$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa File: d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa (raw, json) Hash identifier: p176p7PYB0+Fu+n+btQihMl8cde5NOWsTsT2z86gdyI= Subject key identifier: 40:B2:A4:5A:1E:D1:EA:0D:C0:13:90:0A:37:DB:4F:93:85:D1:B7:6A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF951517B1A887349A2858780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 168.93.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:51:7b:1a:88:73:49:a2:85:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=261bebf4-af1b-4dbd-93ed-de0da1e55c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:db:6a:36:65:51:0f:6f:2f:d9:07:d0:c0: f4:25:3a:d6:91:4e:ee:b4:9c:f7:96:b5:4d:ec:a2: 3f:22:99:fc:cc:e8:ff:37:08:1d:8b:d2:5c:35:5f: 16:c4:b8:3c:8a:da:c7:6e:2f:50:17:1a:6a:21:58: 60:c5:80:a6:87:1f:44:f2:3d:1b:ed:14:9f:46:86: d4:de:53:04:cc:77:ed:9b:21:54:8f:d1:b0:92:a5: 77:a6:09:4a:7e:69:9d:1e:7f:51:52:99:00:b8:8a: 13:23:e2:5a:84:b6:d5:8c:86:cd:81:8d:56:5f:79: c9:63:10:47:b3:7d:8e:2e:06:35:0a:96:53:27:db: 55:56:cc:2a:e8:29:ef:df:f1:02:2e:71:db:21:92: c7:66:03:fa:e1:b4:7b:2e:f8:a2:d1:fb:78:c8:ad: 7f:b1:cf:6b:69:95:e5:18:b7:49:ed:2c:c5:ba:d4: a3:7f:66:26:7e:47:1d:8a:81:13:dd:b8:b7:86:21: fe:01:b6:b6:12:6c:95:a2:1c:46:f8:5b:c9:78:f0: 65:64:55:bf:f9:4f:62:cd:02:94:35:90:0b:ca:8c: d7:14:ff:d0:2d:71:9e:24:9e:2d:f6:5e:c1:c5:5c: 2b:11:ba:75:13:ef:7e:94:44:b8:28:d4:57:a4:73: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:A4:5A:1E:D1:EA:0D:C0:13:90:0A:37:DB:4F:93:85:D1:B7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f9:c3:a1:c7:b0:fb:d0:e6:a2:64:be:94:b5:1c:ab:8b:b9: 4f:48:8b:59:80:c3:97:e3:24:6b:1c:7d:70:0e:bf:db:33:3b: b8:da:9c:3c:cc:57:4c:b7:98:56:9f:a6:e9:a4:78:be:e0:5a: d2:a6:47:12:5d:2d:d9:6f:be:07:da:5e:0c:80:7f:70:22:8d: 36:24:78:9f:cf:79:0e:4c:b6:0e:2a:ac:67:2a:98:06:13:52: 1d:30:49:d5:ad:6a:43:f3:fc:7d:c1:be:f3:79:81:65:55:49: 83:c3:f5:91:bd:1e:0e:9f:8d:81:b0:37:31:65:fa:6e:64:10: 20:60:e4:ed:5e:fa:c3:3c:32:f9:9d:c1:45:64:7c:fc:1d:7b: c2:7b:f4:0f:86:b7:2e:c1:24:a7:3e:bd:8c:2b:2a:41:56:c7: dc:bd:aa:d6:8c:bd:de:d5:c2:a7:fa:b3:0d:8c:25:aa:6a:fb: 95:20:d6:6b:71:5b:0c:5c:1f:d4:69:31:5b:93:f9:39:95:67: 41:97:44:df:3e:16:0e:fd:9e:e9:df:f6:c0:0d:0f:70:00:bc: 9d:16:a0:7e:a1:22:dc:a3:fd:a8:82:81:5a:e7:93:19:10:5d: c1:c6:cc:b7:37:f6:98:21:31:4b:90:b8:f3:ba:46:05:ff:ba: 27:c4:69:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVF7GohzSaKFh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjYxYmViZjQtYWYxYi00ZGJkLTkzZWQtZGUwZGExZTU1YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSPbajZlUQ9vL9kH0MD0JTrWkU7utJz3lrVN 7KI/Ipn8zOj/Nwgdi9JcNV8WxLg8itrHbi9QFxpqIVhgxYCmhx9E8j0b7RSfRobU 3lMEzHftmyFUj9GwkqV3pglKfmmdHn9RUpkAuIoTI+JahLbVjIbNgY1WX3nJYxBH s32OLgY1CpZTJ9tVVswq6Cnv3/ECLnHbIZLHZgP64bR7Lvii0ft4yK1/sc9raZXl GLdJ7SzFutSjf2YmfkcdioET3bi3hiH+Aba2EmyVohxG+FvJePBlZFW/+U9izQKU NZALyozXFP/QLXGeJJ4t9l7BxVwrEbp1E+9+lES4KNRXpHOXEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECypFoe0eoNwBOQCjfbT5OF0bdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDliYjI4ZWQtNTg5MC0z MzViLTg3NTctN2U5N2JiYWFhMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj5w6HHsPvQ5qJkvpS1HKuLuU9Ii1mAw5fjJGscfXAOv9szO7janDzM V0y3mFafpumkeL7gWtKmRxJdLdlvvgfaXgyAf3AijTYkeJ/PeQ5Mtg4qrGcqmAYT Uh0wSdWtakPz/H3BvvN5gWVVSYPD9ZG9Hg6fjYGwNzFl+m5kECBg5O1e+sM8Mvmd wUVkfPwde8J79A+Gty7BJKc+vYwrKkFWx9y9qtaMvd7Vwqf6sw2MJapq+5Ug1mtx WwxcH9RpMVuT+TmVZ0GXRN8+Fg79nunf9sAND3AAvJ0WoH6hItyj/aiCgVrnkxkQ XcHGzLc39pghMUuQuPO6RgX/uifEadE= -----END CERTIFICATE-----Generated at Tue Aug 26 18:10:20 2025 by rpki-client