$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ace6d418-9131-3205-9728-a85bec1421f2.roa File: ace6d418-9131-3205-9728-a85bec1421f2.roa (raw, json) Hash identifier: T/cGwaIoyI25icc5DrPGC8nA2igyeqWnSvUxw+YxAYs= Subject key identifier: 91:D3:7B:0C:44:01:49:2D:C1:10:C8:3F:08:EC:59:1F:0A:70:DA:9A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BB2F7A343FFEF4C899F361D00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ace6d418-9131-3205-9728-a85bec1421f2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 401152 IP address blocks: 166.0.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a3:43:ff:ef:4c:89:9f:36:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=dd98a952-e3f8-421a-8e10-4a2fbc9ebe23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:e4:78:42:ad:9b:9b:59:a3:3c:43:7c:3d: 57:33:99:4b:4c:72:2a:ce:46:ab:68:6e:76:9f:53: 55:68:ef:13:df:b5:7a:55:74:31:a9:ba:80:50:28: 31:97:c7:9f:15:22:8e:c1:45:24:1b:18:b5:7e:3f: 5e:a2:5c:ea:a8:93:c0:d4:bd:19:93:e1:21:34:54: c7:8d:30:b1:0b:5a:8d:74:e8:d5:12:09:30:ee:20: 53:42:2e:b1:f3:52:64:72:bf:78:d5:50:07:3b:47: a1:7e:37:d3:79:13:ef:4e:3d:89:6f:95:d3:eb:a0: e1:bf:3b:e0:7d:9e:e7:fd:03:8d:0e:c1:57:92:84: fb:d5:1e:83:85:5d:1e:d9:e8:5c:ec:fc:68:41:46: f6:eb:3b:e9:37:13:7c:aa:ee:ff:9e:50:a7:a8:f5: 08:b2:9d:a9:84:d5:8c:ed:49:ae:d2:44:51:28:08: c8:e5:85:22:5e:99:db:5a:62:d1:60:0a:d5:50:d3: e4:ca:1a:5a:43:74:7b:e0:dc:c0:3c:9a:a0:9c:1c: 02:a2:5b:66:c1:de:1b:94:57:0c:6c:8f:15:b2:14: 5b:18:f1:04:dd:bc:78:e7:9b:a6:8c:b7:d3:76:16: e4:c3:4c:aa:6c:f8:1d:62:0a:45:e3:fe:83:5b:0d: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:7B:0C:44:01:49:2D:C1:10:C8:3F:08:EC:59:1F:0A:70:DA:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ace6d418-9131-3205-9728-a85bec1421f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:47:aa:46:a1:e2:d3:61:17:40:f2:4d:36:f6:00:07:19:d1: e3:ab:bf:c2:53:1e:89:18:5b:c6:05:48:75:25:c7:e1:d9:f7: 94:1d:0b:bc:aa:e4:c1:4e:d0:25:3c:5c:79:ee:38:a8:3f:b1: 5b:f1:69:2e:a4:bf:56:a7:e6:93:cf:21:85:bf:21:c9:af:26: c3:40:0e:7f:a6:88:27:66:c3:d3:70:39:bd:a2:fe:1b:5e:08: 55:ad:6e:64:a7:0d:81:cf:33:3e:28:52:85:ae:66:a7:08:ad: 3f:b5:39:b9:35:76:fd:52:be:78:3d:00:9f:c6:e5:a5:84:4f: 52:b6:40:e6:6a:82:6e:e1:59:55:1a:1d:55:35:2f:01:13:96: be:54:60:8a:8f:f9:49:28:e1:df:8d:51:f8:89:32:6e:e1:e4: d3:83:14:50:dd:ac:64:0d:7d:4b:3d:a4:d2:be:7c:76:2c:8d: 5c:5a:00:33:b0:ae:ed:14:ee:e7:4f:b8:79:61:e2:9c:2b:41: 93:f4:c3:25:0d:ed:e0:aa:40:fc:2b:9c:61:b3:f7:43:8d:b6: c1:76:9b:29:a0:b3:4b:cb:00:3e:76:91:f5:5d:ad:bb:46:7f: 7a:e5:dd:cc:d2:72:b1:2f:ab:57:a8:0b:5d:47:79:c3:12:2a: e3:5e:42:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96ND/+9MiZ82HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGQ5OGE5NTItZTNmOC00MjFhLThlMTAtNGEyZmJjOWViZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJbkeEKtm5tZozxDfD1XM5lLTHIqzkaraG52 n1NVaO8T37V6VXQxqbqAUCgxl8efFSKOwUUkGxi1fj9eolzqqJPA1L0Zk+EhNFTH jTCxC1qNdOjVEgkw7iBTQi6x81Jkcr941VAHO0ehfjfTeRPvTj2Jb5XT66Dhvzvg fZ7n/QONDsFXkoT71R6DhV0e2ehc7PxoQUb26zvpNxN8qu7/nlCnqPUIsp2phNWM 7Umu0kRRKAjI5YUiXpnbWmLRYArVUNPkyhpaQ3R74NzAPJqgnBwColtmwd4blFcM bI8VshRbGPEE3bx455umjLfTdhbkw0yqbPgdYgpF4/6DWw3zyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHTewxEAUktwRDIPwjsWR8KcNqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWNlNmQ0MTgtOTEzMS0z MjA1LTk3MjgtYTg1YmVjMTQyMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgC1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVHqkah4tNhF0DyTTb2AAcZ0eOrv8JTHokYW8YFSHUlx+HZ95QdC7yq 5MFO0CU8XHnuOKg/sVvxaS6kv1an5pPPIYW/IcmvJsNADn+miCdmw9NwOb2i/hte CFWtbmSnDYHPMz4oUoWuZqcIrT+1Obk1dv1Svng9AJ/G5aWET1K2QOZqgm7hWVUa HVU1LwETlr5UYIqP+Uko4d+NUfiJMm7h5NODFFDdrGQNfUs9pNK+fHYsjVxaADOw ru0U7udPuHlh4pwrQZP0wyUN7eCqQPwrnGGz90ONtsF2mymgs0vLAD52kfVdrbtG f3rl3czScrEvq1eoC11HecMSKuNeQpU= -----END CERTIFICATE-----Generated at Sun Nov 2 16:49:38 2025 by rpki-client