$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a47efb20-4713-322e-8660-92ef9b9b6021.roa File: a47efb20-4713-322e-8660-92ef9b9b6021.roa (raw, json) Hash identifier: GSKUbfDZhV2RXewnUYEm3683lE0XGykDOFgBqZs4Id8= Subject key identifier: 6D:6D:FE:7C:E9:04:E6:3B:E0:A7:20:E7:59:49:E4:F4:41:0D:02:3B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A71EB5ACBCBB27CD28FCD0000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a47efb20-4713-322e-8660-92ef9b9b6021.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 209854 IP address blocks: 166.88.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:5a:cb:cb:b2:7c:d2:8f:cd:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=0dc60089-2fcd-4f20-855a-04c2c9d32b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:4c:86:26:bf:29:5b:44:80:86:9b:ce:19: ad:cc:a9:58:ed:cc:e3:53:2c:77:46:7e:da:68:61: 42:7a:ef:91:4b:c5:1c:6a:a1:1b:6a:8c:56:09:a6: d5:28:96:2d:cf:bc:c9:8e:bf:59:92:4e:3b:96:09: 21:8f:1f:76:60:77:22:c6:7e:cf:c1:04:d6:86:fe: 9c:18:bd:f7:fa:1c:1c:8d:8e:34:e8:0a:91:f3:b5: 87:ae:cf:ae:1e:87:30:ec:50:6c:a3:d4:17:cf:26: 1d:d7:9f:a3:d6:b6:5a:30:3c:b5:dd:c6:fc:44:14: 50:c9:d8:91:ba:1a:94:8c:6c:07:cf:a1:af:11:33: db:a4:52:4f:af:13:ed:5d:a3:4c:1b:ee:57:51:38: b3:71:a1:d5:ea:8c:17:61:7c:3f:a8:9d:65:62:ee: ca:da:3a:89:97:2f:40:17:d4:e4:51:2b:c1:bb:20: 35:cc:9c:d5:de:29:d8:16:4a:46:e1:92:41:92:06: d6:35:cf:5d:80:34:bb:d1:63:13:99:f1:13:79:78: 13:86:f5:63:4d:49:1e:78:fc:06:b7:75:5b:76:ad: 0d:0a:3c:2f:27:22:51:48:56:71:ad:ed:c4:75:49: ac:32:fe:36:5c:5a:57:10:ba:19:92:48:19:ec:40: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6D:FE:7C:E9:04:E6:3B:E0:A7:20:E7:59:49:E4:F4:41:0D:02:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a47efb20-4713-322e-8660-92ef9b9b6021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d7:26:c5:5b:77:f8:3a:d5:eb:96:08:dc:e5:28:ae:cc:2c: d1:1c:3e:50:6d:49:13:f4:aa:27:48:7e:e8:92:cd:cb:46:0d: 15:bc:10:6d:44:7b:2e:25:bd:0c:83:88:c5:1e:da:2a:14:c2: c2:44:04:1a:a4:b5:78:b9:55:6e:12:65:b3:5d:9f:22:aa:01: b4:00:4f:92:b2:23:41:44:64:8d:ed:09:97:8e:39:a1:65:f7: 78:91:d5:9d:51:63:62:71:11:66:25:8a:6b:cb:a7:01:37:0b: db:54:36:62:49:65:f3:a9:dc:a3:b7:51:51:2a:3a:01:a1:48: 91:68:34:57:e8:13:16:83:ba:2f:7f:e1:21:6a:dc:44:1c:35: ce:0a:9d:e0:05:de:c4:cb:4a:9c:21:71:c6:8e:cc:b2:73:66: 17:68:ee:af:87:ff:d5:62:28:21:2c:43:ae:70:71:11:fd:b1: a1:ac:06:f6:c8:b2:dd:ab:49:2e:bd:0e:7a:3f:0e:0c:7f:c9: 12:5e:d3:e3:9f:48:39:8f:e2:1f:2b:f2:c4:5e:2b:59:ae:fa: 94:43:b2:a0:2b:9a:cb:1f:48:02:6a:0d:79:47:cd:b8:dc:bd: f5:ec:af:f6:c6:72:66:c5:29:35:ac:24:9c:df:9f:f8:ab:d1: 32:3a:5e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61rLy7J80o/NAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MGRjNjAwODktMmZjZC00ZjIwLTg1NWEtMDRjMmM5ZDMyYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1btMhia/KVtEgIabzhmtzKlY7czjUyx3Rn7a aGFCeu+RS8UcaqEbaoxWCabVKJYtz7zJjr9Zkk47lgkhjx92YHcixn7PwQTWhv6c GL33+hwcjY406AqR87WHrs+uHocw7FBso9QXzyYd15+j1rZaMDy13cb8RBRQydiR uhqUjGwHz6GvETPbpFJPrxPtXaNMG+5XUTizcaHV6owXYXw/qJ1lYu7K2jqJly9A F9TkUSvBuyA1zJzV3inYFkpG4ZJBkgbWNc9dgDS70WMTmfETeXgThvVjTUkeePwG t3Vbdq0NCjwvJyJRSFZxre3EdUmsMv42XFpXELoZkkgZ7EDz7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1t/nzpBOY74Kcg51lJ5PRBDQI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTQ3ZWZiMjAtNDcxMy0z MjJlLTg2NjAtOTJlZjliOWI2MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvXJsVbd/g61euWCNzlKK7MLNEcPlBtSRP0qidIfuiSzctGDRW8EG1E ey4lvQyDiMUe2ioUwsJEBBqktXi5VW4SZbNdnyKqAbQAT5KyI0FEZI3tCZeOOaFl 93iR1Z1RY2JxEWYlimvLpwE3C9tUNmJJZfOp3KO3UVEqOgGhSJFoNFfoExaDui9/ 4SFq3EQcNc4KneAF3sTLSpwhccaOzLJzZhdo7q+H/9ViKCEsQ65wcRH9saGsBvbI st2rSS69Dno/Dgx/yRJe0+OfSDmP4h8r8sReK1mu+pRDsqArmssfSAJqDXlHzbjc vfXsr/bGcmbFKTWsJJzfn/ir0TI6XtA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:36:08 2025 by rpki-client