$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/796323a2-45d9-31a8-960e-b9a6f032bc6a.roa File: 796323a2-45d9-31a8-960e-b9a6f032bc6a.roa (raw, json) Hash identifier: k6ThNZ7OQ1mugtV56oGahYIUmkE35AR/INj6r/A99Ws= Subject key identifier: 9A:AF:C6:10:53:AD:3B:59:CB:5A:FF:10:EB:FA:61:2B:50:34:69:4B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BBD438B39753A4E091C2350E0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/796323a2-45d9-31a8-960e-b9a6f032bc6a.roa Signing time: Mon 03 Nov 2025 17:31:34 +0000 ROA not before: Mon 03 Nov 2025 17:31:34 +0000 ROA not after: Sun 01 Feb 2026 17:31:34 +0000 asID: 401152 IP address blocks: 166.1.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:43:8b:39:75:3a:4e:09:1c:23:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 3 17:31:34 2025 GMT Not After : Feb 1 17:31:34 2026 GMT Subject: CN=e510ffe5-0371-4212-a4b6-2a88c655dd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:c2:38:41:c2:48:84:1e:f7:c2:e1:42:7d: fa:d1:ca:b7:fd:e0:10:b4:8f:69:e5:24:e0:9f:f4: 01:d1:64:a8:a3:ce:6e:dd:29:3a:09:50:7b:92:53: e5:34:13:8d:b0:62:f8:d5:7c:14:19:29:24:94:2f: fc:3d:ef:75:ac:01:db:98:83:19:b7:ab:43:a9:b7: 04:bc:c1:0d:af:c9:d8:08:6a:83:48:08:9b:6c:85: e8:33:3b:0f:9b:90:ab:7e:41:b5:b4:57:5d:d9:92: 1a:e5:63:df:e6:4d:a0:41:66:98:78:62:5e:1f:11: 75:f0:75:9d:3b:73:21:18:20:b8:5b:cd:d5:cf:ed: b4:78:13:36:8d:24:b6:c5:a0:f8:b4:a0:63:3a:ee: a7:7d:b3:0d:89:41:e0:fe:96:b3:28:ef:2b:2c:b5: ef:b4:80:9e:0e:e6:22:73:ab:0b:53:79:d8:b9:85: a9:a3:b8:59:98:fa:ff:a3:c2:19:f9:a0:ff:b2:01: 99:d9:fe:84:1c:e4:50:61:7a:39:28:c7:32:1d:70: 90:d0:21:be:1b:31:6d:1b:02:71:b1:c5:79:39:4a: 15:91:db:4a:90:a5:a1:f8:cb:0a:78:7a:2e:2b:a0: 11:fd:35:e1:82:9e:71:c2:05:eb:fd:2e:81:7d:5f: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:C6:10:53:AD:3B:59:CB:5A:FF:10:EB:FA:61:2B:50:34:69:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/796323a2-45d9-31a8-960e-b9a6f032bc6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4e:85:04:ca:a0:01:df:ae:66:17:ef:58:de:6b:0a:c0:22: 07:6f:23:d1:cb:77:e6:d1:55:d7:d9:1d:7c:aa:3a:a8:e4:1b: ba:e1:c4:5a:7e:46:ac:97:97:53:d8:d4:a2:4d:14:d5:3a:2d: 9a:a3:26:eb:37:e4:6e:e0:36:28:47:89:c0:1b:c0:83:f8:37: eb:e1:97:86:ff:02:da:cc:0f:27:c0:57:d6:12:53:6a:75:b3: 4d:b9:63:50:ac:57:ff:49:a8:a1:e6:5e:4f:10:a9:53:42:b6: 78:29:41:42:1f:0d:59:7b:50:1b:37:64:06:1b:1a:09:fc:c2: ee:c2:52:36:2f:f0:61:3d:34:e7:b2:5e:52:55:a8:7c:f7:37: 2a:a8:f5:1b:b5:82:e8:41:ac:bb:4c:3b:28:23:81:4c:7a:98: 6f:21:28:bd:6b:09:64:34:5f:aa:57:b5:89:39:82:c6:a9:33: d0:22:d0:8f:9b:4f:21:c3:55:b3:d6:b7:67:f7:74:83:ef:bf: 5b:d1:20:c0:e4:b1:21:fa:2b:53:9f:16:eb:b8:3d:bf:40:a3: 58:e1:6c:82:26:58:03:c7:b3:f4:c5:c4:e8:15:e4:aa:a7:d8: 81:c1:2d:56:54:12:f1:e5:27:d0:21:0b:54:f4:9e:6d:ae:bf: d5:6f:6e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu9Q4s5dTpOCRwjUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTEwMzE3MzEzNFoXDTI2MDIwMTE3MzEzNFowLzEtMCsGA1UEAxMk ZTUxMGZmZTUtMDM3MS00MjEyLWE0YjYtMmE4OGM2NTVkZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvbCOEHCSIQe98LhQn360cq3/eAQtI9p5STg n/QB0WSoo85u3Sk6CVB7klPlNBONsGL41XwUGSkklC/8Pe91rAHbmIMZt6tDqbcE vMENr8nYCGqDSAibbIXoMzsPm5CrfkG1tFdd2ZIa5WPf5k2gQWaYeGJeHxF18HWd O3MhGCC4W83Vz+20eBM2jSS2xaD4tKBjOu6nfbMNiUHg/pazKO8rLLXvtICeDuYi c6sLU3nYuYWpo7hZmPr/o8IZ+aD/sgGZ2f6EHORQYXo5KMcyHXCQ0CG+GzFtGwJx scV5OUoVkdtKkKWh+MsKeHouK6AR/TXhgp5xwgXr/S6BfV+gmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqvxhBTrTtZy1r/EOv6YStQNGlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzk2MzIzYTItNDVkOS0z MWE4LTk2MGUtYjlhNmYwMzJiYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9OhQTKoAHfrmYX71jeawrAIgdvI9HLd+bRVdfZHXyqOqjkG7rhxFp+ RqyXl1PY1KJNFNU6LZqjJus35G7gNihHicAbwIP4N+vhl4b/AtrMDyfAV9YSU2p1 s025Y1CsV/9JqKHmXk8QqVNCtngpQUIfDVl7UBs3ZAYbGgn8wu7CUjYv8GE9NOey XlJVqHz3Nyqo9Ru1guhBrLtMOygjgUx6mG8hKL1rCWQ0X6pXtYk5gsapM9Ai0I+b TyHDVbPWt2f3dIPvv1vRIMDksSH6K1OfFuu4Pb9Ao1jhbIImWAPHs/TFxOgV5Kqn 2IHBLVZUEvHlJ9AhC1T0nm2uv9VvboQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:01:14 2025 by rpki-client