$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/168c3b74-28a2-3c13-a844-eb3d2404400c.roa File: 168c3b74-28a2-3c13-a844-eb3d2404400c.roa (raw, json) Hash identifier: Qj6+57jsP1TQ92GBIo24iUqOtfKTU6YLUx7x430+zlQ= Subject key identifier: 5A:1E:AE:F1:9E:39:54:69:31:03:97:9C:7A:45:39:BD:70:83:6A:8C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF7BC266E0B5CF2D8E2B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/168c3b74-28a2-3c13-a844-eb3d2404400c.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 62240 IP address blocks: 166.88.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:7b:c2:66:e0:b5:cf:2d:8e:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=07b8c2c4-0f93-4a9c-b95f-053c58fb1cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:65:73:8d:f9:e3:5d:0a:f0:a6:33:4f:96: 7d:8d:f7:e9:80:bd:69:0f:73:f4:bd:25:5b:25:22: c4:1d:e5:4b:52:64:c8:c6:45:a8:1c:d0:44:46:02: 32:8a:8d:eb:ac:fe:67:1f:20:9c:85:df:59:62:27: c7:46:4e:ae:4b:48:e5:d9:a4:1f:f3:ae:40:30:48: e7:b0:0f:a4:30:a5:b0:3a:ff:c4:ea:dc:4f:c5:35: 13:d2:f3:37:89:61:7e:db:eb:f7:39:5f:be:d6:df: 11:ba:43:81:d7:29:d0:f9:7d:49:71:0f:ff:3f:7d: 56:39:e0:9a:67:ba:f9:7a:fd:ba:21:08:67:bc:7f: db:c5:30:90:7f:15:47:9a:4f:2e:72:59:da:b1:29: 5b:c0:55:ee:35:18:88:76:33:24:68:38:66:69:99: 29:29:8c:9d:2b:c5:b3:07:e0:4b:8e:08:aa:0e:07: 26:79:5a:27:47:69:ca:3e:63:9e:08:35:9c:a3:37: 4d:6e:1d:64:f9:75:ed:49:f1:c2:f7:45:26:5d:0f: 8f:8a:c6:d0:b7:10:fa:72:0f:0b:2e:f1:e4:30:43: ed:86:ac:2a:05:bc:c8:3f:85:97:43:96:30:02:3f: df:e4:4c:ef:b5:a4:b5:02:88:24:ff:e1:34:61:3f: 57:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1E:AE:F1:9E:39:54:69:31:03:97:9C:7A:45:39:BD:70:83:6A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/168c3b74-28a2-3c13-a844-eb3d2404400c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:30:6a:07:47:44:72:48:4d:c9:cf:d5:50:a2:4f:29:2d:54: 77:52:95:de:be:b4:9d:99:fa:3d:5a:c6:d4:7a:e8:cf:54:54: f8:6e:fc:d5:93:90:b7:59:e1:d5:df:99:61:71:25:95:76:79: ce:7a:a1:cf:73:0c:57:a7:68:90:98:a2:c4:0a:db:37:a5:6f: da:30:58:ed:43:bf:1c:12:71:d9:07:5f:6b:66:07:53:19:a9: 85:f5:b2:de:0a:4c:ab:29:ae:d9:78:fe:05:d8:1f:43:d3:f6: 24:1a:18:6f:c9:98:2f:5d:b9:86:87:01:8a:bd:83:41:48:74: 91:b8:98:9a:94:d4:75:7e:86:63:bd:76:df:98:f7:c1:fa:cf: 8f:68:18:2a:70:a2:94:92:c3:cb:3e:a2:1d:49:4e:5e:14:40: 8a:af:d8:6d:04:29:1d:6c:f5:2c:3d:52:b2:b6:db:dc:f6:95: cd:69:5d:5d:99:12:b0:fe:d4:0e:ac:d3:dd:7e:2e:f3:9d:13: fb:bd:35:95:ac:99:f7:0f:28:1a:a0:59:58:21:c9:ac:d4:d8: 5b:2b:c5:67:d3:e3:7c:6c:39:1f:3c:f0:dc:1c:f5:41:c6:cd: cd:c5:44:7e:9e:cf:c8:56:16:60:dc:49:c8:a6:66:4f:be:cd: 4c:69:89:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3vCZuC1zy2OKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk MDdiOGMyYzQtMGY5My00YTljLWI5NWYtMDUzYzU4ZmIxY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVBlc435410K8KYzT5Z9jffpgL1pD3P0vSVb JSLEHeVLUmTIxkWoHNBERgIyio3rrP5nHyCchd9ZYifHRk6uS0jl2aQf865AMEjn sA+kMKWwOv/E6txPxTUT0vM3iWF+2+v3OV++1t8RukOB1ynQ+X1JcQ//P31WOeCa Z7r5ev26IQhnvH/bxTCQfxVHmk8uclnasSlbwFXuNRiIdjMkaDhmaZkpKYydK8Wz B+BLjgiqDgcmeVonR2nKPmOeCDWcozdNbh1k+XXtSfHC90UmXQ+PisbQtxD6cg8L LvHkMEPthqwqBbzIP4WXQ5YwAj/f5EzvtaS1Aogk/+E0YT9XfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoervGeOVRpMQOXnHpFOb1wg2qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTY4YzNiNzQtMjhhMi0z YzEzLWE4NDQtZWIzZDI0MDQ0MDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEowagdHRHJITcnP1VCiTyktVHdSld6+tJ2Z+j1axtR66M9UVPhu/NWT kLdZ4dXfmWFxJZV2ec56oc9zDFenaJCYosQK2zelb9owWO1DvxwScdkHX2tmB1MZ qYX1st4KTKsprtl4/gXYH0PT9iQaGG/JmC9duYaHAYq9g0FIdJG4mJqU1HV+hmO9 dt+Y98H6z49oGCpwopSSw8s+oh1JTl4UQIqv2G0EKR1s9Sw9UrK229z2lc1pXV2Z ErD+1A6s091+LvOdE/u9NZWsmfcPKBqgWVghyazU2FsrxWfT43xsOR888Nwc9UHG zc3FRH6ez8hWFmDcScimZk++zUxpiak= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:39 2025 by rpki-client