$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa File: 843a7bc0-ba40-3899-a79f-a86d4c85c631.roa (raw, json) Hash identifier: y7EBVCX1q4qw4fp6g/kou1gMrK7PBR/ZBNnDnfxFPwU= Subject key identifier: 86:02:53:C8:C6:19:89:DB:F1:82:6F:ED:88:57:06:D5:5F:FA:47:D3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AECC2065EC3EAFDE39472C740 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26383 IP address blocks: 166.88.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:06:5e:c3:ea:fd:e3:94:72:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=203f6301-758a-4839-8c3f-396b8550c10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:e2:90:f2:da:bc:f1:4c:41:88:1a:31:7e: ae:ed:13:16:43:7d:3b:a5:d4:a1:50:d9:1a:6c:2c: 14:08:b8:75:0b:5f:d8:03:a8:a1:e6:15:48:8b:9c: c7:6f:e4:f8:1e:5e:a5:94:ca:8e:16:8f:61:37:d5: 86:99:39:dc:47:39:34:d3:d2:c0:20:50:fb:d2:31: c7:21:2e:6f:a5:0d:e5:37:67:a7:db:b9:ac:05:4d: fc:9a:6e:dc:72:7c:c4:8d:85:69:eb:29:79:4b:41: 47:f8:33:6c:29:3c:35:92:17:f6:29:27:9e:6c:97: de:8d:ae:87:14:b6:92:4b:bc:c5:ba:70:f3:13:22: 18:6f:b8:91:07:5e:63:40:a6:a9:88:59:4f:5b:d9: a8:8e:ab:51:b4:0e:e8:f6:b6:b3:d3:d5:3d:da:30: 50:2e:74:d0:2c:9b:29:22:cd:30:15:bc:f1:0a:49: e0:0b:5a:c2:5c:36:73:14:e1:7a:0c:d8:4d:eb:f4: 44:0a:d2:4c:ce:29:53:5c:6b:15:1f:79:80:08:3a: c6:f0:1f:02:6d:97:1c:89:b1:3c:6b:ab:ef:1c:ff: af:76:05:ce:60:62:6d:42:e9:da:12:59:01:48:40: c3:57:e2:ec:4f:11:d9:f0:18:8c:73:22:29:09:f0: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:02:53:C8:C6:19:89:DB:F1:82:6F:ED:88:57:06:D5:5F:FA:47:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:87:33:74:30:38:73:f8:de:f1:80:3f:c1:22:17:8c:f3:f0: 02:fb:a7:5d:32:04:c6:96:c0:e9:4a:6b:e4:b4:be:5e:ee:07: be:90:99:fe:a8:1c:ff:ea:0a:67:3b:49:a5:a1:fc:20:04:8a: 45:b3:7e:68:f5:c9:4c:4e:ef:a6:05:ff:1b:e3:36:f5:19:6a: 71:27:71:09:6d:0b:5a:3c:07:ef:c5:e0:af:b9:81:29:5e:33: 81:27:a4:b0:1d:c7:a9:01:5f:1e:b5:51:b1:38:2a:6d:fa:58: d9:ff:ae:47:e0:d2:3e:1a:c4:c1:33:dc:1f:fa:1d:07:32:36: 9b:be:a1:c8:55:62:61:53:7f:11:cd:52:4e:e0:37:0b:90:1f: d1:e1:bc:dc:7d:dd:e2:9c:6d:33:d8:9e:0a:a5:b2:93:5b:84: 79:79:7b:7a:a3:08:01:ff:61:3d:8f:04:70:e0:fe:e9:25:7b: 0e:ea:8b:2b:c7:20:42:61:86:7a:39:91:19:6d:87:8f:85:d8: c4:58:c1:5c:5e:2f:03:95:6f:e5:2f:aa:9b:ff:ca:0b:d3:a1: a2:90:15:9e:80:d9:67:3e:44:fe:10:a0:be:1d:85:83:6a:0d: 77:9d:1a:51:a0:4b:d3:f4:70:79:9a:f0:ee:b4:13:3d:58:7c: 0a:2e:ca:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswgZew+r945Ryx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjAzZjYzMDEtNzU4YS00ODM5LThjM2YtMzk2Yjg1NTBjMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHnikPLavPFMQYgaMX6u7RMWQ307pdShUNka bCwUCLh1C1/YA6ih5hVIi5zHb+T4Hl6llMqOFo9hN9WGmTncRzk009LAIFD70jHH IS5vpQ3lN2en27msBU38mm7ccnzEjYVp6yl5S0FH+DNsKTw1khf2KSeebJfeja6H FLaSS7zFunDzEyIYb7iRB15jQKapiFlPW9mojqtRtA7o9raz09U92jBQLnTQLJsp Is0wFbzxCkngC1rCXDZzFOF6DNhN6/RECtJMzilTXGsVH3mACDrG8B8CbZccibE8 a6vvHP+vdgXOYGJtQunaElkBSEDDV+LsTxHZ8BiMcyIpCfC/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYCU8jGGYnb8YJv7YhXBtVf+kfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODQzYTdiYzAtYmE0MC0z ODk5LWE3OWYtYTg2ZDRjODVjNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSHM3QwOHP43vGAP8EiF4zz8AL7p10yBMaWwOlKa+S0vl7uB76Qmf6o HP/qCmc7SaWh/CAEikWzfmj1yUxO76YF/xvjNvUZanEncQltC1o8B+/F4K+5gSle M4EnpLAdx6kBXx61UbE4Km36WNn/rkfg0j4axMEz3B/6HQcyNpu+ochVYmFTfxHN Uk7gNwuQH9HhvNx93eKcbTPYngqlspNbhHl5e3qjCAH/YT2PBHDg/uklew7qiyvH IEJhhno5kRlth4+F2MRYwVxeLwOVb+Uvqpv/ygvToaKQFZ6A2Wc+RP4QoL4dhYNq DXedGlGgS9P0cHma8O60Ez1YfAouyg0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:09 2025 by rpki-client