$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa File: 59f6afbb-919b-3388-ab22-83582473d385.roa (raw, json) Hash identifier: tsSgZB+EQyXxzS8aIZb8FzdrT0PfPEWUdPoKi+sN9rs= Subject key identifier: DC:D2:E6:01:BB:E7:80:29:BC:3D:E7:5B:D2:53:86:EA:A7:3B:86:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A90A0DF05BE25BC3B4F5DF878 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 26383 IP address blocks: 166.88.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:df:05:be:25:bc:3b:4f:5d:f8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=338ab77c-48a1-4e7e-b2e6-891bb7187e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:38:20:29:bd:e5:cc:c9:3b:ba:f7:f7:50: 34:96:cc:0d:e5:4a:3c:ca:a7:e8:a6:44:53:76:7b: a7:fc:d3:a2:2f:0a:c5:93:2e:48:11:23:27:5c:6d: 4e:fb:8d:d6:ab:f1:70:29:0f:ec:43:97:a0:05:c4: 37:9f:90:70:90:98:7c:ba:c3:51:aa:14:5d:c7:94: 00:a3:be:4c:7d:7a:3c:c1:c7:3b:d1:84:21:70:c5: f1:8b:90:d6:fc:9d:13:c5:46:e9:ca:0b:62:0e:34: a6:f6:b8:7d:6c:5b:ef:ca:bd:fe:87:64:b7:08:b5: 07:45:31:10:21:82:8f:fe:64:51:e6:f5:08:7d:dd: 90:08:01:2a:eb:f7:52:93:76:ba:cb:05:84:33:8e: dd:a4:86:e5:1c:d0:95:69:7c:ca:68:21:37:f8:36: 02:70:60:2c:3d:c7:e1:b0:bd:87:87:ac:ae:a2:6c: ef:e1:c5:7c:59:68:b5:ab:3a:15:9c:8b:b6:85:00: c5:45:1f:a9:1d:51:d2:bf:71:9e:00:90:cc:34:81: 05:90:02:e7:2b:49:1a:c1:a9:64:ba:79:25:ee:3a: d5:44:92:07:a3:1c:3e:70:14:0f:f6:f5:7f:ce:98: 7d:dd:24:ae:2d:38:85:30:db:33:68:08:5c:d0:dd: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:E6:01:BB:E7:80:29:BC:3D:E7:5B:D2:53:86:EA:A7:3B:86:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d3:31:f4:30:ab:17:ef:39:fa:7b:81:8d:8a:b8:0a:8b:0d: 94:84:79:23:81:b0:0b:f4:16:a3:75:58:86:55:cb:32:8a:40: 6d:a5:77:5b:d6:ce:7b:b2:d7:22:29:f8:46:2d:b8:2f:16:1f: 25:a3:e6:77:83:91:94:53:7d:9c:c0:03:57:6f:40:3f:18:83: cc:53:34:e7:23:9c:93:f5:c4:a3:6c:3c:f1:4b:60:5f:bb:ea: 05:45:8c:fe:91:91:83:76:2b:a6:c4:c7:c2:c2:4f:f9:bf:9e: 44:e7:17:b5:d8:f4:17:f7:68:66:e6:57:34:5d:a4:48:a1:11: ea:f0:6f:49:2d:a3:8b:d1:37:aa:96:47:ea:5a:de:63:48:88: c3:d3:6c:9a:01:7d:df:69:5a:3e:45:04:91:d6:35:df:9d:79: 00:fd:d9:31:c0:41:a2:b0:dc:d7:8b:7b:35:ed:ee:e4:c6:04: 30:b7:60:de:68:70:55:8c:64:d1:72:ff:3d:53:4d:94:b8:c3: 37:ff:c8:34:f3:30:b0:d9:1f:6f:0b:f1:75:fb:aa:4b:3c:28: 2c:1a:13:de:e3:59:07:b7:d1:a6:f2:85:9b:80:1a:63:dd:5d: 29:5e:96:81:24:22:6a:53:67:37:bf:c0:a1:f0:6e:7b:18:66: 8e:82:1a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN8FviW8O09d+HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzM4YWI3N2MtNDhhMS00ZTdlLWIyZTYtODkxYmI3MTg3ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktY4ICm95czJO7r391A0lswN5Uo8yqfopkRT dnun/NOiLwrFky5IESMnXG1O+43Wq/FwKQ/sQ5egBcQ3n5BwkJh8usNRqhRdx5QA o75MfXo8wcc70YQhcMXxi5DW/J0TxUbpygtiDjSm9rh9bFvvyr3+h2S3CLUHRTEQ IYKP/mRR5vUIfd2QCAEq6/dSk3a6ywWEM47dpIblHNCVaXzKaCE3+DYCcGAsPcfh sL2Hh6yuomzv4cV8WWi1qzoVnIu2hQDFRR+pHVHSv3GeAJDMNIEFkALnK0kawalk unkl7jrVRJIHoxw+cBQP9vV/zph93SSuLTiFMNszaAhc0N3oGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzS5gG754ApvD3nW9JThuqnO4YCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTlmNmFmYmItOTE5Yi0z Mzg4LWFiMjItODM1ODI0NzNkMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELTMfQwqxfvOfp7gY2KuAqLDZSEeSOBsAv0FqN1WIZVyzKKQG2ld1vW znuy1yIp+EYtuC8WHyWj5neDkZRTfZzAA1dvQD8Yg8xTNOcjnJP1xKNsPPFLYF+7 6gVFjP6RkYN2K6bEx8LCT/m/nkTnF7XY9Bf3aGbmVzRdpEihEerwb0kto4vRN6qW R+pa3mNIiMPTbJoBfd9pWj5FBJHWNd+deQD92THAQaKw3NeLezXt7uTGBDC3YN5o cFWMZNFy/z1TTZS4wzf/yDTzMLDZH28L8XX7qks8KCwaE97jWQe30abyhZuAGmPd XSleloEkImpTZze/wKHwbnsYZo6CGpw= -----END CERTIFICATE-----Generated at Sat Aug 9 05:44:09 2025 by rpki-client