$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa File: 3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa (raw, json) Hash identifier: s4yfSmkt4X2OqyoW6iUmr8wWFZTxqZo1dugGAe5m8ng= Subject key identifier: D9:AB:BB:AA:5F:43:C4:FC:3F:DB:1F:54:5A:51:A3:3F:39:52:A3:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A94D0E926B265BEB2D6A5BA40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 7018 IP address blocks: 166.88.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:e9:26:b2:65:be:b2:d6:a5:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=b7b7caec-2f3b-41a8-bb90-7c3bba5bdded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:b4:a1:c9:ed:79:71:eb:ae:1a:64:27:c4: 88:8d:9c:21:ca:21:66:8c:2e:72:f2:90:02:3e:0e: a3:01:14:7d:39:4a:19:e8:32:8c:48:22:41:a1:2d: 44:13:31:44:c8:1c:5e:d4:5c:88:5b:69:c0:84:03: 86:38:f6:9a:78:35:f8:47:96:62:6c:3a:65:9c:a2: c7:4f:5d:ba:66:68:80:3e:42:a4:12:4d:00:de:8a: 28:ef:b7:d8:b4:b3:2e:fc:67:60:5f:8f:96:93:91: a0:04:23:bc:7e:b7:a2:d7:61:f4:4d:c4:cd:30:18: 35:d2:db:c8:c1:b0:08:c4:48:d0:22:e5:b0:9a:ef: ad:cb:5c:b8:03:eb:62:e0:0b:e7:cd:ab:eb:d9:d3: fa:94:ca:b9:87:17:42:e1:37:01:20:31:87:04:0c: 44:6e:77:10:5b:a8:e9:23:7f:dd:b3:bd:84:6a:c4: 1e:3d:8b:ae:07:ee:76:f0:47:ff:7b:90:b7:e6:ba: 95:82:e4:6a:45:2e:ef:19:1c:57:bb:4e:d6:12:d1: 8c:83:b2:a7:63:3b:52:ff:a6:44:21:67:cf:e7:53: fd:36:26:24:e9:6f:58:78:77:69:dc:65:7c:c1:d4: 60:c6:a7:7e:46:d3:5c:a8:aa:e6:44:36:3a:a0:19: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AB:BB:AA:5F:43:C4:FC:3F:DB:1F:54:5A:51:A3:3F:39:52:A3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a0d7533-6720-3617-8935-0cfdc8fb6a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:eb:87:51:21:54:4a:70:e7:dd:56:07:ea:78:12:f9:a5:2e: 9c:48:43:99:e7:dc:5e:bf:22:1d:8f:f1:a6:1b:d2:74:40:14: 45:51:f5:4a:e6:50:ca:f9:28:01:58:03:00:fa:2f:bd:ce:a7: 42:f0:45:7a:a2:09:f9:2e:77:85:a2:e3:84:72:5d:8e:3d:00: d3:1e:55:93:b3:63:77:83:2f:26:71:52:31:3a:f3:4a:d0:fa: 1f:7f:7e:fd:ec:19:44:db:79:f9:e2:4b:8a:e6:d5:11:7f:8a: 23:e1:93:52:ba:b7:dd:a7:d7:b9:c2:89:90:0c:2e:1d:06:40: e7:81:42:e1:4b:5c:07:5c:4e:46:bd:17:a1:ca:95:e7:9f:23: bf:0d:24:9d:05:31:40:3a:be:1b:d2:32:31:5a:30:30:8c:40: 21:e6:42:89:db:41:a7:88:f2:25:c4:f0:f5:9c:73:c9:a2:a6: a1:54:f6:fb:6c:62:ed:e8:fb:27:af:e9:f9:f1:e1:04:f2:ec: 57:70:06:46:d6:a1:63:d8:71:4f:41:5b:ec:6c:0b:13:60:3f: dd:7e:bf:99:57:28:58:1b:0e:c6:32:5d:3f:b1:68:f1:88:dc: 90:e3:da:e2:6e:66:9b:37:6e:d8:e7:8c:b3:6c:ae:19:42:d4: 53:ac:2d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0OkmsmW+stalukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk YjdiN2NhZWMtMmYzYi00MWE4LWJiOTAtN2MzYmJhNWJkZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucW0ocnteXHrrhpkJ8SIjZwhyiFmjC5y8pAC Pg6jARR9OUoZ6DKMSCJBoS1EEzFEyBxe1FyIW2nAhAOGOPaaeDX4R5ZibDplnKLH T126ZmiAPkKkEk0A3ooo77fYtLMu/GdgX4+Wk5GgBCO8frei12H0TcTNMBg10tvI wbAIxEjQIuWwmu+ty1y4A+ti4Avnzavr2dP6lMq5hxdC4TcBIDGHBAxEbncQW6jp I3/ds72EasQePYuuB+528Ef/e5C35rqVguRqRS7vGRxXu07WEtGMg7KnYztS/6ZE IWfP51P9NiYk6W9YeHdp3GV8wdRgxqd+RtNcqKrmRDY6oBmRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmru6pfQ8T8P9sfVFpRoz85UqMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EwZDc1MzMtNjcyMC0z NjE3LTg5MzUtMGNmZGM4ZmI2YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbrh1EhVEpw591WB+p4EvmlLpxIQ5nn3F6/Ih2P8aYb0nRAFEVR9Urm UMr5KAFYAwD6L73Op0LwRXqiCfkud4Wi44RyXY49ANMeVZOzY3eDLyZxUjE680rQ +h9/fv3sGUTbefniS4rm1RF/iiPhk1K6t92n17nCiZAMLh0GQOeBQuFLXAdcTka9 F6HKleefI78NJJ0FMUA6vhvSMjFaMDCMQCHmQonbQaeI8iXE8PWcc8mipqFU9vts Yu3o+yev6fnx4QTy7FdwBkbWoWPYcU9BW+xsCxNgP91+v5lXKFgbDsYyXT+xaPGI 3JDj2uJuZps3btjnjLNsrhlC1FOsLVE= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:43 2025 by rpki-client