$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c2d025-bc3f-3aca-80ed-60498eacc684.roa File: b7c2d025-bc3f-3aca-80ed-60498eacc684.roa (raw, json) Hash identifier: 5BH/S2sBmN2lv9xY3v5XafkzTzuBUgArJ6Lm0CxrWg8= Subject key identifier: 7F:01:22:C2:63:59:DC:52:CA:CD:A2:8C:1D:CC:6C:CF:02:6C:D5:79 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BA9329344A730787C5E19DDC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c2d025-bc3f-3aca-80ed-60498eacc684.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 401152 IP address blocks: 166.0.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:93:44:a7:30:78:7c:5e:19:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d7a75b62-7016-4b38-b998-80858dddf841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:ac:e5:6e:ff:ce:b6:75:36:4a:e8:3f:0b: 84:d1:9e:a3:bf:16:77:62:b1:e1:8c:22:a2:b3:61: 1b:e4:80:1b:d2:09:9b:70:ce:5a:64:fd:3c:ee:10: cf:5d:ca:35:cd:22:62:f1:ff:ac:2c:63:09:27:eb: 83:c8:28:04:a2:76:87:5b:22:ac:a7:3a:3c:79:57: 3d:86:e0:ad:1d:ed:e2:1a:b3:3c:e4:85:1f:bb:50: 6a:fa:50:88:0d:87:ea:2f:ca:61:3b:0f:de:05:67: 30:67:38:54:0e:df:a9:b0:0b:84:e7:98:da:47:59: c3:ae:40:e3:b1:4c:86:3b:93:bc:7c:25:86:4e:28: 84:71:54:0a:1e:c3:ab:06:93:32:77:66:f7:72:0f: 64:02:5d:63:4f:fa:cc:95:4b:ef:06:23:2e:84:10: ca:7d:7a:aa:dc:55:d7:da:cc:23:63:88:a5:dd:4e: e3:af:b6:70:84:6a:e7:66:f7:be:86:ff:18:be:4f: 92:38:3e:a3:b1:e4:8b:39:ae:3c:00:a2:90:10:b4: e9:2a:67:f9:48:b0:eb:0b:f0:25:ec:9a:aa:1d:8a: 25:4d:a2:1a:e5:f9:5c:d1:22:54:7d:5f:56:e8:3b: 9b:2c:1c:a0:32:c8:45:fe:f6:a9:40:1c:0a:79:c8: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:01:22:C2:63:59:DC:52:CA:CD:A2:8C:1D:CC:6C:CF:02:6C:D5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c2d025-bc3f-3aca-80ed-60498eacc684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2a:66:fb:c4:fe:a2:95:70:41:fc:bf:07:6f:f0:f0:b5:e1: e6:c6:5c:c2:5a:ef:25:7e:d3:a0:cc:23:06:c5:70:6d:3e:bd: b4:b5:2a:69:0c:4e:07:6f:4e:ca:0c:be:42:f4:b1:d7:12:29: 45:51:45:c5:a3:62:15:7a:8e:47:22:d3:2d:6a:1b:2c:e4:75: 1d:85:9b:cc:a7:d9:69:bc:07:98:7f:ad:ab:72:fa:11:db:05: 2e:74:1f:ae:e9:e3:cd:ed:42:34:59:aa:6a:97:ee:0e:40:db: 90:9d:91:59:c4:b7:fe:c5:c0:94:20:f8:6c:ba:e8:ff:5b:82: 51:24:71:d8:2c:3b:ec:45:90:41:fd:9a:3d:e2:de:24:91:42: 86:d2:93:d2:ad:05:73:a8:6f:8f:b4:57:b2:ab:9a:52:64:c6: 3d:0c:b5:16:1c:9b:65:60:6c:71:d5:80:94:21:66:07:d7:b1: c3:ea:bb:45:b1:07:83:89:ec:23:eb:42:a4:aa:38:ae:8a:8b: e6:0a:b6:25:77:7f:d5:1a:d9:cf:c9:1f:54:dc:16:05:99:e2: 58:be:84:bc:ce:78:fd:cd:d3:53:63:f4:16:ca:ee:de:85:ea: 4a:de:60:9b:24:0c:70:5e:f6:e5:5e:0f:ca:c5:b1:65:c1:30: 8a:e7:8e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpNEpzB4fF4Z3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDdhNzViNjItNzAxNi00YjM4LWI5OTgtODA4NThkZGRmODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjASs5W7/zrZ1NkroPwuE0Z6jvxZ3YrHhjCKi s2Eb5IAb0gmbcM5aZP087hDPXco1zSJi8f+sLGMJJ+uDyCgEonaHWyKspzo8eVc9 huCtHe3iGrM85IUfu1Bq+lCIDYfqL8phOw/eBWcwZzhUDt+psAuE55jaR1nDrkDj sUyGO5O8fCWGTiiEcVQKHsOrBpMyd2b3cg9kAl1jT/rMlUvvBiMuhBDKfXqq3FXX 2swjY4il3U7jr7ZwhGrnZve+hv8Yvk+SOD6jseSLOa48AKKQELTpKmf5SLDrC/Al 7JqqHYolTaIa5flc0SJUfV9W6DubLBygMshF/vapQBwKecg4lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8BIsJjWdxSys2ijB3MbM8CbNV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjdjMmQwMjUtYmMzZi0z YWNhLTgwZWQtNjA0OThlYWNjNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoqZvvE/qKVcEH8vwdv8PC14ebGXMJa7yV+06DMIwbFcG0+vbS1KmkM TgdvTsoMvkL0sdcSKUVRRcWjYhV6jkci0y1qGyzkdR2Fm8yn2Wm8B5h/raty+hHb BS50H67p483tQjRZqmqX7g5A25CdkVnEt/7FwJQg+Gy66P9bglEkcdgsO+xFkEH9 mj3i3iSRQobSk9KtBXOob4+0V7KrmlJkxj0MtRYcm2VgbHHVgJQhZgfXscPqu0Wx B4OJ7CPrQqSqOK6Ki+YKtiV3f9Ua2c/JH1TcFgWZ4li+hLzOeP3N01Nj9BbK7t6F 6kreYJskDHBe9uVeD8rFsWXBMIrnjus= -----END CERTIFICATE-----Generated at Sun Nov 2 16:49:34 2025 by rpki-client