$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa File: 29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa (raw, json) Hash identifier: fbKu8gD56d3FPw2beZ9gi0zzGx46iC6YcjqS4IvNflU= Subject key identifier: E1:3C:A0:CA:2B:C6:E9:35:36:EB:D7:DF:58:F1:AF:72:46:82:72:72 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A655B3BA5CE2C7D6AA4568480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 10557 IP address blocks: 166.88.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:3b:a5:ce:2c:7d:6a:a4:56:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=654b1286-7b4c-45f9-885a-75d064c2749e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:83:ef:cf:ce:04:fd:2a:5c:8c:24:74:e6: 41:a3:87:19:c6:2f:28:a6:18:3c:19:bc:ed:06:34: 2a:2a:a4:2f:50:66:8f:34:7e:bf:c2:9a:36:ae:1d: 19:6e:60:59:40:d0:c5:30:3c:d0:83:82:f7:dd:e8: 9d:47:d6:f2:32:78:03:b3:ee:84:4b:29:41:c4:d7: 3a:72:af:d2:0a:a8:4a:8e:58:47:fd:23:de:74:ec: 49:f8:22:88:34:60:4f:66:a4:b7:ed:c0:ba:cf:9e: 48:fc:cc:50:d7:ee:6d:b3:cb:66:06:05:e7:3e:78: b5:96:06:a6:db:83:33:c5:36:dd:b8:aa:c9:37:73: 27:a7:6b:1b:63:b1:26:28:ea:11:c0:f1:d8:87:58: ca:67:23:ff:67:f3:03:2b:29:1e:9d:23:d8:48:11: 17:24:b0:9a:65:d5:8f:5f:bf:b2:a3:eb:a4:07:d0: a1:10:50:5d:a6:ee:e4:cb:05:ed:73:fe:c4:4b:53: c5:87:4e:b6:ac:de:fc:7e:f0:a0:c8:99:90:57:c8: 6e:df:0d:cd:8c:94:0f:8d:30:a8:77:9a:ea:46:7e: e9:ce:ab:8f:d3:32:61:7d:e0:62:27:7f:aa:f6:b6: 7f:a1:1e:2e:74:73:57:5f:89:9f:32:94:ac:0b:09: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:A0:CA:2B:C6:E9:35:36:EB:D7:DF:58:F1:AF:72:46:82:72:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:af:ca:ee:26:d1:d5:6c:17:eb:9f:78:73:d4:70:22:ae:6e: a4:9a:93:4a:7f:b1:4e:1a:1f:f3:7b:cf:87:76:82:76:29:f7: a8:f7:3c:69:e1:52:09:0d:c2:c8:56:60:c5:c2:2f:6c:c2:57: 71:20:97:bb:e9:b3:1b:d9:e6:53:57:d4:8b:6c:4e:49:aa:6a: 62:c8:e1:b6:33:84:5d:9c:fb:94:05:24:fa:ab:1f:40:9b:40: 9e:49:5c:99:8f:dc:0e:2e:e4:e2:61:d3:a9:b6:01:3e:d1:d5: 68:04:22:9a:23:73:ae:17:1f:b3:91:8c:8c:af:83:c8:48:44: 81:f9:5e:1d:e5:6b:5b:bc:92:56:6f:23:1c:d1:1a:06:5b:dc: a3:fc:fb:a8:8e:90:04:9b:0a:81:a1:2f:c2:c5:c8:32:4f:17: ea:06:00:79:17:9d:8e:fa:bf:ed:6f:62:8f:86:15:9d:25:9d: ea:48:39:60:c8:19:f8:a7:97:bf:fe:58:4d:97:f1:88:e2:5f: 1f:75:bd:66:01:23:43:5e:73:81:98:28:10:e1:28:29:ec:89: b6:12:3e:c1:63:ed:16:fe:ec:53:4b:f9:15:2a:2a:3e:5f:29: 37:1d:a7:bb:b1:53:de:a7:34:9b:3e:22:aa:52:cd:f9:ed:c9: 9f:e7:01:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWzulzix9aqRWhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk NjU0YjEyODYtN2I0Yy00NWY5LTg4NWEtNzVkMDY0YzI3NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH6D78/OBP0qXIwkdOZBo4cZxi8ophg8Gbzt BjQqKqQvUGaPNH6/wpo2rh0ZbmBZQNDFMDzQg4L33eidR9byMngDs+6ESylBxNc6 cq/SCqhKjlhH/SPedOxJ+CKINGBPZqS37cC6z55I/MxQ1+5ts8tmBgXnPni1lgam 24MzxTbduKrJN3Mnp2sbY7EmKOoRwPHYh1jKZyP/Z/MDKykenSPYSBEXJLCaZdWP X7+yo+ukB9ChEFBdpu7kywXtc/7ES1PFh062rN78fvCgyJmQV8hu3w3NjJQPjTCo d5rqRn7pzquP0zJhfeBiJ3+q9rZ/oR4udHNXX4mfMpSsCwkVTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE8oMorxuk1NuvX31jxr3JGgnJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjkyMzliNmEtZTdkOC0z YTBiLTk3MzAtOTcwYzk2ODFlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+vyu4m0dVsF+ufeHPUcCKubqSak0p/sU4aH/N7z4d2gnYp96j3PGnh UgkNwshWYMXCL2zCV3Egl7vpsxvZ5lNX1ItsTkmqamLI4bYzhF2c+5QFJPqrH0Cb QJ5JXJmP3A4u5OJh06m2AT7R1WgEIpojc64XH7ORjIyvg8hIRIH5Xh3la1u8klZv IxzRGgZb3KP8+6iOkASbCoGhL8LFyDJPF+oGAHkXnY76v+1vYo+GFZ0lnepIOWDI Gfinl7/+WE2X8YjiXx91vWYBI0Nec4GYKBDhKCnsibYSPsFj7Rb+7FNL+RUqKj5f KTcdp7uxU96nNJs+IqpSzfntyZ/nAfY= -----END CERTIFICATE-----Generated at Thu Jul 10 17:01:38 2025 by rpki-client