$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02a9fc70-a0dd-3c77-be0b-63a2f9151264.roa File: 02a9fc70-a0dd-3c77-be0b-63a2f9151264.roa (raw, json) Hash identifier: IS7Xl5w2mdHpLryrN2io6FrUdzFeMYS+V+7wom6s0mc= Subject key identifier: 16:CF:B9:39:31:87:BA:C2:C3:FB:76:17:B3:68:91:6B:B6:98:2C:83 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B52A7425F84249DBD588F1280 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02a9fc70-a0dd-3c77-be0b-63a2f9151264.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 212238 IP address blocks: 166.0.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:42:5f:84:24:9d:bd:58:8f:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=9930cddb-68fb-4779-93ba-d789e0e49d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:39:a7:1b:76:35:37:13:46:19:2a:1e:86: 24:8c:f6:78:57:fd:1a:ed:40:39:e2:04:06:5c:b1: 49:01:1e:23:2d:11:bf:d9:de:1b:98:60:d3:d7:63: e3:f1:dd:9c:9b:36:d5:fc:46:d1:41:c3:9b:dd:a9: de:82:71:f2:9d:17:e6:67:49:7d:77:00:6e:34:23: fb:62:6c:4b:a8:c0:bb:55:14:5c:a5:63:cd:76:28: 33:de:02:7a:a8:47:77:28:5d:93:76:68:f5:4e:9a: 22:f1:55:98:6f:95:63:8c:d9:30:3d:59:87:c8:3f: 4d:f7:a0:9e:47:d1:cd:dd:3c:e5:76:7f:01:c2:4d: 40:59:38:58:cd:96:62:47:48:98:73:e3:ae:6f:e6: 33:9c:58:27:28:92:44:c4:ec:bd:d3:7d:5d:36:19: a5:41:58:4a:fc:f5:99:ab:e3:07:4e:ad:b6:14:07: cf:49:2e:4d:9e:8f:fb:01:a3:7a:34:1c:f3:05:eb: 94:45:f8:27:85:e2:a6:53:f7:56:94:43:9f:ba:44: 97:f7:5d:06:02:93:14:03:a3:2a:5f:73:ad:cc:b9: ff:65:c3:b9:28:0f:1e:5a:8f:63:88:3b:d1:13:1a: d4:39:71:e5:d1:31:b2:31:7c:17:14:09:82:35:a2: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:B9:39:31:87:BA:C2:C3:FB:76:17:B3:68:91:6B:B6:98:2C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02a9fc70-a0dd-3c77-be0b-63a2f9151264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0a:ad:e5:8e:fc:a2:4b:bb:d5:af:58:7d:5f:1a:50:bf:7b: 59:7e:e0:9f:28:a5:86:ed:3d:00:d1:1d:39:f4:d8:04:9a:08: fc:f8:56:db:8f:db:ce:1e:d5:d9:b4:9b:e8:04:fc:01:e3:1b: 36:6e:1a:1e:39:79:56:2f:21:91:a0:14:10:e0:40:32:68:e6: 89:d4:03:44:5c:08:5b:12:9e:58:4e:09:dc:93:1c:fe:41:88: ab:78:28:3b:53:71:52:13:04:c9:c0:ff:3e:d3:1c:91:f3:7d: 11:7e:eb:2d:ac:be:b3:de:37:cf:45:ab:01:b0:af:61:af:32: 00:43:da:3e:8c:98:1b:38:3e:97:16:48:92:ef:ee:e7:61:a2: 07:52:65:34:66:77:63:9d:2c:e3:3f:29:e1:6f:05:8d:3d:d4: d5:d9:a4:eb:32:8d:81:d4:03:53:56:28:4b:6b:d5:a3:1c:0d: dd:9b:a3:94:a6:55:8c:da:1d:2d:ca:91:a0:6d:21:0b:30:02: 06:df:43:ee:3b:54:bf:54:88:d7:db:0d:95:21:2c:c3:7a:76: 5e:93:57:f7:1c:02:f5:e1:cb:2b:46:58:c7:11:07:c6:f2:84: f8:a7:39:dd:f0:94:59:12:21:51:3e:2c:fc:2f:65:83:20:90: ed:2b:61:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp0JfhCSdvViPEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OTkzMGNkZGItNjhmYi00Nzc5LTkzYmEtZDc4OWUwZTQ5ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VM5pxt2NTcTRhkqHoYkjPZ4V/0a7UA54gQG XLFJAR4jLRG/2d4bmGDT12Pj8d2cmzbV/EbRQcOb3anegnHynRfmZ0l9dwBuNCP7 YmxLqMC7VRRcpWPNdigz3gJ6qEd3KF2Tdmj1Tpoi8VWYb5VjjNkwPVmHyD9N96Ce R9HN3Tzldn8Bwk1AWThYzZZiR0iYc+Oub+YznFgnKJJExOy9031dNhmlQVhK/PWZ q+MHTq22FAfPSS5Nno/7AaN6NBzzBeuURfgnheKmU/dWlEOfukSX910GApMUA6Mq X3OtzLn/ZcO5KA8eWo9jiDvRExrUOXHl0TGyMXwXFAmCNaLJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbPuTkxh7rCw/t2F7NokWu2mCyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDJhOWZjNzAtYTBkZC0z Yzc3LWJlMGItNjNhMmY5MTUxMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYKreWO/KJLu9WvWH1fGlC/e1l+4J8opYbtPQDRHTn02ASaCPz4VtuP 284e1dm0m+gE/AHjGzZuGh45eVYvIZGgFBDgQDJo5onUA0RcCFsSnlhOCdyTHP5B iKt4KDtTcVITBMnA/z7THJHzfRF+6y2svrPeN89FqwGwr2GvMgBD2j6MmBs4PpcW SJLv7udhogdSZTRmd2OdLOM/KeFvBY091NXZpOsyjYHUA1NWKEtr1aMcDd2bo5Sm VYzaHS3KkaBtIQswAgbfQ+47VL9UiNfbDZUhLMN6dl6TV/ccAvXhyytGWMcRB8by hPinOd3wlFkSIVE+LPwvZYMgkO0rYQo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:14 2025 by rpki-client