$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db5d9fdf-c8ad-3004-b338-787dda3d51cf.roa File: db5d9fdf-c8ad-3004-b338-787dda3d51cf.roa (raw, json) Hash identifier: FT9+PYKn8qU7CWBlAZyVxLFDpxjAqEipHdo1mnkYga0= Subject key identifier: D6:64:57:98:FA:D1:FC:D3:DB:2E:03:36:D6:98:92:96:38:2A:BE:98 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB433579DAFB488C91CD5C0E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db5d9fdf-c8ad-3004-b338-787dda3d51cf.roa Signing time: Thu 31 Jul 2025 18:49:43 +0000 ROA not before: Thu 31 Jul 2025 18:49:43 +0000 ROA not after: Wed 29 Oct 2025 18:49:43 +0000 asID: 401152 IP address blocks: 166.88.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:33:57:9d:af:b4:88:c9:1c:d5:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 31 18:49:43 2025 GMT Not After : Oct 29 18:49:43 2025 GMT Subject: CN=8991f8f2-97cb-43f6-a94e-01876fb7424d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:93:aa:a1:67:6e:18:a5:ce:5c:c9:bb:b4: 7b:c3:ed:26:d3:c2:50:8c:5c:38:73:62:21:4f:b5: 93:e0:01:e7:ff:4c:07:8e:12:8b:f6:2c:e9:4e:b7: 51:ef:dc:de:63:08:c5:f3:04:38:87:81:c0:21:d7: 18:b3:3e:73:43:b0:68:7c:e5:b2:92:cb:cd:36:4d: 85:c7:4c:fd:d7:85:19:cb:4a:3f:e5:2f:78:cd:be: 74:a3:9a:b7:20:99:ed:69:37:e5:0c:45:22:af:d3: 98:75:7c:40:25:5b:c3:19:45:d7:c2:eb:8b:86:a3: 53:48:58:bb:28:6f:24:d1:75:c7:01:b8:54:e1:52: 92:99:04:27:e9:62:28:75:6b:7f:ac:9d:59:19:60: 24:ad:99:73:83:97:75:23:29:3f:55:b7:f3:b9:90: 3f:ca:4b:5d:90:b7:d0:70:66:c7:81:91:63:4a:01: 69:69:1b:8d:2a:3a:b5:96:95:0c:e3:b8:cc:fa:2e: a3:80:6e:0b:c0:88:c8:6b:70:4e:31:23:5d:6b:84: f8:85:af:7c:75:a7:fe:23:85:3c:ac:0c:ec:49:60: 3f:49:75:5b:6d:01:98:95:af:23:1c:1c:58:9a:7e: d6:f0:e6:48:64:d4:b6:45:fc:50:03:47:24:ed:cc: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:64:57:98:FA:D1:FC:D3:DB:2E:03:36:D6:98:92:96:38:2A:BE:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db5d9fdf-c8ad-3004-b338-787dda3d51cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6c:22:4d:e0:e8:17:18:2b:aa:03:30:5a:a6:10:c8:a8:ed: d0:c0:07:24:00:2c:9d:7a:2c:7c:6c:4a:dc:94:b8:fc:ed:74: e0:84:79:8c:ae:65:39:32:dd:1c:ed:b4:7c:51:b2:b1:00:23: 0c:44:7c:dd:11:09:2b:a8:9b:ba:50:51:20:0a:ac:27:2b:1c: b0:a7:f0:a5:45:c5:84:a1:f3:2d:e2:81:4e:93:1e:d2:ca:df: ee:6b:c4:db:41:f0:0e:fd:d3:3a:cf:c2:27:29:5b:7b:4d:20: c8:31:f1:cb:1b:a0:9b:6b:76:fe:13:71:71:df:41:eb:5c:46: 06:41:58:75:da:bd:69:57:ca:e9:9f:2e:36:9b:a9:0c:f0:b0: 3c:60:3c:e2:1e:e4:ad:18:67:19:f4:21:d9:22:d4:eb:1d:10: df:f7:38:67:d9:66:1e:bb:03:15:bc:48:52:f0:48:7e:21:fa: 5b:5c:41:c0:c6:0b:30:3a:7a:a8:d1:7b:39:61:4a:73:70:9a: 62:10:5f:92:84:71:0c:b1:2d:bd:53:ee:e7:f0:69:a9:7c:cd: ef:7b:c7:ad:40:56:11:e5:1c:73:9f:ba:be:06:51:66:b6:19: 34:64:d6:77:66:ba:70:11:21:57:68:5f:fb:1b:3f:42:58:b0: a9:41:e7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0M1edr7SIyRzVwOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDczMTE4NDk0M1oXDTI1MTAyOTE4NDk0M1owLzEtMCsGA1UEAxMk ODk5MWY4ZjItOTdjYi00M2Y2LWE5NGUtMDE4NzZmYjc0MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCSTqqFnbhilzlzJu7R7w+0m08JQjFw4c2Ih T7WT4AHn/0wHjhKL9izpTrdR79zeYwjF8wQ4h4HAIdcYsz5zQ7BofOWyksvNNk2F x0z914UZy0o/5S94zb50o5q3IJntaTflDEUir9OYdXxAJVvDGUXXwuuLhqNTSFi7 KG8k0XXHAbhU4VKSmQQn6WIodWt/rJ1ZGWAkrZlzg5d1Iyk/VbfzuZA/yktdkLfQ cGbHgZFjSgFpaRuNKjq1lpUM47jM+i6jgG4LwIjIa3BOMSNda4T4ha98daf+I4U8 rAzsSWA/SXVbbQGYla8jHBxYmn7W8OZIZNS2RfxQA0ck7cxRRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZkV5j60fzT2y4DNtaYkpY4Kr6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGI1ZDlmZGYtYzhhZC0z MDA0LWIzMzgtNzg3ZGRhM2Q1MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5sIk3g6BcYK6oDMFqmEMio7dDAByQALJ16LHxsStyUuPztdOCEeYyu ZTky3RzttHxRsrEAIwxEfN0RCSuom7pQUSAKrCcrHLCn8KVFxYSh8y3igU6THtLK 3+5rxNtB8A790zrPwicpW3tNIMgx8csboJtrdv4TcXHfQetcRgZBWHXavWlXyumf LjabqQzwsDxgPOIe5K0YZxn0Idki1OsdEN/3OGfZZh67AxW8SFLwSH4h+ltcQcDG CzA6eqjRezlhSnNwmmIQX5KEcQyxLb1T7ufwaal8ze97x61AVhHlHHOfur4GUWa2 GTRk1ndmunARIVdoX/sbP0JYsKlB5+Y= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:39 2025 by rpki-client