$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa File: d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa (raw, json) Hash identifier: 3sNxcFF5nO8roX5kTIkPZcc77CVRYwxDe5U9sj3FiUw= Subject key identifier: 96:F3:EE:33:4F:23:BC:5E:15:9D:9B:9C:8F:6D:00:3D:3E:DB:BC:21 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AC8767D4AFAA3558D2D9EA680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 401152 IP address blocks: 166.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:7d:4a:fa:a3:55:8d:2d:9e:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=e1624d6a-b4a7-4eff-8831-3d232575736d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:10:e5:1c:96:5c:a6:a6:0e:3e:c3:53:c2: e9:51:c1:d5:a2:06:31:30:bb:5e:f0:e5:d5:05:1b: 65:c7:94:80:db:ca:b5:53:d2:bf:63:81:ff:e7:b2: 79:bb:7a:6d:fd:99:51:07:4f:53:67:8d:4b:dd:81: 94:24:c0:ed:8a:96:70:cb:1c:64:fc:2c:81:d6:fa: de:b0:20:65:b6:98:31:d1:3a:06:ab:1c:2e:22:4c: cf:72:12:66:5d:84:b4:78:6a:cf:66:e6:32:25:eb: 9d:57:04:0f:a6:12:b3:b4:b6:5e:3b:a9:f5:53:91: 9c:dc:ee:cb:af:a5:ba:92:47:44:0a:c6:99:eb:49: 78:2a:d6:cc:6e:ab:b5:29:88:3f:95:54:dc:70:8b: 2f:a4:e0:c6:57:4b:b5:f0:13:47:33:27:2f:8c:ea: 6b:39:c9:11:67:fc:49:40:ef:2f:34:ac:6a:c9:38: be:50:06:79:8c:f5:62:66:5f:c5:18:36:ab:7a:6e: 22:3e:37:97:ea:f0:6b:5c:da:2b:7e:c6:4c:77:e2: 86:86:3f:d7:f4:01:07:b1:d0:6e:bb:9b:43:a0:ea: 57:20:ae:aa:c9:99:12:56:a1:73:ba:e4:0e:e5:0c: 11:d3:4b:bd:91:9b:d1:50:1d:13:d9:d0:5d:ad:0b: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F3:EE:33:4F:23:BC:5E:15:9D:9B:9C:8F:6D:00:3D:3E:DB:BC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1b:3b:72:32:cd:e8:af:db:e5:e4:cc:83:33:58:c7:b7:a2: 01:1d:99:81:e6:1e:c7:c7:d7:0a:2d:79:d4:4b:44:45:a1:78: 14:7a:22:f9:56:23:94:ce:80:0d:01:ea:de:9a:c0:6a:c0:0d: 86:f2:e2:cf:02:d0:7b:52:73:00:0f:c1:ea:2a:35:57:45:af: 01:9b:01:8f:03:e3:b5:87:64:95:55:52:f8:07:a3:82:60:a7: 4e:06:6d:69:ab:d1:f5:8b:6e:09:ca:74:a2:d5:d1:30:cc:2e: 9b:26:49:82:63:e0:77:49:8d:0a:91:01:ca:02:7a:08:21:d7: 31:3f:79:ba:b4:aa:96:22:e5:3b:07:8a:83:f9:80:7b:ed:d5: be:0c:2b:43:2b:ba:23:29:a6:50:d7:04:b6:5f:7e:3c:7f:2b: bb:f5:79:3c:4a:f3:1a:2b:3e:3b:32:0b:39:36:3c:ed:f3:6d: 7b:02:c8:3a:bb:7a:43:f1:c5:0f:1f:17:7d:d4:cf:51:8f:05: a5:b4:58:65:a7:d9:78:13:60:dc:db:97:eb:7e:d6:5b:0b:34: 88:d2:2c:3c:15:b1:9c:11:df:00:99:92:0f:68:ea:71:86:96: 7a:b1:d0:de:f2:9a:9d:94:51:8f:69:21:27:91:20:5c:11:23: eb:28:35:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdn1K+qNVjS2epoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTE2MjRkNmEtYjRhNy00ZWZmLTg4MzEtM2QyMzI1NzU3MzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT8Q5RyWXKamDj7DU8LpUcHVogYxMLte8OXV BRtlx5SA28q1U9K/Y4H/57J5u3pt/ZlRB09TZ41L3YGUJMDtipZwyxxk/CyB1vre sCBltpgx0ToGqxwuIkzPchJmXYS0eGrPZuYyJeudVwQPphKztLZeO6n1U5Gc3O7L r6W6kkdECsaZ60l4KtbMbqu1KYg/lVTccIsvpODGV0u18BNHMycvjOprOckRZ/xJ QO8vNKxqyTi+UAZ5jPViZl/FGDarem4iPjeX6vBrXNorfsZMd+KGhj/X9AEHsdBu u5tDoOpXIK6qyZkSVqFzuuQO5QwR00u9kZvRUB0T2dBdrQvv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbz7jNPI7xeFZ2bnI9tAD0+27whMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDIyM2QyMDUtYzlhZS0z ZmVhLWIyZGQtZWFmMzFhYjZlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAbO3Iyzeiv2+XkzIMzWMe3ogEdmYHmHsfH1wotedRLREWheBR6IvlW I5TOgA0B6t6awGrADYby4s8C0HtScwAPweoqNVdFrwGbAY8D47WHZJVVUvgHo4Jg p04GbWmr0fWLbgnKdKLV0TDMLpsmSYJj4HdJjQqRAcoCeggh1zE/ebq0qpYi5TsH ioP5gHvt1b4MK0MruiMpplDXBLZffjx/K7v1eTxK8xorPjsyCzk2PO3zbXsCyDq7 ekPxxQ8fF33Uz1GPBaW0WGWn2XgTYNzbl+t+1lsLNIjSLDwVsZwR3wCZkg9o6nGG lnqx0N7ymp2UUY9pISeRIFwRI+soNb0= -----END CERTIFICATE-----Generated at Wed Aug 20 13:13:51 2025 by rpki-client