$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f2dfc89-2170-37dc-ba9f-d54d98cf05b3.roa File: 5f2dfc89-2170-37dc-ba9f-d54d98cf05b3.roa (raw, json) Hash identifier: qA+IhTGSkN6Mr9wWxJ066avchJPPG0bqwD+fek4lQ3A= Subject key identifier: 02:76:3D:23:EE:69:4E:CA:BC:24:4C:7C:D7:FA:55:24:B7:00:B2:19 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A5E1E629B952097E6E968B200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f2dfc89-2170-37dc-ba9f-d54d98cf05b3.roa Signing time: Mon 30 Jun 2025 22:47:58 +0000 ROA not before: Mon 30 Jun 2025 22:47:58 +0000 ROA not after: Sun 28 Sep 2025 22:47:58 +0000 asID: 401152 IP address blocks: 166.88.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:1e:62:9b:95:20:97:e6:e9:68:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 30 22:47:58 2025 GMT Not After : Sep 28 22:47:58 2025 GMT Subject: CN=b476bfd0-31ce-4733-9a43-5498d471142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:f8:69:74:f7:a0:78:8f:25:d4:2e:d8:91: 01:e0:35:60:32:2f:db:1a:97:83:a9:8c:97:8a:cc: aa:0e:1d:3c:14:66:14:61:40:4d:47:8f:37:7f:54: a9:a3:a4:e2:0a:d7:22:5d:59:a7:44:cd:5b:0a:66: 92:8f:84:8e:d4:a0:22:24:26:ae:d2:c2:92:fe:f3: f4:3b:51:c8:e6:b9:23:2b:eb:48:39:35:f7:80:88: 89:39:35:f5:7d:42:2e:63:a0:e6:69:ae:23:17:5d: da:55:8d:0c:99:de:d9:c5:e2:f2:b4:d0:a0:c4:06: d0:01:99:97:44:c8:03:61:cc:fc:cb:c4:50:3d:67: 39:e5:11:f2:5f:87:0c:76:b0:6b:a0:d4:04:c3:0b: 18:0b:6b:53:1f:46:1e:e9:a5:46:9c:da:90:e5:e0: 7d:34:66:23:72:d1:5c:fa:ea:84:77:ed:58:dc:18: b6:d3:e5:e3:f9:ff:f4:d6:13:2d:58:11:18:03:82: 24:a6:3a:23:d3:9e:22:b3:1c:16:6d:b5:8b:3c:0d: 64:a0:6b:0c:8c:27:58:25:6b:16:40:6e:1c:d7:f5: f0:4b:e9:e9:fa:75:51:b4:f2:06:92:77:89:d3:c0: 61:fe:ab:7e:68:63:de:3e:e1:3e:bd:66:c5:a8:f9: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:76:3D:23:EE:69:4E:CA:BC:24:4C:7C:D7:FA:55:24:B7:00:B2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f2dfc89-2170-37dc-ba9f-d54d98cf05b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:89:e9:cf:31:a3:e4:29:73:91:34:1f:d0:c3:3b:08:80:f5: 7c:04:a5:f9:c1:8a:26:b1:b8:36:72:bc:f7:02:9e:30:f0:6b: 76:d5:2c:ee:46:40:8e:74:85:f0:e9:6e:ac:08:cc:d2:94:09: e9:85:76:8d:dc:08:92:dc:9b:b4:2e:a5:9d:d7:34:18:d8:9d: e9:db:36:32:53:5e:b3:fc:00:58:0e:4d:77:0b:76:c2:af:55: e8:90:29:61:1f:a3:20:4d:99:bb:7d:f8:1b:12:53:7d:4b:fb: e0:13:82:24:3d:d3:6c:10:0d:6c:ea:43:f7:1e:3e:23:ea:8a: dd:ce:d4:d9:07:62:18:e0:1a:99:d0:fb:c1:5e:8f:a7:79:df: b7:01:52:94:8b:3a:f3:f0:99:ec:58:21:82:64:f9:43:90:07: 66:fe:17:ca:ab:0a:1a:0b:0d:ab:07:56:fc:d8:e7:03:9e:f7: e1:c6:65:ba:6d:96:7a:7f:84:a0:45:77:2d:37:1f:11:85:0a: 2e:5e:b8:77:54:e5:48:41:ac:12:f6:b7:49:6f:a6:91:38:f2: 51:a1:07:2b:88:cb:fe:54:f0:64:ce:5d:e0:e3:85:ba:e5:d7: 08:7d:66:e8:2f:65:c9:de:ee:dd:8a:07:a4:f4:c5:a5:a0:5e: b3:73:e6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeHmKblSCX5ulosgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYzMDIyNDc1OFoXDTI1MDkyODIyNDc1OFowLzEtMCsGA1UEAxMk YjQ3NmJmZDAtMzFjZS00NzMzLTlhNDMtNTQ5OGQ0NzExNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzj4aXT3oHiPJdQu2JEB4DVgMi/bGpeDqYyX isyqDh08FGYUYUBNR483f1Spo6TiCtciXVmnRM1bCmaSj4SO1KAiJCau0sKS/vP0 O1HI5rkjK+tIOTX3gIiJOTX1fUIuY6Dmaa4jF13aVY0Mmd7ZxeLytNCgxAbQAZmX RMgDYcz8y8RQPWc55RHyX4cMdrBroNQEwwsYC2tTH0Ye6aVGnNqQ5eB9NGYjctFc +uqEd+1Y3Bi20+Xj+f/01hMtWBEYA4Ikpjoj054isxwWbbWLPA1koGsMjCdYJWsW QG4c1/XwS+np+nVRtPIGkneJ08Bh/qt+aGPePuE+vWbFqPl4XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ2PSPuaU7KvCRMfNf6VSS3ALIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWYyZGZjODktMjE3MC0z N2RjLWJhOWYtZDU0ZDk4Y2YwNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASJ6c8xo+Qpc5E0H9DDOwiA9XwEpfnBiiaxuDZyvPcCnjDwa3bVLO5G QI50hfDpbqwIzNKUCemFdo3cCJLcm7QupZ3XNBjYnenbNjJTXrP8AFgOTXcLdsKv VeiQKWEfoyBNmbt9+BsSU31L++ATgiQ902wQDWzqQ/cePiPqit3O1NkHYhjgGpnQ +8Fej6d537cBUpSLOvPwmexYIYJk+UOQB2b+F8qrChoLDasHVvzY5wOe9+HGZbpt lnp/hKBFdy03HxGFCi5euHdU5UhBrBL2t0lvppE48lGhByuIy/5U8GTOXeDjhbrl 1wh9ZugvZcne7t2KB6T0xaWgXrNz5qI= -----END CERTIFICATE-----Generated at Sun Jul 6 08:18:54 2025 by rpki-client