$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/04b1f261-a31e-30bb-a025-a4b5835cba1d.roa File: 04b1f261-a31e-30bb-a025-a4b5835cba1d.roa (raw, json) Hash identifier: nIK4fSdx3MYkCoUEJL9HrVKkhK0OH1FEBO0pla2IFjQ= Subject key identifier: 2D:F1:BF:C8:ED:A4:99:B5:CF:38:9E:69:B3:CA:6F:C2:9B:92:95:7F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B9A00A9FDD2A88023480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/04b1f261-a31e-30bb-a025-a4b5835cba1d.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 166.88.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:a0:0a:9f:dd:2a:88:02:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=1ea49513-d2b5-45f2-a3a7-84b62f6def5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:d4:2c:08:fd:82:6b:d0:7b:f8:ca:d8:d2: 05:d3:8c:be:9a:f8:b2:11:25:77:08:56:0b:b7:ec: 56:cc:c9:4a:c5:25:97:05:5d:6c:8f:7b:ed:64:6b: 02:12:3d:bf:35:d8:0d:71:1d:23:c3:4b:6d:6f:b1: c5:7e:e0:f8:20:a9:66:f1:9f:2a:af:0f:c6:8e:97: 0f:07:13:0f:e3:4c:13:8d:ed:c0:a2:cd:a0:11:46: 15:2f:47:8f:e1:4f:8a:d7:2a:b5:f9:db:6c:12:dc: 04:5e:b8:8a:92:aa:de:5d:2b:50:27:0e:83:4c:a3: 4a:99:6a:63:7b:aa:23:e7:ec:71:4c:b3:f1:91:6f: c2:a1:c6:47:ee:69:c2:d7:74:7a:ab:92:c1:93:ff: 0b:4a:5a:9d:52:c9:45:0a:8d:46:5e:93:3a:90:7c: 77:2c:9e:a4:8e:c1:03:76:90:3a:94:5a:ee:70:21: 7c:e0:e9:9d:6d:49:e8:cb:6e:9b:94:0d:30:a2:ce: e1:de:bf:da:f7:65:5a:bf:d0:31:37:c3:85:47:ed: 32:7a:65:42:cc:7a:0c:a3:c6:78:39:36:c5:2e:fd: cd:e3:72:56:74:4c:7d:0e:9a:8b:67:65:c4:e4:45: 22:6d:60:29:bf:f2:2e:6a:3e:2c:e4:c3:2e:1c:ec: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F1:BF:C8:ED:A4:99:B5:CF:38:9E:69:B3:CA:6F:C2:9B:92:95:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/04b1f261-a31e-30bb-a025-a4b5835cba1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:55:08:53:b0:c9:d7:7a:86:89:b0:a6:9d:4a:78:8a:ba:5a: 52:58:5d:c4:d3:66:dc:8a:fc:3e:69:81:2c:2f:cc:06:8f:f4: a7:ec:96:ce:67:25:25:12:4a:85:e4:62:d8:6e:cb:ab:3e:5a: 78:f6:d2:15:f8:8e:99:e0:f7:a2:27:81:2d:72:d6:a1:23:87: 77:92:75:b3:81:f5:72:08:b8:20:be:6a:b1:e2:50:48:34:de: 62:80:23:62:f2:25:80:05:58:33:e9:a0:05:41:8c:0b:10:76: ae:fc:be:00:3e:2a:8f:da:b6:e3:59:cd:fc:eb:4d:88:84:bc: cf:eb:98:0c:95:4a:d5:d5:42:49:a4:6c:22:e4:c1:b9:1a:a7: 0f:15:49:22:3e:dd:b1:20:7c:2a:75:00:14:57:98:71:9f:a7: c8:1c:9a:d6:d7:82:3c:0a:a6:01:e5:ac:23:35:4f:b9:24:ba: 76:70:58:ac:25:a7:2b:77:21:a9:64:6f:64:57:8e:ff:a4:27: 9b:e1:e6:8e:f1:6e:45:e0:8f:d5:45:eb:09:0f:20:df:b7:f3: ad:c5:ca:5d:8e:26:a1:f0:38:e6:c6:9e:a2:98:72:27:ab:e5: 6f:26:ae:9e:f7:ad:d3:ac:37:9a:62:7f:24:1c:d3:3f:81:96: aa:87:73:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLmgCp/dKogCNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MWVhNDk1MTMtZDJiNS00NWYyLWEzYTctODRiNjJmNmRlZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2bULAj9gmvQe/jK2NIF04y+mviyESV3CFYL t+xWzMlKxSWXBV1sj3vtZGsCEj2/NdgNcR0jw0ttb7HFfuD4IKlm8Z8qrw/GjpcP BxMP40wTje3Aos2gEUYVL0eP4U+K1yq1+dtsEtwEXriKkqreXStQJw6DTKNKmWpj e6oj5+xxTLPxkW/CocZH7mnC13R6q5LBk/8LSlqdUslFCo1GXpM6kHx3LJ6kjsED dpA6lFrucCF84OmdbUnoy26blA0wos7h3r/a92Vav9AxN8OFR+0yemVCzHoMo8Z4 OTbFLv3N43JWdEx9DpqLZ2XE5EUibWApv/Iuaj4s5MMuHOwR8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3xv8jtpJm1zzieabPKb8KbkpV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDRiMWYyNjEtYTMxZS0z MGJiLWEwMjUtYTRiNTgzNWNiYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlVCFOwydd6homwpp1KeIq6WlJYXcTTZtyK/D5pgSwvzAaP9Kfsls5n JSUSSoXkYthuy6s+Wnj20hX4jpng96IngS1y1qEjh3eSdbOB9XIIuCC+arHiUEg0 3mKAI2LyJYAFWDPpoAVBjAsQdq78vgA+Ko/atuNZzfzrTYiEvM/rmAyVStXVQkmk bCLkwbkapw8VSSI+3bEgfCp1ABRXmHGfp8gcmtbXgjwKpgHlrCM1T7kkunZwWKwl pyt3Ialkb2RXjv+kJ5vh5o7xbkXgj9VF6wkPIN+3863Fyl2OJqHwOObGnqKYcier 5W8mrp73rdOsN5pifyQc0z+BlqqHc0o= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:35 2025 by rpki-client