$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b3a7be6-dd3c-3608-90dd-8e540f552952.roa File: 9b3a7be6-dd3c-3608-90dd-8e540f552952.roa (raw, json) Hash identifier: 1cbbd6Lnhm3QV7DVax/F26MDZz9wKSvk6k98p0+QQb0= Subject key identifier: AB:73:A3:7B:FA:9D:F8:1E:BC:C3:3C:65:5B:96:BF:0A:00:D1:2D:A4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A5D6CEF87A59992B6683FCB00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b3a7be6-dd3c-3608-90dd-8e540f552952.roa Signing time: Mon 30 Jun 2025 16:50:26 +0000 ROA not before: Mon 30 Jun 2025 16:50:26 +0000 ROA not after: Sun 28 Sep 2025 16:50:26 +0000 asID: 401152 IP address blocks: 166.88.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:6c:ef:87:a5:99:92:b6:68:3f:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 30 16:50:26 2025 GMT Not After : Sep 28 16:50:26 2025 GMT Subject: CN=a083b51a-406b-47ca-9713-28d5878b1d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:7d:fd:47:70:3d:52:01:b6:2a:0b:61:c4: 76:9f:54:e9:52:38:34:df:88:21:c0:0e:ca:27:f9: 59:20:f2:e0:89:56:80:ce:6e:de:6b:b6:10:c7:67: 14:62:e6:d6:76:0c:6f:d8:98:9c:b8:02:18:32:93: 08:75:76:c4:ac:c4:59:e9:dd:19:64:e7:4c:09:75: bc:f5:b7:58:6e:c2:2e:31:ef:dd:21:cd:28:ac:5f: 64:a9:08:24:1b:47:8e:07:17:e1:85:64:19:58:69: 57:cb:4f:aa:83:0d:9a:9b:c7:94:2c:52:f9:38:b7: 6c:af:15:d3:37:02:fb:c4:18:25:d7:22:0b:65:6f: 4c:26:6f:be:b7:7b:fe:a2:78:13:82:0d:71:13:ad: 9c:3d:6d:d4:e4:a6:53:84:78:9b:ad:d9:dd:91:db: bc:b4:56:99:cd:40:fb:1e:38:12:31:ad:a5:bf:52: 8b:8c:63:8d:59:a6:25:ce:bd:52:d9:ca:b8:26:cb: d7:e4:a3:98:31:07:fa:98:42:0f:d4:29:36:42:d6: 62:56:aa:41:28:a0:cb:27:76:90:ea:8d:57:50:34: 98:c0:c2:eb:8e:cb:2f:1c:5f:ea:38:78:3e:17:08: d4:e2:13:9f:f7:53:db:a7:e9:73:e2:da:08:d6:c6: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:A3:7B:FA:9D:F8:1E:BC:C3:3C:65:5B:96:BF:0A:00:D1:2D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b3a7be6-dd3c-3608-90dd-8e540f552952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b1:53:60:7a:e3:2e:e9:b6:77:be:51:bf:41:86:1b:77:42: 69:64:38:2d:6f:93:d3:0d:f0:eb:56:92:cd:d2:62:6c:7a:d1: 0c:ab:67:a8:b6:7f:14:65:ad:4e:9e:45:66:89:26:b0:ca:db: 77:e0:f2:ce:6d:a4:4c:91:9e:17:08:ec:71:84:62:fb:bf:7c: 94:b2:ad:dd:c7:53:f0:05:1a:eb:ff:8f:93:c1:7b:45:56:8a: e1:e9:fb:fa:f5:28:78:1a:eb:26:64:bd:2e:86:06:8d:a5:ca: ad:d5:12:88:4d:c1:b8:2b:ff:05:22:f5:d9:bf:2c:f3:53:0d: 46:45:d7:f6:a9:89:c5:fd:7c:12:be:9b:fd:c5:ab:fb:35:d1: 94:5e:bd:b0:ab:be:d1:d1:17:f5:f2:5f:c8:aa:92:7c:81:88: 6e:bf:4b:19:a9:59:3b:fe:33:5d:1c:44:b5:f2:98:53:ca:a7: 65:36:76:e3:f0:a7:1b:70:8a:21:4c:83:b7:a4:af:70:d6:a7: 9c:ac:f1:0d:01:0b:3c:f4:59:4a:90:10:d9:5d:cc:5d:cf:06: 32:8c:11:12:54:c3:47:c1:f4:91:84:d1:39:a9:b0:50:93:53: c9:c7:36:56:f0:7e:c9:dd:8e:68:17:1a:56:41:4f:1e:a4:17: c8:87:a3:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpdbO+HpZmStmg/ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYzMDE2NTAyNloXDTI1MDkyODE2NTAyNlowLzEtMCsGA1UEAxMk YTA4M2I1MWEtNDA2Yi00N2NhLTk3MTMtMjhkNTg3OGIxZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUp9/UdwPVIBtioLYcR2n1TpUjg034ghwA7K J/lZIPLgiVaAzm7ea7YQx2cUYubWdgxv2JicuAIYMpMIdXbErMRZ6d0ZZOdMCXW8 9bdYbsIuMe/dIc0orF9kqQgkG0eOBxfhhWQZWGlXy0+qgw2am8eULFL5OLdsrxXT NwL7xBgl1yILZW9MJm++t3v+ongTgg1xE62cPW3U5KZThHibrdndkdu8tFaZzUD7 HjgSMa2lv1KLjGONWaYlzr1S2cq4JsvX5KOYMQf6mEIP1Ck2QtZiVqpBKKDLJ3aQ 6o1XUDSYwMLrjssvHF/qOHg+FwjU4hOf91Pbp+lz4toI1sZHsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtzo3v6nfgevMM8ZVuWvwoA0S2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWIzYTdiZTYtZGQzYy0z NjA4LTkwZGQtOGU1NDBmNTUyOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmxU2B64y7ptne+Ub9Bhht3QmlkOC1vk9MN8OtWks3SYmx60QyrZ6i2 fxRlrU6eRWaJJrDK23fg8s5tpEyRnhcI7HGEYvu/fJSyrd3HU/AFGuv/j5PBe0VW iuHp+/r1KHga6yZkvS6GBo2lyq3VEohNwbgr/wUi9dm/LPNTDUZF1/apicX9fBK+ m/3Fq/s10ZRevbCrvtHRF/XyX8iqknyBiG6/SxmpWTv+M10cRLXymFPKp2U2duPw pxtwiiFMg7ekr3DWp5ys8Q0BCzz0WUqQENldzF3PBjKMERJUw0fB9JGE0TmpsFCT U8nHNlbwfsndjmgXGlZBTx6kF8iHo1Q= -----END CERTIFICATE-----Generated at Sun Jul 6 07:51:22 2025 by rpki-client