$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b875c-2fdb-3810-be05-06ff26439db0.roa File: aa2b875c-2fdb-3810-be05-06ff26439db0.roa (raw, json) Hash identifier: oUqKFe2W/WwTfNR24hqo880JgY/rp9gy7d2RFyg4GvQ= Subject key identifier: 96:9A:00:7E:F3:6C:D2:31:EB:16:AC:B3:A8:71:20:1A:C8:01:58:AF Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EA17AB0B0F91159D4484CE800 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b875c-2fdb-3810-be05-06ff26439db0.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 9009 IP address blocks: 166.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:b0:b0:f9:11:59:d4:48:4c:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=41bc5bdc-3ffd-47f2-8c8c-4da2a1144209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b2:8f:91:10:a1:88:50:48:cc:8b:1f:d9:b0: 90:5d:b6:63:b8:f0:fc:6a:93:05:1d:44:cf:02:33: 3a:34:ad:58:bf:80:c7:e6:93:66:17:47:2c:90:c1: 0a:e1:23:b3:61:36:31:76:53:06:87:ed:03:15:c6: d8:ec:0c:10:87:75:1d:e4:94:58:9f:ba:41:f5:47: 73:63:7d:4c:f9:84:ee:62:fd:20:d9:90:50:f9:b2: d7:1b:de:2d:25:84:a3:a8:79:b3:23:09:ab:b4:bd: 76:09:3b:c1:eb:1c:64:6b:7a:86:69:86:85:84:e7: a6:3f:95:2f:d7:72:62:03:7e:44:d5:dd:3d:d6:9e: 69:ad:e0:a3:31:74:11:16:2f:e8:f0:c0:fd:80:f3: a7:72:d3:93:7d:8e:ca:92:e5:4a:78:78:4b:ac:da: 8a:da:5a:95:42:64:04:11:c1:40:d5:8c:6e:df:62: a3:5f:22:c7:39:3a:f7:3b:1f:c8:55:d5:43:05:72: dc:1c:e5:c1:93:d3:2e:b2:26:1d:ab:f0:52:5d:0f: 9f:2e:66:ea:f4:b9:13:f0:2e:41:4e:f5:ba:a7:ca: 6e:e4:d6:ca:a1:26:6a:e4:34:3b:f8:bd:a8:9c:22: 2c:54:79:45:b2:69:48:4c:06:46:ac:c9:ee:9d:0a: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:00:7E:F3:6C:D2:31:EB:16:AC:B3:A8:71:20:1A:C8:01:58:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b875c-2fdb-3810-be05-06ff26439db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bb:88:f8:3d:05:71:21:51:a2:1c:04:66:e7:30:70:1d:03: 8d:87:d5:20:11:7c:e2:28:e7:44:fc:c2:d3:9a:19:2d:9a:19: 94:ea:53:2c:28:4c:4a:ed:50:b7:c9:55:b5:52:1b:2a:8c:3e: 03:16:ad:42:a6:ab:65:61:21:bb:57:3e:e3:80:2a:c0:74:59: 77:7a:9d:c8:e5:c8:a2:0f:f2:5a:2d:76:59:0a:8a:b1:9f:1e: ca:08:65:db:4d:cb:b5:9d:a8:4e:98:b7:7c:0f:83:d2:77:07: e3:72:88:93:4a:19:73:e7:e6:2f:dc:da:90:dd:7b:13:be:50: 37:f0:dd:21:3b:44:2e:b6:95:11:1f:2e:e5:82:aa:c2:61:e9: cc:ad:92:d8:0a:90:51:fd:1d:bf:3c:a2:86:0f:e4:55:cf:09: 06:90:54:49:c2:44:2e:17:eb:fd:b8:36:42:96:f3:ee:29:28: 73:0b:95:8a:72:63:53:b1:45:fb:e1:82:da:14:70:c8:d4:f7: 2d:60:73:b2:e7:82:26:c9:3f:22:a8:ac:7d:22:fd:54:93:ae: cf:65:1f:e7:b9:52:b7:9d:fa:9a:9d:03:5c:aa:bf:2a:42:25: b0:95:0f:b0:a0:47:04:47:80:de:8d:1d:20:fb:95:54:8e:66: a5:40:3f:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6herCw+RFZ1EhM6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NDFiYzViZGMtM2ZmZC00N2YyLThjOGMtNGRhMmExMTQ0MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7KPkRChiFBIzIsf2bCQXbZjuPD8apMFHUTP AjM6NK1Yv4DH5pNmF0cskMEK4SOzYTYxdlMGh+0DFcbY7AwQh3Ud5JRYn7pB9Udz Y31M+YTuYv0g2ZBQ+bLXG94tJYSjqHmzIwmrtL12CTvB6xxka3qGaYaFhOemP5Uv 13JiA35E1d091p5preCjMXQRFi/o8MD9gPOnctOTfY7KkuVKeHhLrNqK2lqVQmQE EcFA1Yxu32KjXyLHOTr3Ox/IVdVDBXLcHOXBk9MusiYdq/BSXQ+fLmbq9LkT8C5B TvW6p8pu5NbKoSZq5DQ7+L2onCIsVHlFsmlITAZGrMnunQpSnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaaAH7zbNIx6xass6hxIBrIAVivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWEyYjg3NWMtMmZkYi0z ODEwLWJlMDUtMDZmZjI2NDM5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm7iPg9BXEhUaIcBGbnMHAdA42H1SARfOIo50T8wtOaGS2aGZTqUywo TErtULfJVbVSGyqMPgMWrUKmq2VhIbtXPuOAKsB0WXd6ncjlyKIP8lotdlkKirGf HsoIZdtNy7WdqE6Yt3wPg9J3B+NyiJNKGXPn5i/c2pDdexO+UDfw3SE7RC62lREf LuWCqsJh6cytktgKkFH9Hb88ooYP5FXPCQaQVEnCRC4X6/24NkKW8+4pKHMLlYpy Y1OxRfvhgtoUcMjU9y1gc7LngibJPyKorH0i/VSTrs9lH+e5Ured+pqdA1yqvypC JbCVD7CgRwRHgN6NHSD7lVSOZqVAPw0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:42:57 2026 by rpki-client