$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d446bbe-4171-37cd-aab1-9b59bfa95c91.roa File: 0d446bbe-4171-37cd-aab1-9b59bfa95c91.roa (raw, json) Hash identifier: uHvcjc3OblmoZbGUMhfZOA5aumWoW5upvXqOFOLDVhw= Subject key identifier: F7:9D:77:DB:73:71:EB:42:D6:D5:E8:8C:1C:A5:CF:84:89:DA:02:1B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B802F357E136D0BE2080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d446bbe-4171-37cd-aab1-9b59bfa95c91.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 166.88.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b8:02:f3:57:e1:36:d0:be:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f6a03107-4417-4e4b-9bb5-9c9a2b55fb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:1a:7a:1d:91:44:f3:55:36:91:82:40:dc: d9:77:1d:bf:f8:fa:d9:39:09:27:34:a8:5a:a4:4b: 51:fa:92:d1:53:19:58:45:fc:37:d3:0f:0c:9f:58: a2:7c:b0:91:5b:27:1c:3a:38:28:68:08:1d:b1:e1: 86:50:89:47:91:d0:25:35:ce:95:37:67:e0:51:fd: d0:ca:0f:f4:89:87:f3:66:12:83:d9:b6:11:68:c2: 16:a7:18:e5:60:b3:f2:29:be:e2:71:52:e6:47:1d: a5:92:6f:75:b1:99:cc:d6:a1:af:58:4f:65:96:97: 98:87:36:56:d9:eb:33:f4:eb:7e:42:aa:8b:46:4b: df:27:3b:07:aa:f8:6e:54:b7:42:44:0a:08:bb:2d: 2c:a9:5f:4d:0b:ca:8e:1e:3d:17:72:2a:89:bb:47: 4b:ee:04:ce:75:e6:6e:cf:dd:7d:19:f0:81:9e:bc: 3a:4e:f1:e3:e9:36:0b:97:6e:f0:69:9e:c7:ff:d1: 2b:3a:6c:46:ce:d3:fa:f3:c5:f6:7c:57:fd:97:44: 52:14:e8:f3:44:e2:84:d7:95:aa:01:e9:10:f7:51: d8:08:38:4c:a4:92:a6:fd:7a:98:58:71:ca:45:54: a9:fa:95:34:2b:e9:ec:a1:7b:cf:d1:17:80:51:4c: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9D:77:DB:73:71:EB:42:D6:D5:E8:8C:1C:A5:CF:84:89:DA:02:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d446bbe-4171-37cd-aab1-9b59bfa95c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bb:0f:44:32:89:27:79:bd:4b:fa:ed:e4:7e:9f:79:d7:bd: b4:5d:34:bf:85:0f:38:24:39:e5:dd:86:83:5a:e1:62:4c:a4: 2c:08:3a:6e:05:03:a2:ce:f6:5f:2a:9c:0c:e2:a3:7a:30:90: 71:11:19:bc:1d:59:2b:f1:58:2f:5d:bc:39:3f:12:37:34:93: dc:c4:6b:d0:b0:df:d8:fe:ca:ef:f6:c4:e1:78:5e:3a:28:4b: ce:6b:a2:c3:e4:5a:de:7b:63:88:a3:83:6e:ba:bf:67:03:0a: 7e:87:56:fe:22:12:94:4b:1e:79:c3:73:ab:81:14:a1:e8:5a: 1c:2a:9e:83:86:04:23:01:39:63:3b:00:7f:08:c3:a0:f0:1d: 31:32:63:0c:fd:0c:54:18:c8:cc:5f:92:29:74:21:22:1d:93: 9e:5e:66:01:d5:52:1b:e9:26:42:2a:65:41:ae:e5:8a:d9:4f: 2e:96:69:a5:6b:a9:b9:b1:45:43:4d:7e:39:32:c0:1f:ee:a4: f8:a6:54:2e:85:9b:bf:48:3d:3b:c0:2e:b1:40:ce:04:53:8b: 59:32:0e:d2:a9:6c:49:d9:45:57:f5:d5:ee:ab:50:54:10:9f: 50:8e:35:f3:a4:a0:af:64:eb:17:09:54:7f:89:ac:b4:bc:62: 62:d8:a8:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLgC81fhNtC+IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjZhMDMxMDctNDQxNy00ZTRiLTliYjUtOWM5YTJiNTVmYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFUaeh2RRPNVNpGCQNzZdx2/+PrZOQknNKha pEtR+pLRUxlYRfw30w8Mn1iifLCRWyccOjgoaAgdseGGUIlHkdAlNc6VN2fgUf3Q yg/0iYfzZhKD2bYRaMIWpxjlYLPyKb7icVLmRx2lkm91sZnM1qGvWE9llpeYhzZW 2esz9Ot+QqqLRkvfJzsHqvhuVLdCRAoIuy0sqV9NC8qOHj0XciqJu0dL7gTOdeZu z919GfCBnrw6TvHj6TYLl27waZ7H/9ErOmxGztP688X2fFf9l0RSFOjzROKE15Wq AekQ91HYCDhMpJKm/XqYWHHKRVSp+pU0K+nsoXvP0ReAUUy+fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPedd9tzcetC1tXojBylz4SJ2gIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGQ0NDZiYmUtNDE3MS0z N2NkLWFhYjEtOWI1OWJmYTk1YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW7D0QyiSd5vUv67eR+n3nXvbRdNL+FDzgkOeXdhoNa4WJMpCwIOm4F A6LO9l8qnAzio3owkHERGbwdWSvxWC9dvDk/Ejc0k9zEa9Cw39j+yu/2xOF4Xjoo S85rosPkWt57Y4ijg266v2cDCn6HVv4iEpRLHnnDc6uBFKHoWhwqnoOGBCMBOWM7 AH8Iw6DwHTEyYwz9DFQYyMxfkil0ISIdk55eZgHVUhvpJkIqZUGu5YrZTy6WaaVr qbmxRUNNfjkywB/upPimVC6Fm79IPTvALrFAzgRTi1kyDtKpbEnZRVf11e6rUFQQ n1CONfOkoK9k6xcJVH+JrLS8YmLYqPw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:54 2025 by rpki-client