$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b875c-2fdb-3810-be05-06ff26439db0.roa File: aa2b875c-2fdb-3810-be05-06ff26439db0.roa (raw, json) Hash identifier: h3O+xkbZgSxW9oqcP6gzxUntYKDtsnVoq0NWfD6xjIk= Subject key identifier: 85:E1:BB:D0:89:2F:2A:A9:BD:31:AD:5F:EE:F4:32:50:BF:9F:E0:12 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DC21F3825DC3690AF00A11D40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b875c-2fdb-3810-be05-06ff26439db0.roa Signing time: Thu 07 May 2026 20:51:18 +0000 ROA not before: Thu 07 May 2026 20:51:18 +0000 ROA not after: Wed 05 Aug 2026 20:51:18 +0000 asID: 9009 IP address blocks: 166.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:1f:38:25:dc:36:90:af:00:a1:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 7 20:51:18 2026 GMT Not After : Aug 5 20:51:18 2026 GMT Subject: CN=fdd983a6-e29b-48ee-aea5-2bae888d2a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:33:1d:59:2d:d3:08:d3:0d:7f:b7:5d:22: 34:9a:3a:5b:f3:9c:c2:60:94:d0:ed:f5:5b:9b:c3: 6f:70:45:4c:91:64:4f:cc:32:95:d7:09:34:9c:d5: a9:98:55:e8:f7:8e:5e:9e:c5:2e:d0:45:d1:cf:1b: 3b:8d:41:d1:85:9d:32:7b:48:af:04:da:ae:8c:e3: d0:e1:4c:71:af:1c:c8:be:41:94:b4:88:4a:fc:2f: e1:ed:89:fd:ec:a8:a6:3e:04:45:9a:c5:06:27:cd: 90:f8:8c:9c:cf:2c:6f:24:ec:2a:be:35:96:cd:cb: 92:4d:a4:d4:be:63:53:dc:da:38:d2:05:4a:60:c7: 97:2a:78:94:36:b0:83:8f:4e:df:49:02:a5:2c:04: d2:46:71:d2:e7:54:c4:eb:83:d3:f3:cb:d3:d1:31: 35:96:f0:96:1f:d8:55:7a:59:2a:62:d0:31:73:97: 2d:ee:bf:b7:55:7f:f4:86:2c:1b:46:51:c4:a0:06: fb:98:2c:f6:c5:de:e5:22:da:06:b2:b4:d2:33:1e: e3:98:34:ba:bf:ba:b8:77:58:f0:ab:c3:99:bb:0d: ae:e6:1b:a7:c1:50:7c:35:b8:14:4e:1a:f2:a9:8b: bf:b0:13:b0:af:83:bf:28:5a:73:ca:5b:cc:18:db: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:BB:D0:89:2F:2A:A9:BD:31:AD:5F:EE:F4:32:50:BF:9F:E0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b875c-2fdb-3810-be05-06ff26439db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:09:9d:59:41:bb:b1:45:96:8f:1d:ad:c8:39:e3:ed:c9:cf: 8d:74:d8:3b:9e:08:8c:f0:2f:be:13:1a:79:d0:d9:79:3d:a4: e1:74:ae:67:15:80:36:12:4a:4f:b7:d0:ac:5f:b4:b6:59:60: 15:be:15:35:de:d2:b5:a2:0f:56:d6:20:73:9d:4d:9b:7b:ad: 2d:58:08:71:2b:03:ae:6e:14:3a:be:27:29:45:9f:42:6f:27: c0:e7:4a:25:21:af:26:7b:58:57:47:c3:e9:4f:53:87:0d:59: b8:46:34:fd:63:1e:b9:19:c4:73:cf:08:37:a9:ed:a7:91:5a: f5:f1:8d:d4:70:45:c7:ee:ef:f4:73:b9:91:88:13:91:b4:d5: 56:99:9d:b4:be:73:c3:67:2b:21:6a:ce:b5:b6:8c:ad:2d:2d: 54:6a:5e:d1:00:fc:81:74:92:67:63:d6:b8:ff:86:d1:cb:99: f6:d4:a3:08:17:a7:61:b5:25:51:69:19:a2:75:d5:7e:aa:ec: de:8a:0f:32:36:b3:bf:a0:e6:90:37:13:1b:bf:47:14:aa:00: d9:f8:b8:cb:10:b7:4b:1b:6c:95:05:d0:6a:3f:76:1a:c9:84: f3:95:96:a9:70:37:93:f2:b5:a5:d1:29:90:f4:6c:2a:0e:ea: fd:22:d9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CHzgl3DaQrwChHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDUwNzIwNTExOFoXDTI2MDgwNTIwNTExOFowLzEtMCsGA1UEAxMk ZmRkOTgzYTYtZTI5Yi00OGVlLWFlYTUtMmJhZTg4OGQyYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg0zHVkt0wjTDX+3XSI0mjpb85zCYJTQ7fVb m8NvcEVMkWRPzDKV1wk0nNWpmFXo945ensUu0EXRzxs7jUHRhZ0ye0ivBNqujOPQ 4UxxrxzIvkGUtIhK/C/h7Yn97KimPgRFmsUGJ82Q+IyczyxvJOwqvjWWzcuSTaTU vmNT3No40gVKYMeXKniUNrCDj07fSQKlLATSRnHS51TE64PT88vT0TE1lvCWH9hV elkqYtAxc5ct7r+3VX/0hiwbRlHEoAb7mCz2xd7lItoGsrTSMx7jmDS6v7q4d1jw q8OZuw2u5hunwVB8NbgUThryqYu/sBOwr4O/KFpzylvMGNvkuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXhu9CJLyqpvTGtX+70MlC/n+ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWEyYjg3NWMtMmZkYi0z ODEwLWJlMDUtMDZmZjI2NDM5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcJnVlBu7FFlo8drcg54+3Jz4102DueCIzwL74TGnnQ2Xk9pOF0rmcV gDYSSk+30KxftLZZYBW+FTXe0rWiD1bWIHOdTZt7rS1YCHErA65uFDq+JylFn0Jv J8DnSiUhryZ7WFdHw+lPU4cNWbhGNP1jHrkZxHPPCDep7aeRWvXxjdRwRcfu7/Rz uZGIE5G01VaZnbS+c8NnKyFqzrW2jK0tLVRqXtEA/IF0kmdj1rj/htHLmfbUowgX p2G1JVFpGaJ11X6q7N6KDzI2s7+g5pA3Exu/RxSqANn4uMsQt0sbbJUF0Go/dhrJ hPOVlqlwN5PytaXRKZD0bCoO6v0i2Z8= -----END CERTIFICATE-----Generated at Sat May 9 15:40:06 2026 by rpki-client