$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa45a9f1-5d47-3fc7-a692-2e78d2922b47.roa File: aa45a9f1-5d47-3fc7-a692-2e78d2922b47.roa (raw, json) Hash identifier: khPYqpZenPWtOklFdGGEIuwTo3dLuSBg7YpRyvreAA4= Subject key identifier: 34:9E:55:EC:2B:04:61:8D:7D:37:1B:D0:37:D5:23:01:7D:8C:A3:BC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A55130BC05F081B0B2AA43100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa45a9f1-5d47-3fc7-a692-2e78d2922b47.roa Signing time: Fri 27 Jun 2025 17:02:51 +0000 ROA not before: Fri 27 Jun 2025 17:02:51 +0000 ROA not after: Thu 25 Sep 2025 17:02:51 +0000 asID: 7018 IP address blocks: 166.88.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:55:13:0b:c0:5f:08:1b:0b:2a:a4:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 27 17:02:51 2025 GMT Not After : Sep 25 17:02:51 2025 GMT Subject: CN=60194496-be7e-4f7f-bb5a-02b7076ffb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:0b:b0:b8:c2:c0:e3:b0:aa:67:db:de:ee: 4c:87:61:f5:df:03:84:b4:5c:37:38:5d:ff:0e:33: e9:96:5d:76:e1:3e:25:f4:01:5d:fa:a9:c8:12:37: 3e:08:23:3e:1d:95:f5:18:f1:09:f1:a4:30:81:6c: 27:b3:5a:bf:88:20:3c:9b:3d:6c:df:51:ea:0f:d2: df:da:4a:f9:f5:b8:35:37:77:2f:90:a6:56:6a:72: b6:40:60:ba:6a:30:e0:ff:12:bf:9b:74:16:c1:af: 86:ef:11:63:d2:ae:f7:27:9b:0e:3b:05:9c:f8:70: b7:eb:1b:77:52:29:84:e7:94:d8:82:22:b8:8d:e4: ae:c9:53:79:86:c4:39:1f:e3:7c:d3:9e:06:46:d8: 12:53:4a:68:eb:38:32:62:c0:33:e6:10:4f:75:38: e7:ff:5f:1a:fb:f3:8e:3f:83:45:90:a5:cc:9f:01: 94:42:ca:4f:1a:5a:08:57:7a:5b:2f:de:ae:e0:81: 57:20:5d:80:91:a1:ea:ae:e4:79:b8:27:84:12:0c: 8c:e1:98:40:99:85:fb:8b:99:24:06:70:bc:c6:79: 58:aa:d4:a1:0b:12:68:75:e5:89:82:2c:0e:69:d6: d2:1c:0d:55:2f:1f:0b:e7:cc:df:33:ac:98:c2:0d: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:55:EC:2B:04:61:8D:7D:37:1B:D0:37:D5:23:01:7D:8C:A3:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa45a9f1-5d47-3fc7-a692-2e78d2922b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:62:3c:41:ee:a0:e7:73:a7:d0:a6:63:9c:24:29:71:77:f6: 82:af:e2:35:6c:e6:22:9b:13:d1:f2:b5:1d:bb:33:de:a0:7e: 06:bb:24:f8:97:2a:e6:ba:73:d5:89:f3:8d:56:be:10:69:f0: b2:44:66:dd:78:5d:bf:5e:03:6a:ea:04:9a:6d:db:3b:bb:0f: 40:a9:ef:da:53:0d:4e:c1:83:c1:59:a0:74:a5:9c:2f:ed:d1: 73:d4:08:8e:50:6a:98:a1:1e:ae:ed:8b:3c:3c:c9:9f:8d:2f: fd:f4:62:f6:d5:67:2c:75:77:53:5c:52:b4:61:86:c0:e6:75: f5:15:53:26:58:d6:55:ec:34:57:30:0e:cc:ff:9b:bc:60:39: cc:3d:e7:71:e0:91:15:6a:e3:5d:38:cb:15:d8:05:e7:fc:46: 39:57:f4:cd:1f:a4:f0:ac:c8:3c:02:d3:cb:e9:d6:14:81:a1: 1e:84:2f:0f:21:f0:5f:25:97:c8:ef:f9:13:98:b2:54:1c:aa: 3b:45:73:01:be:5c:ef:3c:bb:b8:89:67:85:5b:66:c5:ab:72: 51:b1:3d:49:80:3d:65:1d:7c:5f:a5:10:e2:85:ad:fb:2c:94: c4:0a:a5:39:f1:27:e2:c7:70:d3:9c:cb:44:c8:05:f0:9a:26: 46:87:9a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpVEwvAXwgbCyqkMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYyNzE3MDI1MVoXDTI1MDkyNTE3MDI1MVowLzEtMCsGA1UEAxMk NjAxOTQ0OTYtYmU3ZS00ZjdmLWJiNWEtMDJiNzA3NmZmYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TsLsLjCwOOwqmfb3u5Mh2H13wOEtFw3OF3/ DjPpll124T4l9AFd+qnIEjc+CCM+HZX1GPEJ8aQwgWwns1q/iCA8mz1s31HqD9Lf 2kr59bg1N3cvkKZWanK2QGC6ajDg/xK/m3QWwa+G7xFj0q73J5sOOwWc+HC36xt3 UimE55TYgiK4jeSuyVN5hsQ5H+N8054GRtgSU0po6zgyYsAz5hBPdTjn/18a+/OO P4NFkKXMnwGUQspPGloIV3pbL96u4IFXIF2AkaHqruR5uCeEEgyM4ZhAmYX7i5kk BnC8xnlYqtShCxJodeWJgiwOadbSHA1VLx8L58zfM6yYwg1YgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSeVewrBGGNfTcb0DfVIwF9jKO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWE0NWE5ZjEtNWQ0Ny0z ZmM3LWE2OTItMmU3OGQyOTIyYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5iPEHuoOdzp9CmY5wkKXF39oKv4jVs5iKbE9HytR27M96gfga7JPiX Kua6c9WJ841WvhBp8LJEZt14Xb9eA2rqBJpt2zu7D0Cp79pTDU7Bg8FZoHSlnC/t 0XPUCI5QapihHq7tizw8yZ+NL/30YvbVZyx1d1NcUrRhhsDmdfUVUyZY1lXsNFcw Dsz/m7xgOcw953HgkRVq4104yxXYBef8RjlX9M0fpPCsyDwC08vp1hSBoR6ELw8h 8F8ll8jv+ROYslQcqjtFcwG+XO88u7iJZ4VbZsWrclGxPUmAPWUdfF+lEOKFrfss lMQKpTnxJ+LHcNOcy0TIBfCaJkaHmro= -----END CERTIFICATE-----Generated at Mon Jun 30 07:46:02 2025 by rpki-client