$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb7bebd-88f7-332b-af83-597c4f59f423.roa File: 2cb7bebd-88f7-332b-af83-597c4f59f423.roa (raw, json) Hash identifier: /CWtRIxUBnmIE0FqxxOAcjEuGF6IC+ArKd+omqJgWqc= Subject key identifier: 50:84:66:90:1D:59:21:F2:3C:1A:86:4B:22:32:3F:48:95:CC:ED:41 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BB5C265D72D3F8F29FB2803C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb7bebd-88f7-332b-af83-597c4f59f423.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 15731 IP address blocks: 166.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:65:d7:2d:3f:8f:29:fb:28:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=d71a45ce-215c-4d8e-b864-9399b0e0dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:6f:3e:a6:d6:ca:d1:b0:be:6c:7a:cd:f9: 42:73:46:63:cf:3e:4e:cb:bc:2b:b8:aa:cf:e4:ff: ec:bb:2f:1c:85:6a:1c:9b:67:af:31:43:c4:de:50: 86:c1:b1:cc:cc:0b:86:31:fe:26:49:18:46:10:c3: 2e:ca:c8:fc:ec:e3:0a:52:68:d4:28:49:08:ec:e2: 19:99:e0:92:86:29:05:0b:38:37:95:ad:70:54:71: f8:20:73:70:0f:39:5a:91:00:80:52:97:84:6b:85: b3:76:20:dd:a3:f2:31:65:f0:ce:a1:b2:25:d1:5f: 86:2e:70:04:7c:08:05:80:46:28:07:fd:a3:3b:85: c9:18:a2:66:eb:82:c2:63:2a:ab:8b:b6:d9:b7:91: b0:f2:18:41:70:37:28:f0:e5:cd:42:c6:c4:40:f9: ac:7f:49:c7:bc:2b:0a:08:09:22:36:dd:67:b2:e2: 7a:c6:13:57:2c:e1:f8:37:c5:b1:09:51:13:06:6d: 28:4f:0e:1b:07:e5:b6:98:4b:ac:76:26:64:79:d5: c8:f9:79:93:1e:86:6f:f4:86:8f:b9:24:31:81:0c: 9b:b4:45:71:d0:8f:ba:d0:a8:be:3b:30:14:e2:cc: eb:af:47:a0:b7:51:20:53:90:b6:3b:77:e9:96:52: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:84:66:90:1D:59:21:F2:3C:1A:86:4B:22:32:3F:48:95:CC:ED:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb7bebd-88f7-332b-af83-597c4f59f423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:47:89:5f:c5:5d:cc:bf:d6:f1:0b:51:70:82:5c:20:32:42: ab:da:6b:75:d1:53:0b:85:ae:af:97:6a:9c:9b:ce:eb:56:bc: 4a:1f:5e:99:3a:75:06:60:01:85:f7:be:36:9b:38:74:ca:39: a4:b7:cf:08:51:f8:54:0d:05:95:c9:17:42:e9:12:a7:9f:7b: 4c:4e:d9:75:b5:69:ff:3d:69:f4:38:a5:17:0b:cc:d2:58:3a: 73:0c:52:e7:c8:52:71:62:59:91:8d:45:ba:75:3b:dd:59:4a: c7:79:bb:6e:89:6a:0c:ef:20:ea:2c:49:83:18:8c:36:64:02: 5f:93:01:88:eb:c3:d4:aa:10:96:02:96:7c:40:ce:0c:fd:d1: 85:80:39:f1:6b:01:15:3b:69:88:0f:e9:b3:7a:ae:85:7b:1c: 22:be:6f:f4:aa:e4:c3:5f:9c:4f:0a:12:b8:0f:87:af:50:21: 46:09:2c:59:42:c7:84:1c:35:8d:1a:d6:f5:f7:19:13:52:91: 6f:1b:12:eb:98:ea:f8:f5:f9:9a:51:af:d0:86:f7:72:a5:20: a3:24:c4:90:a2:03:c4:e7:f7:a2:85:1f:b6:84:8f:ba:b5:72: 97:4b:17:40:09:99:6f:d3:60:cc:40:a6:49:d9:d6:33:2d:3b: 2a:63:1f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmXXLT+PKfsoA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDcxYTQ1Y2UtMjE1Yy00ZDhlLWI4NjQtOTM5OWIwZTBkYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjlvPqbWytGwvmx6zflCc0Zjzz5Oy7wruKrP 5P/suy8chWocm2evMUPE3lCGwbHMzAuGMf4mSRhGEMMuysj87OMKUmjUKEkI7OIZ meCShikFCzg3la1wVHH4IHNwDzlakQCAUpeEa4WzdiDdo/IxZfDOobIl0V+GLnAE fAgFgEYoB/2jO4XJGKJm64LCYyqri7bZt5Gw8hhBcDco8OXNQsbEQPmsf0nHvCsK CAkiNt1nsuJ6xhNXLOH4N8WxCVETBm0oTw4bB+W2mEusdiZkedXI+XmTHoZv9IaP uSQxgQybtEVx0I+60Ki+OzAU4szrr0egt1EgU5C2O3fpllK/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCEZpAdWSHyPBqGSyIyP0iVzO1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmNiN2JlYmQtODhmNy0z MzJiLWFmODMtNTk3YzRmNTlmNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdHiV/FXcy/1vELUXCCXCAyQqvaa3XRUwuFrq+XapybzutWvEofXpk6 dQZgAYX3vjabOHTKOaS3zwhR+FQNBZXJF0LpEqefe0xO2XW1af89afQ4pRcLzNJY OnMMUufIUnFiWZGNRbp1O91ZSsd5u26JagzvIOosSYMYjDZkAl+TAYjrw9SqEJYC lnxAzgz90YWAOfFrARU7aYgP6bN6roV7HCK+b/Sq5MNfnE8KErgPh69QIUYJLFlC x4QcNY0a1vX3GRNSkW8bEuuY6vj1+ZpRr9CG93KlIKMkxJCiA8Tn96KFH7aEj7q1 cpdLF0AJmW/TYMxApknZ1jMtOypjHzs= -----END CERTIFICATE-----Generated at Tue Nov 4 18:52:52 2025 by rpki-client