$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa File: fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa (raw, json) Hash identifier: wTo0/2+w18JGecxKTNai+y7yMOY2tNAsx3OvUR6HYPU= Subject key identifier: 76:37:56:6D:C2:4B:AD:79:9B:52:12:B1:5A:C9:A8:52:AB:7F:07:CB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF951504AF737F14184AE5240 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 166.88.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:50:4a:f7:37:f1:41:84:ae:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=1b7c8fcf-50c4-46fa-9b30-a5f156a48708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:41:18:45:05:14:62:ef:f7:21:21:1f:90: 46:05:7c:a2:9e:7b:98:96:d8:e6:e3:2f:b7:c3:4e: a1:26:7c:f0:05:3a:cd:57:29:49:36:a4:42:bb:42: 9f:b1:e8:15:cb:52:25:a5:d3:37:5f:18:4a:1e:9b: cc:14:34:4b:f5:22:e6:e5:49:39:9e:ec:0f:4b:23: 8c:73:fc:31:77:f0:b4:d1:c7:1b:cd:7b:06:e1:e0: 62:fd:8a:c0:b7:3b:48:42:0f:78:37:cb:04:18:5d: c5:31:57:99:ef:a1:46:38:b8:75:eb:fe:92:0d:0a: 2c:0f:02:a2:70:69:6e:28:6a:e9:a8:6c:b8:1b:07: 19:16:69:8c:c7:37:68:39:04:ac:eb:e4:b9:fb:35: 5d:58:fc:ac:22:4b:c9:72:9f:2b:4d:d1:d7:ce:52: ec:43:28:2e:4c:b4:3e:f5:e5:70:86:62:d1:bb:d5: 89:9b:12:9e:3a:85:e6:2a:20:c5:5a:d2:60:b7:74: cf:6c:11:d6:14:d6:bd:16:09:bc:8c:3b:da:90:80: c3:55:46:25:d5:55:ad:13:5b:c7:83:54:3a:da:26: af:1d:91:02:b9:c4:32:46:95:ff:db:2b:fe:13:c6: d6:66:63:03:0d:0e:cd:ae:db:f1:fe:3c:76:63:a2: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:37:56:6D:C2:4B:AD:79:9B:52:12:B1:5A:C9:A8:52:AB:7F:07:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c4:bb:f2:dc:1e:59:9c:4c:43:19:34:57:a4:af:f2:80:ed: 2f:81:d4:20:09:73:ab:4f:c6:7b:63:17:3b:3c:3f:29:7a:da: 17:e9:d4:7c:1e:12:65:d6:0f:76:fa:72:c8:b7:76:26:ff:c0: 46:33:14:c9:47:e2:ea:9f:24:5e:a8:51:ee:c6:47:96:f8:4d: c8:a9:ea:cc:8c:dd:5d:d7:01:cc:a5:79:97:98:e7:60:46:5e: 67:2b:5b:09:1f:79:c1:f6:67:f9:72:db:30:a0:73:09:0d:22: 5b:a2:3c:46:6e:f0:b9:54:73:d3:10:cb:af:97:87:68:1a:8f: f9:9b:a6:64:9d:bd:94:44:62:1a:e8:00:c9:57:87:ef:1c:19: 08:ef:df:b5:33:67:f4:81:d1:d3:7f:b2:9d:c5:c0:32:8f:af: 02:b3:f8:6e:56:e8:ae:ea:00:84:05:85:f6:f1:6f:46:38:93: 1d:48:d5:17:af:8c:7a:de:cb:cb:38:25:80:34:6f:7b:eb:1c: 71:da:67:dc:4b:7f:86:99:43:c4:fc:c0:8f:d5:4f:09:6e:fc: 92:d2:0c:c4:d3:8e:e8:96:03:c4:e7:d2:d8:92:10:f6:25:f5: 4e:23:50:77:d1:08:9f:89:42:41:29:3a:52:84:a0:2a:de:a9: c5:aa:6d:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVBK9zfxQYSuUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWI3YzhmY2YtNTBjNC00NmZhLTliMzAtYTVmMTU2YTQ4NzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg9BGEUFFGLv9yEhH5BGBXyinnuYltjm4y+3 w06hJnzwBTrNVylJNqRCu0KfsegVy1IlpdM3XxhKHpvMFDRL9SLm5Uk5nuwPSyOM c/wxd/C00ccbzXsG4eBi/YrAtztIQg94N8sEGF3FMVeZ76FGOLh16/6SDQosDwKi cGluKGrpqGy4GwcZFmmMxzdoOQSs6+S5+zVdWPysIkvJcp8rTdHXzlLsQyguTLQ+ 9eVwhmLRu9WJmxKeOoXmKiDFWtJgt3TPbBHWFNa9Fgm8jDvakIDDVUYl1VWtE1vH g1Q62iavHZECucQyRpX/2yv+E8bWZmMDDQ7Nrtvx/jx2Y6JF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY3Vm3CS615m1ISsVrJqFKrfwfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmNkNDBiYjYtZWJmMC0z NWY0LWJiMWItODM2ODU5MjAzOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApli8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPEu/LcHlmcTEMZNFekr/KA7S+B1CAJc6tPxntjFzs8Pyl62hfp1Hwe EmXWD3b6csi3dib/wEYzFMlH4uqfJF6oUe7GR5b4Tcip6syM3V3XAcyleZeY52BG XmcrWwkfecH2Z/ly2zCgcwkNIluiPEZu8LlUc9MQy6+Xh2gaj/mbpmSdvZREYhro AMlXh+8cGQjv37UzZ/SB0dN/sp3FwDKPrwKz+G5W6K7qAIQFhfbxb0Y4kx1I1Rev jHrey8s4JYA0b3vrHHHaZ9xLf4aZQ8T8wI/VTwlu/JLSDMTTjuiWA8Tn0tiSEPYl 9U4jUHfRCJ+JQkEpOlKEoCreqcWqbVA= -----END CERTIFICATE-----Generated at Tue Aug 26 18:08:25 2025 by rpki-client