$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa File: d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa (raw, json) Hash identifier: FgE8Cw+8OaS/oMcDivGyANBiGcLwsLb3UxJT0LN0Vlw= Subject key identifier: 44:84:7E:A7:94:0D:7A:E6:35:61:CF:03:0A:65:81:25:6F:FA:3D:74 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A612B0D770C71C82DDD0C1780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 400810 IP address blocks: 166.0.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0d:77:0c:71:c8:2d:dd:0c:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=df8ff3ab-97b5-470e-b3dd-c00a09964dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:34:9e:39:53:0a:18:95:2c:63:65:47:bb: ed:be:18:16:8d:bd:fc:23:11:f3:54:d4:35:a9:06: b4:36:9c:41:98:ce:09:de:b4:81:61:04:98:66:f7: c1:06:d0:89:b1:51:db:55:6a:1c:e5:95:84:b6:ec: e1:9d:49:03:55:64:a1:c8:2b:5d:36:21:d7:c0:c4: 0e:21:d1:5a:c3:56:d4:dd:ad:81:fc:48:6f:0c:68: 56:b3:e6:5a:33:3d:10:78:fc:7a:d2:75:8a:c5:a0: a7:cd:21:95:c1:8c:70:b8:a7:e4:2d:ae:aa:32:ba: 07:2e:cb:56:d7:4c:9b:b2:3b:e2:26:0b:7a:14:99: 89:37:11:01:f7:e5:a6:dc:c9:53:ce:7d:95:22:d4: 9d:15:80:f7:48:4b:52:f6:6a:b3:4b:77:79:a6:cc: b2:54:e0:87:db:aa:10:ed:a8:a2:5f:97:84:0d:b8: 0e:2a:f4:4e:2c:b0:8e:23:9a:5d:e2:ff:98:a1:40: de:00:cb:76:58:6a:85:ea:a2:61:6f:eb:86:72:21: 9b:b2:30:47:23:35:2f:b6:2d:fc:e8:e9:ee:7f:f6: df:cc:b2:22:ae:7d:a0:fb:f4:0e:07:fd:46:ed:ec: 40:91:d1:92:39:c6:78:64:77:9f:9e:4d:6e:c3:d5: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:84:7E:A7:94:0D:7A:E6:35:61:CF:03:0A:65:81:25:6F:FA:3D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9a:74:15:2e:af:08:c1:d2:17:85:f4:5f:d9:7d:b6:10:02: e5:61:85:3c:bc:c6:f5:d1:1c:80:85:42:0b:16:e8:d9:80:6f: 5d:d9:bc:1e:1b:17:27:dd:b6:d0:ee:e6:02:d5:f2:61:6e:73: 5c:02:59:36:7a:ba:7f:3a:00:eb:1c:de:41:67:f1:05:38:e8: 49:a3:90:9e:35:dc:de:84:22:0d:49:6e:04:41:74:ce:5c:d2: 51:63:e3:99:a7:36:c9:a7:fa:07:df:26:e0:7c:e4:0f:5b:75: 43:9a:9e:1a:de:73:7f:18:27:0f:1d:a7:d2:98:da:22:b2:5e: 75:f0:4d:f7:a3:e7:0a:60:08:a8:ac:6a:18:84:71:3d:45:8d: 64:9e:5b:fc:76:38:f7:9d:ac:a4:52:e6:4a:41:9c:72:26:30: b9:21:0a:e8:57:f5:ec:f6:c3:28:03:a7:88:c0:95:e5:30:32: b7:14:df:8d:d8:d5:cf:dd:bf:32:d5:ed:54:cd:49:49:9d:28: 08:6a:36:89:aa:79:b4:e5:be:c5:6b:5c:0b:a6:9c:0d:3b:55: bd:52:24:15:6e:80:d1:60:ea:07:92:7f:33:8f:55:47:df:b2: 0d:65:62:72:18:d0:49:84:9b:27:84:2e:18:3e:bc:85:0b:1c: 06:fd:a3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKw13DHHILd0MF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ZGY4ZmYzYWItOTdiNS00NzBlLWIzZGQtYzAwYTA5OTY0ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOI0njlTChiVLGNlR7vtvhgWjb38IxHzVNQ1 qQa0NpxBmM4J3rSBYQSYZvfBBtCJsVHbVWoc5ZWEtuzhnUkDVWShyCtdNiHXwMQO IdFaw1bU3a2B/EhvDGhWs+ZaMz0QePx60nWKxaCnzSGVwYxwuKfkLa6qMroHLstW 10ybsjviJgt6FJmJNxEB9+Wm3MlTzn2VItSdFYD3SEtS9mqzS3d5psyyVOCH26oQ 7aiiX5eEDbgOKvROLLCOI5pd4v+YoUDeAMt2WGqF6qJhb+uGciGbsjBHIzUvti38 6Onuf/bfzLIirn2g+/QOB/1G7exAkdGSOcZ4ZHefnk1uw9XICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESEfqeUDXrmNWHPAwplgSVv+j10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDlmOWNiNDAtNjhlMC0z OWY5LWEzMzUtZDJiMjkyMzJkNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyadBUurwjB0heF9F/ZfbYQAuVhhTy8xvXRHICFQgsW6NmAb13ZvB4b FyfdttDu5gLV8mFuc1wCWTZ6un86AOsc3kFn8QU46EmjkJ413N6EIg1JbgRBdM5c 0lFj45mnNsmn+gffJuB85A9bdUOanhrec38YJw8dp9KY2iKyXnXwTfej5wpgCKis ahiEcT1FjWSeW/x2OPedrKRS5kpBnHImMLkhCuhX9ez2wygDp4jAleUwMrcU343Y 1c/dvzLV7VTNSUmdKAhqNomqebTlvsVrXAumnA07Vb1SJBVugNFg6geSfzOPVUff sg1lYnIY0EmEmyeELhg+vIULHAb9o3A= -----END CERTIFICATE-----Generated at Wed Jul 2 03:55:16 2025 by rpki-client