$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57d75f4e-58e8-3422-9fa8-9b1709b01473.roa File: 57d75f4e-58e8-3422-9fa8-9b1709b01473.roa (raw, json) Hash identifier: wk5HFloOyKKvWIC27EV4Z26adWxfIuOm11QNUSTc4XM= Subject key identifier: 48:AF:CA:9A:72:B1:58:20:AA:3C:60:B7:05:FD:16:E4:6E:E2:55:59 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A6DBB5EACDB7ED2D762388800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57d75f4e-58e8-3422-9fa8-9b1709b01473.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 18779 IP address blocks: 166.88.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:5e:ac:db:7e:d2:d7:62:38:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=e7fb8dd7-af9b-413c-8fcd-b894ed89478d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:66:a9:8e:43:c4:46:13:c4:5a:11:23:1d: 16:b4:70:b1:03:1b:1b:59:04:9d:4d:50:29:3d:b3: 67:88:a3:95:2f:62:e0:4c:08:a1:51:93:f4:ef:90: f3:50:fd:bc:9d:0f:6f:48:81:cb:88:2a:d2:fe:05: d6:3b:d5:e3:71:f0:76:60:f3:a6:b6:bc:87:3f:74: e2:54:cd:cf:6d:a4:c9:31:8a:0b:56:89:d6:ac:6f: ad:d2:15:42:c1:39:b0:49:f3:87:c1:99:4d:b9:db: d4:3e:b2:c6:d7:2c:72:e3:35:19:c9:e4:1c:15:1f: 9f:7d:bd:a1:83:ac:8a:46:97:e3:68:f2:e4:d3:f6: 10:b6:ab:44:66:a8:ea:ed:ed:91:19:26:0d:34:84: 7a:7b:14:1a:13:b5:24:fb:34:be:f8:1b:00:a1:c9: 71:45:e1:4b:c2:39:22:77:23:95:a8:a7:46:0b:a6: c2:47:3c:19:8b:1d:ca:9a:1f:d7:80:3a:e8:23:d2: a8:09:cb:4e:df:34:1a:39:f0:b1:39:c8:1a:2f:d8: 31:98:47:44:d0:3c:47:7c:8f:f5:10:6e:31:48:38: b8:4d:37:02:b0:4e:3f:06:07:a6:93:90:2b:95:85: 7a:2f:c5:8e:92:5f:a4:4f:38:93:a4:90:89:f3:78: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AF:CA:9A:72:B1:58:20:AA:3C:60:B7:05:FD:16:E4:6E:E2:55:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57d75f4e-58e8-3422-9fa8-9b1709b01473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:94:18:8a:aa:72:05:bd:6c:87:60:15:09:9c:87:dd:68:c9: 48:d4:62:6c:20:0b:71:d8:72:22:8b:c5:e8:72:29:99:1b:44: 59:bb:4e:51:9f:0b:e5:aa:d8:0e:56:ae:7f:bb:d6:38:62:0d: 9c:73:c8:5b:6b:e7:9a:56:ea:90:81:ce:33:e9:7d:72:09:f1: 1b:39:c3:64:8e:33:5d:35:04:3d:2a:2c:7e:96:95:42:4c:2a: d1:de:f8:26:92:71:47:4b:a3:4f:94:7e:9f:1f:be:6e:19:7e: 1e:2c:d9:b8:ec:d9:27:5f:a5:de:49:1c:f3:c2:3c:87:c7:1c: 66:2b:e1:bb:0a:08:e2:21:f6:c9:8a:9f:70:99:77:0b:38:23: 7c:8d:f4:6e:0e:03:b4:54:e0:b6:35:f3:d3:22:b7:47:ba:ae: 34:b5:30:6f:94:a4:79:1d:5c:d7:5c:04:b5:db:83:36:17:f1: c5:aa:ce:e2:5f:ef:97:1d:62:4f:e5:95:b8:c2:61:59:c9:84: 67:10:b4:2d:ec:b5:cd:23:2d:26:46:5a:66:97:d5:66:6e:3e: ef:38:64:b6:e4:78:dd:8b:12:47:6e:09:d0:66:71:2b:3c:b0: 25:1c:b0:ca:a8:78:70:59:d7:d2:0d:0a:ac:e6:bd:04:7f:73: 22:58:d7:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu16s237S12I4iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ZTdmYjhkZDctYWY5Yi00MTNjLThmY2QtYjg5NGVkODk0NzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGlmqY5DxEYTxFoRIx0WtHCxAxsbWQSdTVAp PbNniKOVL2LgTAihUZP075DzUP28nQ9vSIHLiCrS/gXWO9XjcfB2YPOmtryHP3Ti VM3PbaTJMYoLVonWrG+t0hVCwTmwSfOHwZlNudvUPrLG1yxy4zUZyeQcFR+ffb2h g6yKRpfjaPLk0/YQtqtEZqjq7e2RGSYNNIR6exQaE7Uk+zS++BsAoclxReFLwjki dyOVqKdGC6bCRzwZix3Kmh/XgDroI9KoCctO3zQaOfCxOcgaL9gxmEdE0DxHfI/1 EG4xSDi4TTcCsE4/Bgemk5ArlYV6L8WOkl+kTziTpJCJ83hO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEivyppysVggqjxgtwX9FuRu4lVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTdkNzVmNGUtNThlOC0z NDIyLTlmYTgtOWIxNzA5YjAxNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmUGIqqcgW9bIdgFQmch91oyUjUYmwgC3HYciKLxehyKZkbRFm7TlGf C+Wq2A5Wrn+71jhiDZxzyFtr55pW6pCBzjPpfXIJ8Rs5w2SOM101BD0qLH6WlUJM KtHe+CaScUdLo0+Ufp8fvm4Zfh4s2bjs2Sdfpd5JHPPCPIfHHGYr4bsKCOIh9smK n3CZdws4I3yN9G4OA7RU4LY189Mit0e6rjS1MG+UpHkdXNdcBLXbgzYX8cWqzuJf 75cdYk/llbjCYVnJhGcQtC3stc0jLSZGWmaX1WZuPu84ZLbkeN2LEkduCdBmcSs8 sCUcsMqoeHBZ19INCqzmvQR/cyJY14o= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:37 2025 by rpki-client