$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ee706ab-746f-3d59-919f-7f27c4838157.roa File: 0ee706ab-746f-3d59-919f-7f27c4838157.roa (raw, json) Hash identifier: M+9oMIIVxKuClv5sCck+W3GiTVTFt7KuG7lyqyhAACM= Subject key identifier: B1:35:9A:2E:E9:08:53:BC:32:7D:B8:5D:6A:4F:30:E9:7A:16:40:A0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B959067AF3A12A098E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ee706ab-746f-3d59-919f-7f27c4838157.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 166.88.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:59:06:7a:f3:a1:2a:09:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=89215fef-87db-4075-ab77-e4b8fdec6457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:00:ee:b9:5e:db:a0:cf:c2:90:65:48:76: ad:54:b1:23:52:18:49:77:76:ea:bf:b1:76:5f:7e: 89:59:e5:83:60:be:a1:09:ae:82:74:a9:e2:ab:06: ca:e3:d9:fb:7b:63:3e:b6:2e:53:f2:af:f0:a4:7c: 01:e6:6b:61:24:09:06:2f:2c:9b:65:ec:c6:0c:a1: 4e:33:a9:3a:2c:20:16:a0:43:27:bf:49:95:b6:81: 1a:36:39:cd:b1:ef:5b:95:75:24:64:b4:16:19:90: 16:3e:6f:59:e6:53:d9:63:51:de:4c:cf:a8:c6:69: cc:cc:8f:36:a7:40:bd:ec:e2:1b:83:03:17:52:98: 11:10:4f:c5:49:b9:c0:01:ff:ad:7c:da:bb:3f:e6: 72:f8:53:ae:41:dd:f6:7b:6c:0e:60:78:91:14:d5: 86:04:53:ee:d9:01:9f:6c:a6:be:20:90:4d:84:02: 8c:69:d3:6c:ab:00:a6:05:d2:35:b7:aa:ab:f2:45: 13:dd:dd:96:50:a5:cc:e6:58:e0:17:2b:5e:cd:09: ce:1a:c0:9e:66:00:af:47:8e:6f:e0:b6:5e:2b:29: ae:b9:03:d6:09:09:32:62:25:ce:91:ae:1e:42:f6: aa:06:d0:84:9e:65:cd:76:e0:b4:dd:ea:c0:94:79: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:35:9A:2E:E9:08:53:BC:32:7D:B8:5D:6A:4F:30:E9:7A:16:40:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ee706ab-746f-3d59-919f-7f27c4838157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:54:f0:03:b0:3f:fe:76:c7:00:93:c2:0c:97:c3:8a:c0:cc: df:60:a0:29:10:ce:94:b4:7a:d1:48:d0:55:6d:67:d1:80:99: 6e:ed:7f:e4:96:72:e3:90:74:da:3b:b4:0c:e0:2c:a6:7c:25: ff:23:e3:bb:f0:aa:97:63:89:8a:02:e8:ca:ca:9b:b0:8e:6b: 21:ae:29:ee:6e:ee:6d:9f:4e:83:57:90:2d:17:10:93:89:c7: fa:2d:72:09:09:85:76:0b:61:a6:b0:3a:a5:57:05:c5:e9:d0: be:15:d0:eb:46:2a:0f:f5:41:04:60:d7:e4:15:48:1e:9a:bd: c0:68:67:83:46:5d:16:97:37:f6:ca:66:aa:f8:68:6b:65:84: 27:8e:14:b5:67:38:64:1d:84:cb:4c:c4:38:40:2d:91:1b:e1: e3:cf:47:72:5e:ff:bc:fd:c2:3d:51:be:2b:1f:1f:c7:fe:8c: e6:a9:68:47:77:df:f8:9b:e3:75:0b:0f:ae:aa:c1:4b:8a:45: ef:0c:72:0c:96:02:3a:59:e2:c6:e3:9a:e0:19:11:62:8f:97: 4e:5c:c9:50:d4:71:b1:17:00:12:e0:3a:02:78:bb:52:e3:54: 94:de:e5:3d:10:ca:88:3e:96:9c:08:ef:5c:12:df:32:72:04: b3:11:87:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLlZBnrzoSoJjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ODkyMTVmZWYtODdkYi00MDc1LWFiNzctZTRiOGZkZWM2NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7YA7rle26DPwpBlSHatVLEjUhhJd3bqv7F2 X36JWeWDYL6hCa6CdKniqwbK49n7e2M+ti5T8q/wpHwB5mthJAkGLyybZezGDKFO M6k6LCAWoEMnv0mVtoEaNjnNse9blXUkZLQWGZAWPm9Z5lPZY1HeTM+oxmnMzI82 p0C97OIbgwMXUpgREE/FSbnAAf+tfNq7P+Zy+FOuQd32e2wOYHiRFNWGBFPu2QGf bKa+IJBNhAKMadNsqwCmBdI1t6qr8kUT3d2WUKXM5ljgFytezQnOGsCeZgCvR45v 4LZeKymuuQPWCQkyYiXOka4eQvaqBtCEnmXNduC03erAlHkRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE1mi7pCFO8Mn24XWpPMOl6FkCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGVlNzA2YWItNzQ2Zi0z ZDU5LTkxOWYtN2YyN2M0ODM4MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENU8AOwP/52xwCTwgyXw4rAzN9goCkQzpS0etFI0FVtZ9GAmW7tf+SW cuOQdNo7tAzgLKZ8Jf8j47vwqpdjiYoC6MrKm7COayGuKe5u7m2fToNXkC0XEJOJ x/otcgkJhXYLYaawOqVXBcXp0L4V0OtGKg/1QQRg1+QVSB6avcBoZ4NGXRaXN/bK Zqr4aGtlhCeOFLVnOGQdhMtMxDhALZEb4ePPR3Je/7z9wj1RvisfH8f+jOapaEd3 3/ib43ULD66qwUuKRe8McgyWAjpZ4sbjmuAZEWKPl05cyVDUcbEXABLgOgJ4u1Lj VJTe5T0Qyog+lpwI71wS3zJyBLMRh5g= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:43 2025 by rpki-client