$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa File: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (raw, json) Hash identifier: iLtsEIbcKRx/72kgI0wh76EFrQLCUvM8Avqt5iAslb4= Subject key identifier: 91:1A:5F:4B:B9:2F:D8:DA:74:0E:1B:7C:20:DD:A7:47:CD:EE:C3:D9 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584A8B0B5F17178FB49B387C2600 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 398813 IP address blocks: 166.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5f:17:17:8f:b4:9b:38:7c:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=dfd4147b-3526-4c84-a872-f51a76e89cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:24:a6:24:c5:74:46:f0:60:f8:02:d9:6e: 82:c9:2d:99:d7:e0:a1:2d:23:40:47:23:05:17:dc: cc:7a:dd:27:8b:0f:40:16:5b:e4:ea:7c:93:c0:de: 40:10:70:97:7b:5b:92:30:45:27:24:b6:18:a0:e4: 12:ce:a5:ad:f2:86:82:ac:c4:77:f2:bd:9d:01:0b: 28:c1:3d:50:70:26:d1:e6:4d:14:89:8d:45:cc:87: 88:c4:85:9a:c5:da:ac:59:3d:ef:1c:71:35:08:ff: 7d:43:d5:67:cc:ea:64:1f:38:63:fe:56:94:4a:6d: 60:ac:7a:31:7f:e9:c8:75:2a:89:f8:96:10:fa:72: 8b:c1:4f:40:91:7a:ef:c3:55:af:15:78:9e:b6:65: 4c:d9:65:5f:3e:f5:04:d0:c5:f9:b1:88:b2:f0:d2: 66:94:70:79:c1:8d:b2:54:42:c5:31:42:58:f3:3e: 13:16:9a:55:7e:d5:39:9b:56:82:d3:d7:63:da:69: 0f:3f:05:ff:37:52:c7:ae:25:55:99:ae:ac:d7:67: 2f:5a:f9:ab:d6:40:be:ea:2c:95:8c:28:e6:f8:03: 5e:92:63:5a:fc:58:a4:95:b1:4c:12:f8:09:88:bc: 47:1b:31:77:2e:6d:7a:18:7b:67:27:9b:c8:71:68: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:5F:4B:B9:2F:D8:DA:74:0E:1B:7C:20:DD:A7:47:CD:EE:C3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:44:5d:a3:dc:ca:26:0d:41:fa:7b:58:f1:7e:c1:41:26:85: 13:78:1a:86:8e:98:2e:62:78:83:48:99:b1:1d:d1:52:62:45: 82:7f:fd:ef:c4:28:2f:b5:0f:9c:88:10:a1:45:45:ca:87:69: 45:f7:d3:b0:71:d2:f5:22:4a:bf:ae:db:65:6f:5d:78:94:8b: 25:8d:79:34:d3:60:2f:2f:6f:e7:66:2d:d1:ff:96:66:08:e1: d0:97:95:93:ae:48:9a:24:c2:44:40:ab:02:9d:fb:af:e4:63: c5:87:7c:dc:54:d5:b9:42:86:57:63:75:0e:df:8f:7f:b6:0c: 72:fc:b3:9a:8b:4b:32:6d:cd:24:dc:31:5e:89:5a:fe:05:c1: c9:c4:26:02:58:0a:50:23:cf:42:21:cc:1e:98:fe:21:4c:19: 74:f9:ee:5d:c1:15:0d:4f:8a:51:e6:68:77:2d:e6:1e:fa:50: 3c:0c:dc:45:09:60:96:53:2f:82:26:24:04:9d:1d:0f:a6:10: cc:0b:da:3d:16:9f:4c:cd:bb:09:3c:0e:0d:02:49:b7:a2:ca: 29:04:5b:b4:5b:1a:13:c4:0f:48:b0:e8:2d:78:5e:f5:06:2d: 64:40:72:83:b9:52:93:50:b3:82:8b:65:5e:91:64:40:4d:1c: 3e:02:e4:7d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqLC18XF4+0mzh8JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZGZkNDE0N2ItMzUyNi00Yzg0LWE4NzItZjUxYTc2ZTg5Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvskpiTFdEbwYPgC2W6CyS2Z1+ChLSNARyMF F9zMet0niw9AFlvk6nyTwN5AEHCXe1uSMEUnJLYYoOQSzqWt8oaCrMR38r2dAQso wT1QcCbR5k0UiY1FzIeIxIWaxdqsWT3vHHE1CP99Q9VnzOpkHzhj/laUSm1grHox f+nIdSqJ+JYQ+nKLwU9AkXrvw1WvFXietmVM2WVfPvUE0MX5sYiy8NJmlHB5wY2y VELFMUJY8z4TFppVftU5m1aC09dj2mkPPwX/N1LHriVVma6s12cvWvmr1kC+6iyV jCjm+ANekmNa/FiklbFMEvgJiLxHGzF3Lm16GHtnJ5vIcWg+RQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJEaX0u5L9jadA4bfCDdp0fN7sPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvMDg4YjEwOTgtOWYxMy0z YjljLTllZDItMWM4NzlmMDc5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALERdo9zKJg1B+ntY8X7BQSaFE3gaho6YLmJ4g0iZsR3RUmJFgn/978Qo L7UPnIgQoUVFyodpRffTsHHS9SJKv67bZW9deJSLJY15NNNgLy9v52Yt0f+WZgjh 0JeVk65ImiTCRECrAp37r+RjxYd83FTVuUKGV2N1Dt+Pf7YMcvyzmotLMm3NJNwx Xola/gXBycQmAlgKUCPPQiHMHpj+IUwZdPnuXcEVDU+KUeZody3mHvpQPAzcRQlg llMvgiYkBJ0dD6YQzAvaPRafTM27CTwODQJJt6LKKQRbtFsaE8QPSLDoLXhe9QYt ZEByg7lSk1CzgotlXpFkQE0cPgLkfQ== -----END CERTIFICATE-----Generated at Tue Aug 5 19:56:59 2025 by rpki-client