address blocks: 166.1.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:6c:74:2f:d3:b8:10:a1:fd:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=6ef178db-2756-4a67-8d07-f5bbc8f4b72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:83:02:dc:c6:ff:ad:f1:25:00:a0:f0:4d: 04:28:cc:25:d1:1f:aa:ac:6f:4b:d7:f5:f1:3a:d3: c3:1a:02:40:7a:81:9b:87:f3:50:0b:f0:51:07:49: 2a:a5:3f:6e:de:8f:57:80:11:7e:ff:fd:fa:c9:fb: 86:1d:c5:fb:73:f0:93:a9:f6:f1:b5:91:73:74:4e: 80:36:de:ef:77:75:54:2c:1b:f2:56:b7:69:ae:1f: fb:74:fb:34:c3:48:be:b9:fe:33:a0:82:18:a4:bc: 69:c6:bb:d7:6d:91:0f:e2:da:7a:c8:67:67:92:ca: 38:99:35:28:bb:1b:72:d2:29:2f:82:67:78:97:ad: 33:4a:d5:e9:2b:53:4a:29:67:52:a9:ce:b9:00:c2: b6:a6:91:f5:22:f9:66:55:50:28:1d:fe:5a:8e:72: 04:44:dc:90:05:4a:ef:9b:7b:58:da:6f:5a:cd:cf: 4e:af:4f:02:1a:fc:f6:0a:be:96:4a:65:2a:fa:e4: 1d:ad:f9:1a:b5:54:fb:50:0a:11:0f:a5:54:11:0c: 62:1f:47:65:b2:35:eb:c8:01:31:2f:6e:f3:7f:76: f0:8d:96:1f:3f:d7:5f:e8:cd:4f:61:25:8b:34:16: e0:e5:2c:69:a7:05:a9:48:44:ac:c0:47:da:29:ad: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:78:0D:6A:A0:9B:CB:14:D2:4A:47:4F:5F:32:2D:94:32:06:24:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a84dc5ff-6170-3aae-96a5-f98d1359e528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d7:5b:57:57:c8:b9:de:45:ab:17:60:09:41:63:b1:4b:73: 49:08:cc:a1:5f:0e:ed:52:16:9c:7b:39:c9:73:e3:65:36:eb: 16:7b:80:4d:28:70:8c:11:9d:bc:37:a2:08:c2:3a:c3:0b:07: af:01:36:da:22:e1:d7:7b:a3:4b:db:46:b4:f9:fb:23:cd:73: df:79:ed:3d:1f:17:5c:06:b8:17:07:2d:fd:d3:fa:2c:dd:a2: cf:a0:76:ed:e0:74:64:de:a3:3e:b9:e1:75:78:f6:b1:8e:08: 1e:9b:d3:8f:31:a1:3f:90:73:74:93:02:e9:10:f7:b8:40:02: 6c:a7:7d:12:42:b5:f3:55:d8:77:c7:0e:65:de:aa:ca:0d:6b: de:6d:08:75:6c:e7:c6:d9:98:9c:6d:86:9d:47:32:02:0d:fe: e3:d0:65:fc:81:71:70:48:e8:fa:d5:98:f8:e1:cc:a7:25:b1: 84:99:ea:5e:66:12:20:7c:4b:7b:a5:97:9b:7a:88:70:4e:e2: 4e:dc:eb:ef:26:26:9b:10:a7:73:82:ac:6b:cd:34:24:1a:d4: 11:96:97:c1:3c:b0:3a:6e:ab:73:40:95:3b:6e:65:5e:13:17: 46:46:db:f5:ac:fa:1f:c2:cf:86:0a:5f:02:75:6d:f2:a2:28: db:32:18:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd2x0L9O4EKH9gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk NmVmMTc4ZGItMjc1Ni00YTY3LThkMDctZjViYmM4ZjRiNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8SDAtzG/63xJQCg8E0EKMwl0R+qrG9L1/Xx OtPDGgJAeoGbh/NQC/BRB0kqpT9u3o9XgBF+//36yfuGHcX7c/CTqfbxtZFzdE6A Nt7vd3VULBvyVrdprh/7dPs0w0i+uf4zoIIYpLxpxrvXbZEP4tp6yGdnkso4mTUo uxty0ikvgmd4l60zStXpK1NKKWdSqc65AMK2ppH1IvlmVVAoHf5ajnIERNyQBUrv m3tY2m9azc9Or08CGvz2Cr6WSmUq+uQdrfkatVT7UAoRD6VUEQxiH0dlsjXryAEx L27zf3bwjZYfP9df6M1PYSWLNBbg5SxppwWpSESswEfaKa2z5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt4DWqgm8sU0kpHT18yLZQyBiTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTg0ZGM1ZmYtNjE3MC0z YWFlLTk2YTUtZjk4ZDEzNTllNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrXW1dXyLneRasXYAlBY7FLc0kIzKFfDu1SFpx7Oclz42U26xZ7gE0o cIwRnbw3ogjCOsMLB68BNtoi4dd7o0vbRrT5+yPNc9957T0fF1wGuBcHLf3T+izd os+gdu3gdGTeoz654XV49rGOCB6b048xoT+Qc3STAukQ97hAAmynfRJCtfNV2HfH DmXeqsoNa95tCHVs58bZmJxthp1HMgIN/uPQZfyBcXBI6PrVmPjhzKclsYSZ6l5m EiB8S3ull5t6iHBO4k7c6+8mJpsQp3OCrGvNNCQa1BGWl8E8sDpuq3NAlTtuZV4T F0ZG2/Ws+h/Cz4YKXwJ1bfKiKNsyGFs= -----END CERTIFICATE-----Generated at Tue Oct 28 17:04:11 2025 by rpki-client