$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/157dcbfe-beaa-3880-a1cd-2a10ffab7c41.roa File: 157dcbfe-beaa-3880-a1cd-2a10ffab7c41.roa (raw, json) Hash identifier: cVYv9hZ8TeWD2wDZTIowZIZQO7pSpBCWszDxlSBq5c4= Subject key identifier: 58:3A:37:23:8E:13:E5:1E:A5:D7:45:49:A7:E9:AD:39:75:F1:5F:87 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A5E6067A501E1D3FD5C31A340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/157dcbfe-beaa-3880-a1cd-2a10ffab7c41.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 395793 IP address blocks: 166.88.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:67:a5:01:e1:d3:fd:5c:31:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=cb65b75d-e0d8-4fb3-88cb-672426d9b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:9f:b3:93:f8:bd:4d:70:de:5f:b0:3e:45: 80:cf:36:5a:cd:84:5e:9e:68:15:e9:eb:75:4c:54: 45:8a:9a:8c:49:9f:6f:4a:9f:32:d8:01:ff:1a:52: 42:06:ef:d6:f0:f1:c6:fc:00:37:ea:ee:01:f1:69: 1a:f3:6b:83:08:4c:be:ec:30:40:6f:23:5e:12:a8: 5a:73:b2:68:5b:02:7f:30:a1:b8:20:34:75:a6:c4: 3d:a6:a5:20:fe:01:64:32:34:00:38:08:84:4e:15: c3:d6:00:be:9b:b1:eb:cd:e0:52:f3:ae:4e:12:52: be:6d:1a:55:b0:cf:b1:20:dc:4f:9b:b8:21:33:66: a4:db:4b:08:b3:0c:f0:4a:ee:c2:e9:fa:fe:b6:6a: a1:63:5a:91:98:67:7f:86:0a:62:31:05:a0:70:79: ac:d4:f2:0c:2a:21:38:c1:5e:b1:31:f7:7f:08:65: e9:d0:91:81:2c:53:c5:3a:30:9d:42:72:d7:4e:da: 86:e7:94:07:56:44:f8:4d:77:e2:94:d4:08:cf:88: d8:b3:fb:d0:b3:48:84:a4:00:25:31:9b:5d:40:c1: 27:21:fd:1b:f8:03:62:a3:14:62:07:6b:f2:97:91: 70:d7:60:d1:e0:7a:02:bc:a5:63:c2:68:ba:5a:dd: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:37:23:8E:13:E5:1E:A5:D7:45:49:A7:E9:AD:39:75:F1:5F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/157dcbfe-beaa-3880-a1cd-2a10ffab7c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:73:21:33:46:cc:9a:21:b0:8b:0f:ca:c9:68:dd:5c:91:07: 90:d3:2e:a2:30:08:75:14:4e:0d:36:b4:d3:84:08:29:50:ed: 4f:e5:89:16:76:cc:63:86:76:58:55:ad:8e:1e:4f:c0:ef:3f: 77:95:f0:e5:81:b9:91:8b:16:4e:cd:68:31:4f:7f:46:00:7a: a2:5e:41:68:7c:3d:ed:8a:6f:33:f5:09:60:c5:23:05:f6:61: f3:9b:bc:66:e7:9a:76:18:2f:34:ba:ae:e8:fe:1e:c1:7c:ea: 6c:9b:12:b7:0e:f2:80:6e:3a:1b:7a:dd:22:0a:8c:05:54:42: fd:4c:19:c5:f0:60:bb:4d:7d:84:6c:fd:16:ca:9e:55:6e:39: 9b:af:6b:eb:9d:d4:b5:67:eb:29:35:e1:e4:0c:8b:44:33:b3: f7:08:4b:ce:0f:0d:7f:2f:a0:05:15:5c:b7:5e:7b:7b:22:86: 78:93:f4:1d:bf:3a:18:c2:c1:7d:76:ab:ff:96:38:73:59:c1: 79:79:95:1e:8e:36:de:38:83:58:00:12:7f:6b:db:97:41:26: fe:47:17:88:d6:30:96:d2:74:07:5b:15:cf:4e:71:ba:c1:1f: d4:50:7f:22:c2:45:4f:13:80:e6:aa:57:9b:50:7b:97:a4:31: b4:f4:f2:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGelAeHT/Vwxo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2I2NWI3NWQtZTBkOC00ZmIzLTg4Y2ItNjcyNDI2ZDliMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC6fs5P4vU1w3l+wPkWAzzZazYRenmgV6et1 TFRFipqMSZ9vSp8y2AH/GlJCBu/W8PHG/AA36u4B8Wka82uDCEy+7DBAbyNeEqha c7JoWwJ/MKG4IDR1psQ9pqUg/gFkMjQAOAiEThXD1gC+m7HrzeBS865OElK+bRpV sM+xINxPm7ghM2ak20sIswzwSu7C6fr+tmqhY1qRmGd/hgpiMQWgcHms1PIMKiE4 wV6xMfd/CGXp0JGBLFPFOjCdQnLXTtqG55QHVkT4TXfilNQIz4jYs/vQs0iEpAAl MZtdQMEnIf0b+ANioxRiB2vyl5Fw12DR4HoCvKVjwmi6Wt1ogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg6NyOOE+UepddFSafprTl18V+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTU3ZGNiZmUtYmVhYS0z ODgwLWExY2QtMmExMGZmYWI3YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFzITNGzJohsIsPyslo3VyRB5DTLqIwCHUUTg02tNOECClQ7U/liRZ2 zGOGdlhVrY4eT8DvP3eV8OWBuZGLFk7NaDFPf0YAeqJeQWh8Pe2KbzP1CWDFIwX2 YfObvGbnmnYYLzS6ruj+HsF86mybErcO8oBuOht63SIKjAVUQv1MGcXwYLtNfYRs /RbKnlVuOZuva+ud1LVn6yk14eQMi0Qzs/cIS84PDX8voAUVXLdee3sihniT9B2/ OhjCwX12q/+WOHNZwXl5lR6ONt44g1gAEn9r25dBJv5HF4jWMJbSdAdbFc9OcbrB H9RQfyLCRU8TgOaqV5tQe5ekMbT08nA= -----END CERTIFICATE-----Generated at Thu Jul 10 17:14:03 2025 by rpki-client