$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33592973-2807-3ce9-92a4-5e7a25b64578.roa File: 33592973-2807-3ce9-92a4-5e7a25b64578.roa (raw, json) Hash identifier: h2GtXuU3qwNXmztwST7tKHT/oXRrMTk3ho1ecrr3xt4= Subject key identifier: 62:1D:ED:0D:B9:BD:87:33:0D:AC:5F:34:29:A3:C2:D4:FC:27:2E:98 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AB0BB6F9C1A3D40E1E6C78430 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33592973-2807-3ce9-92a4-5e7a25b64578.roa Signing time: Wed 30 Jul 2025 13:00:40 +0000 ROA not before: Wed 30 Jul 2025 13:00:40 +0000 ROA not after: Tue 28 Oct 2025 13:00:40 +0000 asID: 62240 IP address blocks: 166.1.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b0:bb:6f:9c:1a:3d:40:e1:e6:c7:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 30 13:00:40 2025 GMT Not After : Oct 28 13:00:40 2025 GMT Subject: CN=2d657189-3a3c-4742-ae15-1cf35b36513e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:c9:4f:51:12:89:05:d6:1e:75:48:e0:6b: 1a:b1:b3:87:ca:01:9e:7c:d1:fb:66:e2:9e:77:93: 68:aa:d2:70:79:c7:ed:e7:31:f0:1c:33:d6:89:0c: 41:90:52:1e:96:6f:ea:af:f1:bd:7d:62:ae:7b:43: 5d:a8:11:e0:ac:3a:f3:b4:11:42:e9:b6:d3:b4:4f: 78:52:1c:7b:c8:b5:02:73:63:8b:08:47:ef:95:e3: 63:f3:f9:78:c7:6c:b7:17:81:d0:f5:f3:d4:62:f5: e1:d4:b7:1b:93:67:3c:66:51:84:da:7a:7d:2a:e2: 25:25:6f:88:26:d3:66:03:19:b1:04:5d:17:42:1b: 89:13:08:33:38:55:5e:ed:a0:43:4c:d7:77:2c:b3: 4c:6d:95:c0:e9:be:26:6c:5f:42:95:7f:6d:f9:d4: 27:f7:a0:4e:ab:f0:23:aa:7d:42:03:ee:73:24:8f: 65:67:ab:03:01:16:6f:a9:00:79:05:cd:6a:76:78: 3d:49:63:71:b4:a6:11:95:3d:10:8d:ee:b0:83:c8: 5f:a7:a4:b5:37:3f:37:b0:14:97:9d:37:ab:ab:44: cc:91:4a:a1:69:21:d0:ea:22:cf:56:d9:f8:6e:da: 98:4c:9d:8e:c8:19:26:a3:10:87:dc:26:e8:39:07: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1D:ED:0D:B9:BD:87:33:0D:AC:5F:34:29:A3:C2:D4:FC:27:2E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33592973-2807-3ce9-92a4-5e7a25b64578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b8:65:e3:46:1d:76:73:5c:a5:ba:56:7a:ce:df:a5:71:0b: 2d:10:b9:be:c3:05:1b:82:f9:fc:bd:fa:73:50:1e:0d:58:e5: 88:55:5a:14:93:ef:da:c0:d3:ab:ac:d5:f0:6c:33:0b:3c:b3: 37:35:24:bb:94:eb:41:cc:48:53:32:dd:d9:ef:34:8d:25:e5: 36:47:ea:a0:cd:24:79:31:05:3d:bf:c7:69:65:0d:6b:35:80: ec:de:f1:79:a0:21:64:75:bb:2b:e5:b9:fe:f3:a1:5f:61:a2: 3d:1e:99:9e:1f:1c:8f:1d:aa:82:5c:6f:2c:12:be:72:ad:a8: a1:41:62:be:31:51:20:93:ae:b3:be:49:89:65:71:e6:b0:3d: 05:95:9f:80:c4:c7:c5:c4:14:ce:83:da:47:39:8e:10:46:fb: 56:cd:2f:f6:2d:bf:87:bc:46:5b:4b:0e:69:c7:07:0a:f1:a9: 53:e1:05:5d:84:dd:2c:0a:1b:e1:55:cf:1f:2f:d0:99:e0:36: de:57:f7:ef:d2:4d:4f:d7:64:22:af:ef:02:56:ed:dc:7d:bc: 36:a2:ef:56:80:ae:b6:33:fb:80:6e:c7:a6:c6:d1:45:c8:fb: 7a:83:8a:44:3d:f5:24:e9:93:1e:6f:73:a6:bb:6b:13:45:11: 3f:e8:65:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwu2+cGj1A4ebHhDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDczMDEzMDA0MFoXDTI1MTAyODEzMDA0MFowLzEtMCsGA1UEAxMk MmQ2NTcxODktM2EzYy00NzQyLWFlMTUtMWNmMzViMzY1MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV3JT1ESiQXWHnVI4GsasbOHygGefNH7ZuKe d5NoqtJwecft5zHwHDPWiQxBkFIelm/qr/G9fWKue0NdqBHgrDrztBFC6bbTtE94 Uhx7yLUCc2OLCEfvleNj8/l4x2y3F4HQ9fPUYvXh1Lcbk2c8ZlGE2np9KuIlJW+I JtNmAxmxBF0XQhuJEwgzOFVe7aBDTNd3LLNMbZXA6b4mbF9ClX9t+dQn96BOq/Aj qn1CA+5zJI9lZ6sDARZvqQB5Bc1qdng9SWNxtKYRlT0Qje6wg8hfp6S1Nz83sBSX nTerq0TMkUqhaSHQ6iLPVtn4btqYTJ2OyBkmoxCH3CboOQeySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGId7Q25vYczDaxfNCmjwtT8Jy6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzM1OTI5NzMtMjgwNy0z Y2U5LTkyYTQtNWU3YTI1YjY0NTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy4ZeNGHXZzXKW6VnrO36VxCy0Qub7DBRuC+fy9+nNQHg1Y5YhVWhST 79rA06us1fBsMws8szc1JLuU60HMSFMy3dnvNI0l5TZH6qDNJHkxBT2/x2llDWs1 gOze8XmgIWR1uyvluf7zoV9hoj0emZ4fHI8dqoJcbywSvnKtqKFBYr4xUSCTrrO+ SYllceawPQWVn4DEx8XEFM6D2kc5jhBG+1bNL/Ytv4e8RltLDmnHBwrxqVPhBV2E 3SwKG+FVzx8v0JngNt5X9+/STU/XZCKv7wJW7dx9vDai71aArrYz+4Bux6bG0UXI +3qDikQ99STpkx5vc6a7axNFET/oZa4= -----END CERTIFICATE-----Generated at Mon Aug 4 08:27:13 2025 by rpki-client