$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa File: 654a5901-d2ef-3c77-9fec-fb93802aa967.roa (raw, json) Hash identifier: hNIrA7zWVa8U9v478US/5Z/PYtGYK+hBO/gm87IsM48= Subject key identifier: 4E:4C:27:C0:69:CC:4E:BC:09:E3:65:1B:9E:F2:3C:9A:32:56:EC:2E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A761B6708A6B3024DB60EB000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 212238 IP address blocks: 166.88.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:67:08:a6:b3:02:4d:b6:0e:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=2c7744ab-eea3-44e1-a587-ad9658a94abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:78:bd:3c:ab:35:bb:69:90:a2:18:6d:b7: ae:14:4a:59:70:88:fe:93:a4:be:60:c6:4c:17:d2: ee:43:f6:a7:93:e3:cf:f5:b3:62:4e:08:e2:52:2b: c5:d0:8c:83:05:cf:ac:8e:dc:43:19:b0:8f:2b:4c: f4:3e:3b:f9:97:c1:53:03:58:c5:63:b4:5a:aa:4b: b8:24:5c:12:80:a5:58:24:c6:24:67:5e:fa:63:f4: 42:e0:b9:7b:fa:d8:77:5e:02:c0:5c:05:b1:1e:8a: 59:a8:d5:30:ef:2f:65:42:63:af:24:81:d5:51:40: 9c:70:8e:5d:97:1e:97:60:85:40:f5:8a:70:3a:ae: d6:73:ac:b4:75:9f:09:6e:70:c7:ef:a6:17:05:75: 85:d2:15:39:01:b3:72:13:f6:71:b0:b8:7a:b8:a7: 1c:7f:76:1b:ad:69:57:25:83:a2:0b:09:1d:ff:10: 7b:b6:68:95:cf:1a:76:db:fb:27:15:68:5e:b9:cb: 43:d0:9a:3c:b1:ed:f7:e8:1e:da:14:e4:60:0b:25: 38:4d:5f:8d:ec:08:cf:c3:1f:1d:48:6c:ec:2c:c6: 71:5e:87:d6:7e:14:18:88:c7:7b:73:1b:34:33:bf: f7:41:90:58:e2:c3:38:67:ea:fd:b0:8a:54:34:c9: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:27:C0:69:CC:4E:BC:09:E3:65:1B:9E:F2:3C:9A:32:56:EC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7f:19:46:c5:5d:da:c5:41:6a:8b:ba:71:5d:ad:8f:67:47: 25:36:11:85:47:a9:15:47:d3:2c:58:0b:b9:7a:12:b9:4d:0a: de:a2:94:57:d6:79:0a:f2:12:35:a7:41:31:2b:66:49:10:b9: d1:ff:16:5d:ab:bb:79:13:98:0a:7d:5a:69:a4:1d:34:c1:ad: 69:e5:75:6b:43:61:d5:d7:f8:86:26:c2:57:6f:c0:a7:e2:67: fe:f8:c0:bb:de:8d:b9:32:c5:47:03:80:24:5d:0b:62:f7:bb: eb:b9:2a:cd:8d:f9:72:19:6a:44:2b:f6:69:a2:27:6f:4c:ba: 45:8a:b3:71:c3:ae:47:4a:d5:5f:9a:5d:af:4d:77:24:07:79: 22:6b:5f:79:76:0f:75:98:51:8b:2d:5b:57:f6:54:18:56:77: e9:d5:f1:36:8b:aa:6d:c8:42:26:91:7c:61:3c:6a:e3:0d:dc: 8f:59:73:fd:96:c6:16:16:6d:21:51:42:06:c7:71:9b:dc:3c: b5:38:5c:a8:f3:2e:f1:e4:71:8b:66:9e:15:37:34:65:28:cd: 88:85:5b:9e:e9:18:cf:eb:fe:75:07:52:29:cc:3a:7e:c4:e7: 34:7a:ff:63:db:e5:16:53:49:0e:3b:0a:06:aa:97:a9:cd:e7: a8:99:7f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G2cIprMCTbYOsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MmM3NzQ0YWItZWVhMy00NGUxLWE1ODctYWQ5NjU4YTk0YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dB4vTyrNbtpkKIYbbeuFEpZcIj+k6S+YMZM F9LuQ/ank+PP9bNiTgjiUivF0IyDBc+sjtxDGbCPK0z0Pjv5l8FTA1jFY7Raqku4 JFwSgKVYJMYkZ176Y/RC4Ll7+th3XgLAXAWxHopZqNUw7y9lQmOvJIHVUUCccI5d lx6XYIVA9YpwOq7Wc6y0dZ8JbnDH76YXBXWF0hU5AbNyE/ZxsLh6uKccf3YbrWlX JYOiCwkd/xB7tmiVzxp22/snFWheuctD0Jo8se336B7aFORgCyU4TV+N7AjPwx8d SGzsLMZxXofWfhQYiMd7cxs0M7/3QZBY4sM4Z+r9sIpUNMlccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5MJ8BpzE68CeNlG57yPJoyVuwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjU0YTU5MDEtZDJlZi0z Yzc3LTlmZWMtZmI5MzgwMmFhOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN/GUbFXdrFQWqLunFdrY9nRyU2EYVHqRVH0yxYC7l6ErlNCt6ilFfW eQryEjWnQTErZkkQudH/Fl2ru3kTmAp9WmmkHTTBrWnldWtDYdXX+IYmwldvwKfi Z/74wLvejbkyxUcDgCRdC2L3u+u5Ks2N+XIZakQr9mmiJ29MukWKs3HDrkdK1V+a Xa9NdyQHeSJrX3l2D3WYUYstW1f2VBhWd+nV8TaLqm3IQiaRfGE8auMN3I9Zc/2W xhYWbSFRQgbHcZvcPLU4XKjzLvHkcYtmnhU3NGUozYiFW57pGM/r/nUHUinMOn7E 5zR6/2Pb5RZTSQ47Cgaql6nN56iZfxs= -----END CERTIFICATE-----Generated at Thu Jul 10 17:29:32 2025 by rpki-client