$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66940ea7-aaf4-35ce-93c1-341441c2a308.roa File: 66940ea7-aaf4-35ce-93c1-341441c2a308.roa (raw, json) Hash identifier: 6oOny1iLYz5s3hj2uSVj6eXzZNN3Udl+ezQfufZ4aVI= Subject key identifier: B8:F3:60:25:3F:DA:80:8E:8E:2F:DF:1A:2D:FB:D8:C5:14:87:76:7C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CB12389276DA71CE6020540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66940ea7-aaf4-35ce-93c1-341441c2a308.roa Signing time: Thu 23 Oct 2025 01:30:43 +0000 ROA not before: Thu 23 Oct 2025 01:30:43 +0000 ROA not after: Wed 21 Jan 2026 02:30:43 +0000 asID: 6167 IP address blocks: 166.255.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:b1:23:89:27:6d:a7:1c:e6:02:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 01:30:43 2025 GMT Not After : Jan 21 02:30:43 2026 GMT Subject: CN=a4d73f1a-2126-4ede-9e58-3fc944dd8821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:c9:96:91:5f:37:34:48:d3:e8:dc:b6:85: e2:86:c8:f7:76:0e:95:73:b6:24:17:9c:9a:6d:25: 7f:c7:70:ab:d6:38:b1:6e:06:fa:f0:b4:48:d6:c1: e1:e4:4c:e1:48:36:b5:4d:30:e6:aa:73:09:ac:07: 06:21:e3:5e:27:ce:2c:7c:34:66:57:92:77:19:74: 1f:8a:83:99:57:d4:95:5c:5a:39:1a:2c:8b:a5:d9: 42:d6:13:1f:a2:c8:6e:75:f4:6c:b9:bf:ec:4d:4b: 39:09:8f:e8:82:c7:63:18:88:64:4f:ae:c0:0b:e0: 3c:53:43:3f:e2:35:79:60:90:9f:ff:3c:ef:35:d2: 54:71:77:4e:f2:56:b3:e6:32:f0:12:56:c6:21:d8: 14:f7:84:19:ab:d6:ca:24:7e:5b:7d:66:ab:cb:c7: 4c:0d:10:57:56:a4:8c:2a:8c:ab:a1:fd:81:29:79: f0:b7:a7:82:28:a9:52:1e:db:58:8c:4d:04:72:36: 06:f1:67:09:8a:11:54:c9:0b:f4:da:13:50:ad:da: 4f:fc:1a:f0:45:34:f4:b9:1e:df:87:ba:de:66:09: c6:ca:8e:f0:9c:1c:82:c1:81:9b:ea:3b:b0:53:2a: 7c:2a:f1:1a:38:a6:3b:3b:5f:49:50:1d:97:8d:d2: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F3:60:25:3F:DA:80:8E:8E:2F:DF:1A:2D:FB:D8:C5:14:87:76:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66940ea7-aaf4-35ce-93c1-341441c2a308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.255.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5f:1d:f7:81:6b:73:ac:93:61:84:1f:83:d0:92:3f:a1:0b: de:4c:33:9f:c4:17:92:34:f1:49:8b:e0:37:8a:4e:7f:b7:7e: c6:35:97:64:63:ed:0c:d3:1f:99:63:70:af:76:5d:98:41:88: e1:93:95:05:28:01:36:90:a3:01:3d:99:66:9f:b1:bb:83:7f: fa:c6:7f:13:1c:1d:8d:b7:96:e9:46:25:d7:9a:a8:6e:32:d7: 48:0d:6f:e2:85:79:6e:7d:59:04:76:d6:af:dd:5b:4a:b3:a7: bd:fb:c8:68:4b:f1:2b:ec:03:cf:58:ae:28:f8:a0:b3:ba:ab: d3:b2:9f:37:58:ec:5a:02:9d:8b:46:43:87:73:5b:ee:52:bc: e8:0b:e3:90:b5:02:db:98:95:31:1a:bb:72:1a:2b:32:be:bc: bb:49:e2:b8:34:10:c8:20:40:c2:87:7c:30:0e:21:36:61:bc: 28:f0:8a:f4:d2:f9:71:f2:75:d2:c4:a3:ec:05:e0:14:26:a8: ea:46:fe:16:b4:ca:15:1b:0d:3a:ab:4a:7b:21:25:03:49:a2: a2:19:b2:7f:f7:46:7c:14:0a:c8:db:8b:07:f7:a4:e8:90:57: 9e:3a:5b:38:eb:ff:26:e0:09:75:91:98:9f:43:01:8e:8a:b4: 88:db:7b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucsSOJJ22nHOYCBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAxMzA0M1oXDTI2MDEyMTAyMzA0M1owLzEtMCsGA1UEAxMk YTRkNzNmMWEtMjEyNi00ZWRlLTllNTgtM2ZjOTQ0ZGQ4ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxebJlpFfNzRI0+jctoXihsj3dg6Vc7YkF5ya bSV/x3Cr1jixbgb68LRI1sHh5EzhSDa1TTDmqnMJrAcGIeNeJ84sfDRmV5J3GXQf ioOZV9SVXFo5GiyLpdlC1hMfoshudfRsub/sTUs5CY/ogsdjGIhkT67AC+A8U0M/ 4jV5YJCf/zzvNdJUcXdO8laz5jLwElbGIdgU94QZq9bKJH5bfWary8dMDRBXVqSM Koyrof2BKXnwt6eCKKlSHttYjE0EcjYG8WcJihFUyQv02hNQrdpP/BrwRTT0uR7f h7reZgnGyo7wnByCwYGb6juwUyp8KvEaOKY7O19JUB2XjdK3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjzYCU/2oCOji/fGi372MUUh3Z8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjY5NDBlYTctYWFmNC0z NWNlLTkzYzEtMzQxNDQxYzJhMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpv+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9fHfeBa3Osk2GEH4PQkj+hC95MM5/EF5I08UmL4DeKTn+3fsY1l2Rj 7QzTH5ljcK92XZhBiOGTlQUoATaQowE9mWafsbuDf/rGfxMcHY23lulGJdeaqG4y 10gNb+KFeW59WQR21q/dW0qzp737yGhL8SvsA89Yrij4oLO6q9OynzdY7FoCnYtG Q4dzW+5SvOgL45C1AtuYlTEau3IaKzK+vLtJ4rg0EMggQMKHfDAOITZhvCjwivTS +XHyddLEo+wF4BQmqOpG/ha0yhUbDTqrSnshJQNJoqIZsn/3RnwUCsjbiwf3pOiQ V546Wzjr/ybgCXWRmJ9DAY6KtIjbew4= -----END CERTIFICATE-----Generated at Sat Oct 25 10:49:01 2025 by rpki-client