$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/42897673-c89a-3582-ad98-160e3a570366.roa File: 42897673-c89a-3582-ad98-160e3a570366.roa (raw, json) Hash identifier: u7OvGUykIXy2S2Rat7fqoOgEgqWPhTzYabJBBWRUjF0= Subject key identifier: 97:AA:D8:D2:2B:0C:E0:4A:ED:A4:79:F6:8E:8B:EA:F5:3D:51:EE:22 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A8576032198C60AA53C714C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/42897673-c89a-3582-ad98-160e3a570366.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 149440 IP address blocks: 166.88.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:03:21:98:c6:0a:a5:3c:71:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=89336671-8f16-4ba1-973b-827fc3432e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:f3:d8:d4:44:b8:69:35:2c:ec:62:b9:9b: 2d:04:27:e4:15:8a:23:c9:25:81:e2:32:ae:64:0c: ac:ea:23:1c:00:c5:ee:73:43:fd:6d:4c:08:19:65: ac:ce:55:56:6d:8a:3b:b9:50:08:44:b3:c8:ca:42: 6b:1a:d0:3b:ad:32:b8:d5:9e:69:b0:ad:a3:07:73: f7:74:33:3a:0b:7c:a7:b0:f1:4f:ed:b0:b9:c1:29: 1d:ba:61:67:de:e4:b8:af:09:73:72:c0:fe:40:86: bb:05:39:dd:5e:66:a5:13:ed:ce:88:87:0d:48:af: 7f:bb:7d:9f:fa:7d:da:89:b6:51:b3:f2:ef:4b:55: 34:f4:fa:fc:21:48:88:ab:28:50:8c:e7:0d:23:e8: 57:a5:1e:34:cb:f2:28:be:f9:b7:fb:43:af:79:0f: a8:a6:f2:3f:e9:bf:c3:37:a0:50:bb:76:04:41:ca: 9c:4f:e0:b4:0f:23:0d:5e:0e:fc:4d:0a:53:41:08: 65:ef:13:13:81:56:4f:9f:e9:04:60:49:30:42:06: db:8c:d2:0c:a0:68:10:d1:91:06:82:a3:9f:4b:ec: 75:7b:58:47:c2:2b:40:96:68:c3:a0:dc:7e:de:a1: 85:95:b7:e9:6e:5a:ce:e5:9e:6b:e3:ee:9a:02:3f: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AA:D8:D2:2B:0C:E0:4A:ED:A4:79:F6:8E:8B:EA:F5:3D:51:EE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/42897673-c89a-3582-ad98-160e3a570366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:91:7c:b8:79:75:a8:62:34:10:4a:9c:75:77:72:7c:fc:5d: 97:be:f0:52:d3:69:b0:ff:35:2f:79:5e:a0:5c:26:3f:8f:18: 44:b8:0e:0b:f9:48:f0:49:46:e1:8d:8e:d2:89:98:bb:54:28: f2:2e:30:f7:4b:ae:a1:8e:13:f6:39:e9:a5:5a:8a:71:eb:c6: db:72:aa:c2:f9:23:ab:be:46:fd:d2:26:b1:fb:d6:d8:1b:f0: 16:bb:c3:50:09:18:a9:53:17:b2:cd:94:38:69:77:4c:c5:80: 41:43:71:eb:2c:5c:e1:05:fc:77:d4:fc:71:fd:dc:27:d4:2b: 3b:0e:ac:9f:60:c4:34:7b:9a:f7:48:96:72:86:48:d3:85:52: 7d:8c:0d:8e:39:db:26:0f:89:4f:6b:6b:40:4c:b8:70:da:0e: d3:9d:a8:7c:fd:63:5c:31:74:55:13:7f:2d:43:ac:e5:dc:87: c7:99:f6:c8:79:31:91:d8:71:10:26:93:b7:b2:4a:7e:ec:9b: 16:38:3d:5e:5f:81:5d:f1:23:82:42:aa:a6:0c:fa:3f:46:0a: ee:f9:49:da:b2:7d:18:15:e0:c4:25:3c:36:46:9f:bd:55:4f: 5d:3d:e6:de:96:6c:a9:11:d6:24:14:2b:e0:9a:31:37:3b:c2: fd:b6:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgMhmMYKpTxxTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ODkzMzY2NzEtOGYxNi00YmExLTk3M2ItODI3ZmMzNDMyZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQzz2NREuGk1LOxiuZstBCfkFYojySWB4jKu ZAys6iMcAMXuc0P9bUwIGWWszlVWbYo7uVAIRLPIykJrGtA7rTK41Z5psK2jB3P3 dDM6C3ynsPFP7bC5wSkdumFn3uS4rwlzcsD+QIa7BTndXmalE+3OiIcNSK9/u32f +n3aibZRs/LvS1U09Pr8IUiIqyhQjOcNI+hXpR40y/Iovvm3+0OveQ+opvI/6b/D N6BQu3YEQcqcT+C0DyMNXg78TQpTQQhl7xMTgVZPn+kEYEkwQgbbjNIMoGgQ0ZEG gqOfS+x1e1hHwitAlmjDoNx+3qGFlbfpblrO5Z5r4+6aAj91fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeq2NIrDOBK7aR59o6L6vU9Ue4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI4OTc2NzMtYzg5YS0z NTgyLWFkOTgtMTYwZTNhNTcwMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6RfLh5dahiNBBKnHV3cnz8XZe+8FLTabD/NS95XqBcJj+PGES4Dgv5 SPBJRuGNjtKJmLtUKPIuMPdLrqGOE/Y56aVainHrxttyqsL5I6u+Rv3SJrH71tgb 8Ba7w1AJGKlTF7LNlDhpd0zFgEFDcessXOEF/HfU/HH93CfUKzsOrJ9gxDR7mvdI lnKGSNOFUn2MDY452yYPiU9ra0BMuHDaDtOdqHz9Y1wxdFUTfy1DrOXch8eZ9sh5 MZHYcRAmk7eySn7smxY4PV5fgV3xI4JCqqYM+j9GCu75SdqyfRgV4MQlPDZGn71V T1095t6WbKkR1iQUK+CaMTc7wv22+24= -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:56 2025 by rpki-client