$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa File: f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa (raw, json) Hash identifier: uZGrCkwk2uLgSRcJsTqwPKLcjp35czsCN1gpzfSlV9w= Subject key identifier: 79:BB:28:8A:24:0B:0F:27:89:5D:5A:32:66:A6:B8:2A:16:89:06:83 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A87B8AC2B1F962706DE641CC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa Signing time: Tue 15 Jul 2025 20:26:59 +0000 ROA not before: Tue 15 Jul 2025 20:26:59 +0000 ROA not after: Mon 13 Oct 2025 20:26:59 +0000 asID: 44559 IP address blocks: 166.88.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:ac:2b:1f:96:27:06:de:64:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 15 20:26:59 2025 GMT Not After : Oct 13 20:26:59 2025 GMT Subject: CN=7a851bec-b884-466d-ad85-6e1a41e84661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:fb:8d:ca:36:25:94:9c:2c:62:a3:4c:43: 10:29:b0:72:4e:8e:90:2c:9b:d5:8a:7d:95:86:1f: 2a:a6:bc:00:bd:db:6e:12:df:59:57:33:a7:e6:0a: 25:62:1c:a7:d3:5d:9b:a5:d0:10:71:9f:55:95:24: 35:d9:f5:87:90:6b:ce:87:96:bb:f5:ce:92:6e:09: a9:cf:94:f4:94:09:71:f7:8d:04:94:ae:7c:a8:89: c7:ed:1c:7d:d1:2d:82:d9:fe:f6:9a:35:49:71:36: f6:ac:99:3e:e6:09:d6:a8:1b:2c:77:01:19:61:37: 1e:da:a7:fb:1e:c0:a2:79:52:98:87:09:a8:a6:bf: fd:7a:85:8b:31:ba:47:f9:06:e3:70:47:f7:04:7e: 8a:8a:1d:e5:d9:80:dc:71:2f:87:63:79:96:f3:23: 63:d1:4e:68:b5:52:a1:3d:1f:85:4f:2a:58:25:50: 88:55:92:34:9a:ba:8a:7b:84:1d:33:0f:6c:df:73: a6:15:db:19:db:67:07:79:ef:79:8a:b2:f1:53:07: 09:f3:15:bf:45:35:ee:27:d1:f3:f6:53:63:73:1d: cc:3b:94:07:d8:0a:f3:59:9b:97:a3:2a:84:01:9f: 03:b3:cf:eb:b3:41:34:fb:58:60:4e:8c:3a:67:e0: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:28:8A:24:0B:0F:27:89:5D:5A:32:66:A6:B8:2A:16:89:06:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f85b6e53-8343-3d5d-b664-5dbc60e32f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:96:04:60:11:41:39:2a:00:fa:69:2d:e9:6f:e6:2c:78:67: 5b:85:a0:51:97:ef:8b:ed:0c:2c:98:25:1c:73:fd:56:77:f1: aa:7c:8f:99:6c:a0:3c:8e:02:5c:be:07:46:4e:98:90:55:6c: 6c:52:0b:2d:1f:9a:06:36:a2:da:8b:08:fb:19:78:95:db:8c: a1:c2:c5:d9:0a:78:80:b1:54:76:6d:e1:b4:9a:d2:a6:a9:93: 66:e0:1a:5f:f9:ab:4d:09:74:b2:35:bc:0e:cd:fd:1c:3b:35: 21:0e:80:df:e7:fe:c0:24:74:2f:b9:48:64:fb:55:36:2d:00: d9:11:b5:00:77:f1:4b:ff:f1:06:ec:c4:8b:7c:e7:fc:e4:cf: c8:1b:85:20:1a:06:c0:81:5f:fa:01:98:94:07:a6:b6:f1:ff: 78:30:20:ad:38:de:f7:8a:75:82:47:22:90:fa:3b:c8:73:9e: ca:97:7e:ff:63:31:be:4a:68:a0:8f:93:c3:49:7b:f8:66:e8: 26:c0:42:8a:ea:c8:9f:6f:a5:c1:f2:7b:94:68:36:80:97:85: 19:d6:ee:62:3c:43:aa:0f:34:7b:41:09:a5:11:b0:a0:fe:cc: 51:a0:d9:3e:47:59:72:e3:46:80:b2:9e:a8:de:a7:75:05:dc: 22:ce:90:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuKwrH5YnBt5kHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcxNTIwMjY1OVoXDTI1MTAxMzIwMjY1OVowLzEtMCsGA1UEAxMk N2E4NTFiZWMtYjg4NC00NjZkLWFkODUtNmUxYTQxZTg0NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB37jco2JZScLGKjTEMQKbByTo6QLJvVin2V hh8qprwAvdtuEt9ZVzOn5golYhyn012bpdAQcZ9VlSQ12fWHkGvOh5a79c6Sbgmp z5T0lAlx940ElK58qInH7Rx90S2C2f72mjVJcTb2rJk+5gnWqBssdwEZYTce2qf7 HsCieVKYhwmopr/9eoWLMbpH+QbjcEf3BH6Kih3l2YDccS+HY3mW8yNj0U5otVKh PR+FTypYJVCIVZI0mrqKe4QdMw9s33OmFdsZ22cHee95irLxUwcJ8xW/RTXuJ9Hz 9lNjcx3MO5QH2ArzWZuXoyqEAZ8Ds8/rs0E0+1hgTow6Z+B81wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm7KIokCw8niV1aMmamuCoWiQaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjg1YjZlNTMtODM0My0z ZDVkLWI2NjQtNWRiYzYwZTMyZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKWBGARQTkqAPppLelv5ix4Z1uFoFGX74vtDCyYJRxz/VZ38ap8j5ls oDyOAly+B0ZOmJBVbGxSCy0fmgY2otqLCPsZeJXbjKHCxdkKeICxVHZt4bSa0qap k2bgGl/5q00JdLI1vA7N/Rw7NSEOgN/n/sAkdC+5SGT7VTYtANkRtQB38Uv/8Qbs xIt85/zkz8gbhSAaBsCBX/oBmJQHprbx/3gwIK043veKdYJHIpD6O8hznsqXfv9j Mb5KaKCPk8NJe/hm6CbAQorqyJ9vpcHye5RoNoCXhRnW7mI8Q6oPNHtBCaURsKD+ zFGg2T5HWXLjRoCynqjep3UF3CLOkEc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:34:10 2025 by rpki-client