$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/619b7040-124b-302a-b5e7-0d812b1f23c4.roa File: 619b7040-124b-302a-b5e7-0d812b1f23c4.roa (raw, json) Hash identifier: sud9GkcQCm2+ecDacLKFI8BG4DwjsyE7W5dK9P1yxDY= Subject key identifier: 8E:8F:A5:77:7D:64:70:4F:0E:EC:06:54:B5:57:1D:D7:E0:27:0F:33 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A71EB263D5F9FB5142307A0C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/619b7040-124b-302a-b5e7-0d812b1f23c4.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 212238 IP address blocks: 166.0.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:26:3d:5f:9f:b5:14:23:07:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=b5637889-2a76-422d-b80e-86e3c846f339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:6e:87:70:c3:2d:c8:35:da:b2:d2:7d:3d: 94:20:98:94:9e:90:f4:33:84:f7:8d:99:18:e4:5f: 51:9a:f8:87:0e:ed:3d:25:8d:55:db:74:ca:84:bd: 5f:77:10:e2:87:bb:be:5c:e0:ef:17:c6:c5:00:05: 17:03:7a:73:a0:11:73:28:ba:b2:dd:7d:d1:da:f8: dc:65:b7:df:98:82:f1:7d:4c:54:d6:87:71:ec:b7: 5c:15:f3:fd:51:8a:4c:89:5f:81:83:cd:5e:cc:98: eb:55:4e:80:50:1e:38:a2:c5:04:a1:fe:71:2a:36: 74:05:a7:ad:69:e0:be:e8:43:d1:6b:72:58:a3:32: c2:0a:7d:45:dc:28:bf:cf:9e:0d:6f:28:fc:60:ca: ba:34:03:0c:33:2d:8b:07:e9:83:9e:f2:af:9e:cf: 00:53:92:65:c0:15:7e:57:ca:83:ff:5c:95:4f:5f: 95:bb:bd:20:d2:79:b9:3b:4c:33:87:c2:dd:de:87: b6:95:68:46:66:c0:a7:f9:29:30:17:d8:0e:03:da: 1c:d7:5c:03:94:ad:93:37:0c:7a:56:bd:29:0c:49: d2:df:1d:7a:97:e8:f9:60:b0:35:72:53:f2:ea:90: 29:ad:ed:4b:c1:b8:2a:14:1b:64:4a:06:1a:03:35: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8F:A5:77:7D:64:70:4F:0E:EC:06:54:B5:57:1D:D7:E0:27:0F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/619b7040-124b-302a-b5e7-0d812b1f23c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:56:56:0d:04:8c:8c:d0:bc:b3:15:1e:a6:f8:16:4c:2d:84: 10:2d:d2:00:b4:6a:64:9c:54:70:3d:14:ab:85:98:03:f0:4e: ab:02:c5:c7:65:00:fb:91:41:df:fe:62:04:cf:5e:fc:26:e3: 26:6f:fc:ca:72:39:33:18:15:38:c6:37:85:92:7e:01:bf:a7: 8c:04:55:89:91:20:cd:f9:c5:52:b7:64:47:f6:18:5a:82:48: e1:c7:c6:91:da:2a:29:52:e5:3b:4f:53:cf:17:98:aa:d3:9a: 54:34:ba:4b:93:3d:b1:7a:e0:45:1f:fc:ed:dd:8b:86:52:9d: a2:b2:3a:41:ac:7a:58:ba:7c:48:ca:03:31:35:2b:85:b8:b0: e9:65:9e:2a:16:eb:0c:11:a6:63:1c:d6:e9:c1:ce:2c:76:2a: 26:b9:2a:9e:d6:9d:fe:b9:5c:6b:7c:82:30:43:08:30:8c:57: c2:7e:95:f8:7d:b4:69:f4:1a:9d:f0:ac:af:5b:d2:b1:18:c2: f4:68:01:76:92:54:42:3d:53:e1:0f:48:df:80:71:e2:f8:4f: 3a:2a:5c:71:e8:0e:97:f9:74:99:55:49:85:2f:16:e4:cb:ea: a3:b9:6e:60:20:42:55:25:46:a0:e8:18:f9:40:6c:cb:60:ab: 3a:e5:32:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6yY9X5+1FCMHoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk YjU2Mzc4ODktMmE3Ni00MjJkLWI4MGUtODZlM2M4NDZmMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJRuh3DDLcg12rLSfT2UIJiUnpD0M4T3jZkY 5F9RmviHDu09JY1V23TKhL1fdxDih7u+XODvF8bFAAUXA3pzoBFzKLqy3X3R2vjc ZbffmILxfUxU1odx7LdcFfP9UYpMiV+Bg81ezJjrVU6AUB44osUEof5xKjZ0Baet aeC+6EPRa3JYozLCCn1F3Ci/z54Nbyj8YMq6NAMMMy2LB+mDnvKvns8AU5JlwBV+ V8qD/1yVT1+Vu70g0nm5O0wzh8Ld3oe2lWhGZsCn+SkwF9gOA9oc11wDlK2TNwx6 Vr0pDEnS3x16l+j5YLA1clPy6pApre1LwbgqFBtkSgYaAzUVAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6PpXd9ZHBPDuwGVLVXHdfgJw8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjE5YjcwNDAtMTI0Yi0z MDJhLWI1ZTctMGQ4MTJiMWYyM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZWVg0EjIzQvLMVHqb4FkwthBAt0gC0amScVHA9FKuFmAPwTqsCxcdl APuRQd/+YgTPXvwm4yZv/MpyOTMYFTjGN4WSfgG/p4wEVYmRIM35xVK3ZEf2GFqC SOHHxpHaKilS5TtPU88XmKrTmlQ0ukuTPbF64EUf/O3di4ZSnaKyOkGseli6fEjK AzE1K4W4sOllnioW6wwRpmMc1unBzix2Kia5Kp7Wnf65XGt8gjBDCDCMV8J+lfh9 tGn0Gp3wrK9b0rEYwvRoAXaSVEI9U+EPSN+AceL4TzoqXHHoDpf5dJlVSYUvFuTL 6qO5bmAgQlUlRqDoGPlAbMtgqzrlMh0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:11:47 2025 by rpki-client