$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa File: 907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa (raw, json) Hash identifier: 996QNnJn4JvQo0o5DNDgYpYhWaKwWXuvUbVFlhEEuis= Subject key identifier: 31:BC:79:38:DA:6E:4A:C2:A7:F5:FC:38:FE:3C:A2:77:4B:73:9F:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB43357877C064DD871410780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa Signing time: Thu 31 Jul 2025 18:49:43 +0000 ROA not before: Thu 31 Jul 2025 18:49:43 +0000 ROA not after: Wed 29 Oct 2025 18:49:43 +0000 asID: 401152 IP address blocks: 166.88.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:33:57:87:7c:06:4d:d8:71:41:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 31 18:49:43 2025 GMT Not After : Oct 29 18:49:43 2025 GMT Subject: CN=6d936df6-e12b-4e82-9aa7-b8201e680714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:89:ea:1b:c7:40:a7:56:d2:33:86:b7:f3: a2:9f:64:34:25:17:05:14:e9:7a:3a:a9:37:e6:3c: c6:3e:81:5a:b8:87:28:91:b6:d5:ba:30:23:43:4e: 46:7e:41:93:aa:fb:93:7b:ca:df:3c:c0:41:74:ca: 5e:61:a5:ac:31:d0:5a:8d:51:c3:32:b9:81:14:df: 8b:b3:53:cd:5f:e7:9e:f5:d9:a8:b8:12:e6:b5:3c: d5:8f:3a:0a:c7:1d:44:2a:da:ef:18:f2:54:fd:f0: 82:46:e6:fa:a3:75:c1:33:44:16:4a:b3:be:bc:64: f9:72:da:48:55:6d:18:90:92:23:79:03:db:2f:f1: 29:2f:64:32:c1:e9:87:42:4a:17:df:e9:df:31:9e: 91:d5:08:1b:cc:ac:33:5f:df:0e:f0:dc:f8:29:c9: d0:74:0e:22:36:66:44:16:84:70:d0:89:0f:1c:09: 27:f3:7a:a5:f3:74:dd:e5:3b:38:06:40:d4:d3:fe: a9:21:e5:74:3f:76:78:9a:2a:df:10:f7:ce:c4:1a: 93:37:fb:50:d3:0d:6a:b5:28:9a:3d:57:20:b5:12: bc:81:3b:13:59:58:a3:1c:2a:fc:7e:da:2c:0e:0c: c7:10:6c:14:36:f6:ba:4b:05:d5:23:cc:ca:ec:96: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BC:79:38:DA:6E:4A:C2:A7:F5:FC:38:FE:3C:A2:77:4B:73:9F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/907e1b0c-1f61-3fdf-bc58-a2eee123cfdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b5:a3:03:43:9b:51:52:b3:b4:4e:77:e8:f8:d2:fd:0b:14: fa:ab:0c:11:bf:70:e6:91:cd:cb:26:ed:a3:2e:5b:82:24:cc: f3:c1:1e:c6:8e:e6:9c:8f:0f:ed:b2:29:46:db:d2:5d:72:7d: e5:d9:46:be:40:52:38:83:89:93:38:ed:7d:9b:74:a1:f9:05: 47:93:76:e4:80:d0:96:29:d9:b4:d0:bb:d4:33:9e:36:cd:65: c9:2c:bc:92:fb:9f:5f:9e:45:a3:e1:2e:2e:96:15:8e:0e:7e: 06:24:9a:30:ac:c2:93:0b:a0:a6:45:68:b1:f9:4b:1f:72:d1: 0e:60:7e:c0:6f:d6:6a:d0:d0:07:32:db:1b:de:ab:a2:7b:f0: f0:c0:f8:31:e7:46:b8:70:0c:b6:48:0a:f4:5b:01:9c:51:66: bc:63:b8:c8:15:8c:00:93:78:b5:5f:d1:8a:fd:70:70:94:9b: cd:99:8f:5f:7c:f6:f2:eb:c0:d3:59:1d:c8:4e:d6:25:3e:32: 00:d2:19:02:92:f7:04:3e:3c:7c:df:17:2d:4a:b3:bc:c0:f6: d1:df:31:eb:6a:39:47:10:dd:03:5c:42:23:4f:31:44:e9:24: 8e:44:04:82:e2:9e:10:21:3d:02:df:fe:0b:d1:72:54:f4:14: 48:86:b0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0M1eHfAZN2HFBB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDczMTE4NDk0M1oXDTI1MTAyOTE4NDk0M1owLzEtMCsGA1UEAxMk NmQ5MzZkZjYtZTEyYi00ZTgyLTlhYTctYjgyMDFlNjgwNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaGJ6hvHQKdW0jOGt/Oin2Q0JRcFFOl6Oqk3 5jzGPoFauIcokbbVujAjQ05GfkGTqvuTe8rfPMBBdMpeYaWsMdBajVHDMrmBFN+L s1PNX+ee9dmouBLmtTzVjzoKxx1EKtrvGPJU/fCCRub6o3XBM0QWSrO+vGT5ctpI VW0YkJIjeQPbL/EpL2QywemHQkoX3+nfMZ6R1QgbzKwzX98O8Nz4KcnQdA4iNmZE FoRw0IkPHAkn83ql83Td5Ts4BkDU0/6pIeV0P3Z4mirfEPfOxBqTN/tQ0w1qtSia PVcgtRK8gTsTWVijHCr8ftosDgzHEGwUNva6SwXVI8zK7JYVgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG8eTjabkrCp/X8OP48ondLc58CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTA3ZTFiMGMtMWY2MS0z ZmRmLWJjNTgtYTJlZWUxMjNjZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC1owNDm1FSs7ROd+j40v0LFPqrDBG/cOaRzcsm7aMuW4IkzPPBHsaO 5pyPD+2yKUbb0l1yfeXZRr5AUjiDiZM47X2bdKH5BUeTduSA0JYp2bTQu9QznjbN ZcksvJL7n1+eRaPhLi6WFY4OfgYkmjCswpMLoKZFaLH5Sx9y0Q5gfsBv1mrQ0Acy 2xveq6J78PDA+DHnRrhwDLZICvRbAZxRZrxjuMgVjACTeLVf0Yr9cHCUm82Zj198 9vLrwNNZHchO1iU+MgDSGQKS9wQ+PHzfFy1Ks7zA9tHfMetqOUcQ3QNcQiNPMUTp JI5EBILinhAhPQLf/gvRclT0FEiGsCw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:10 2025 by rpki-client