$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa File: efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa (raw, json) Hash identifier: DFNMSetTJwJ5YsyJGB2EY+AipL2SpLS2ZKbWiy8qjCU= Subject key identifier: A9:0A:2E:17:70:F3:4E:EE:70:80:25:D7:87:A5:E3:C9:22:C7:98:16 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A68F4BAC4AC238A077F2F9040 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa Signing time: Fri 04 Jul 2025 19:57:56 +0000 ROA not before: Fri 04 Jul 2025 19:57:56 +0000 ROA not after: Thu 02 Oct 2025 19:57:56 +0000 asID: 213823 IP address blocks: 166.0.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:f4:ba:c4:ac:23:8a:07:7f:2f:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 4 19:57:56 2025 GMT Not After : Oct 2 19:57:56 2025 GMT Subject: CN=afb407bf-a9b4-4d50-a73a-822916ced4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:0e:59:08:a5:90:14:f7:9b:13:02:24:a8: 83:30:1a:ed:34:b8:64:4a:5e:9f:94:e1:df:97:5c: 94:ac:46:58:89:8f:65:1b:6b:c0:8e:e9:74:36:fe: 5f:8a:89:a3:9a:fe:2c:38:e2:f0:aa:19:0c:41:76: 9e:68:b2:94:b8:dd:a0:77:d3:8a:dd:62:93:0f:32: b4:6f:0b:0a:ce:89:6b:09:d1:d4:30:22:21:04:73: 71:0f:a8:c0:cd:04:82:ad:67:7c:cc:f4:b0:59:2f: 9c:1d:cd:51:f5:eb:da:0a:6e:de:39:cd:49:82:8a: eb:4f:cf:3c:d7:d0:6e:3f:af:8e:c8:f4:06:a9:f9: 00:a2:f8:aa:fe:d7:8a:fd:3a:ae:c7:a2:e5:86:38: c6:1c:5a:71:57:a0:d4:35:78:98:a9:7a:76:c7:00: 07:8f:a9:3f:91:21:d7:22:7f:56:5c:e5:98:51:b5: 01:68:37:8e:7b:74:cf:cd:0a:e8:57:a0:e5:0a:42: 54:b9:b7:c5:d4:ed:9d:28:c3:7a:53:4a:f0:23:33: 69:5a:f0:35:aa:c6:99:88:e2:c4:7a:f4:d4:f6:a2: 56:0b:b0:94:1b:55:8c:f3:5e:c6:02:4e:bb:77:21: 94:2b:71:6e:56:f6:82:8e:e4:bf:b4:fe:88:1a:85: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:2E:17:70:F3:4E:EE:70:80:25:D7:87:A5:E3:C9:22:C7:98:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:61:34:9a:98:38:7f:f6:79:12:0a:26:64:11:91:57:20:49: 11:d2:9c:fc:85:81:e7:b1:b4:43:22:5a:4a:ea:c6:12:17:a1: a2:6a:af:2d:d6:ac:69:ec:50:7e:21:84:36:1d:1d:1f:7b:19: d2:6e:33:0f:78:6e:e6:7b:ab:6b:dd:c4:6b:d0:92:97:fb:e9: 2a:a7:2f:16:13:07:4b:3e:a0:d8:3e:7b:cd:f2:d7:97:01:0f: a8:fe:21:cb:4f:3f:bb:e9:d3:07:bd:47:ee:89:2a:d9:b5:e9: de:21:76:4a:f1:bd:55:e9:46:e2:3b:9c:80:7a:f3:97:2b:c5: 8c:64:b2:db:ce:d2:e7:50:a2:4b:f4:f6:67:f1:61:9d:40:84: 3a:db:ca:cd:f2:aa:92:71:d3:2a:c6:18:76:aa:36:ae:ed:47: 95:1d:fc:c9:2f:6c:2a:c7:28:30:c9:eb:aa:ee:e6:1c:35:81: be:03:c5:ae:bc:58:3b:9c:38:4b:7b:a8:bb:6b:42:eb:51:e6: a0:69:19:80:c6:b7:d4:3c:50:5c:44:82:ed:19:f6:8e:e6:82: a2:a5:a9:e8:38:ba:5e:55:aa:7f:78:a2:80:8e:17:ca:07:93: ab:4e:95:6b:45:78:9d:d3:47:a5:dc:7d:ea:d6:e5:e0:1d:a0: 2a:b8:f3:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpo9LrErCOKB38vkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwNDE5NTc1NloXDTI1MTAwMjE5NTc1NlowLzEtMCsGA1UEAxMk YWZiNDA3YmYtYTliNC00ZDUwLWE3M2EtODIyOTE2Y2VkNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuQOWQilkBT3mxMCJKiDMBrtNLhkSl6flOHf l1yUrEZYiY9lG2vAjul0Nv5fiomjmv4sOOLwqhkMQXaeaLKUuN2gd9OK3WKTDzK0 bwsKzolrCdHUMCIhBHNxD6jAzQSCrWd8zPSwWS+cHc1R9evaCm7eOc1JgorrT888 19BuP6+OyPQGqfkAoviq/teK/Tqux6LlhjjGHFpxV6DUNXiYqXp2xwAHj6k/kSHX In9WXOWYUbUBaDeOe3TPzQroV6DlCkJUubfF1O2dKMN6U0rwIzNpWvA1qsaZiOLE evTU9qJWC7CUG1WM817GAk67dyGUK3FuVvaCjuS/tP6IGoUmqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkKLhdw807ucIAl14el48kix5gWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWZkMGFhYTMtYjFjZi0z ZWUxLWI2NzktZDIzM2U3OGU4YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlhNJqYOH/2eRIKJmQRkVcgSRHSnPyFgeextEMiWkrqxhIXoaJqry3W rGnsUH4hhDYdHR97GdJuMw94buZ7q2vdxGvQkpf76SqnLxYTB0s+oNg+e83y15cB D6j+IctPP7vp0we9R+6JKtm16d4hdkrxvVXpRuI7nIB685crxYxkstvO0udQokv0 9mfxYZ1AhDrbys3yqpJx0yrGGHaqNq7tR5Ud/MkvbCrHKDDJ66ru5hw1gb4Dxa68 WDucOEt7qLtrQutR5qBpGYDGt9Q8UFxEgu0Z9o7mgqKlqeg4ul5Vqn94ooCOF8oH k6tOlWtFeJ3TR6XcferW5eAdoCq4840= -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:37 2025 by rpki-client