$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e40770-c123-37dd-bdc1-5fdabd4dc421.roa File: 17e40770-c123-37dd-bdc1-5fdabd4dc421.roa (raw, json) Hash identifier: YDocjKmZhtcKhIzCwGqln51JErWRf0fasVMp07A+LC0= Subject key identifier: 48:0B:CB:A9:76:EF:F6:44:C5:AC:2D:6C:16:46:97:3F:03:7C:57:F3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B87D7858AB6EB5F1A9C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e40770-c123-37dd-bdc1-5fdabd4dc421.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 166.88.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b8:7d:78:58:ab:6e:b5:f1:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=6abb3fe1-2a39-482f-9f44-d59eca3f7cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:09:11:d1:c6:54:dd:7c:f7:a0:53:29:e6: 48:b9:aa:87:28:f2:67:7a:61:cc:21:8a:fa:84:10: a7:85:b2:1b:af:90:5d:fc:a5:ac:cf:48:ad:7f:e7: c7:cc:bf:d1:f5:00:a4:2f:4e:bb:77:35:9d:d5:80: b0:52:28:e5:85:78:01:19:51:de:49:94:f9:5e:e6: 4f:9b:80:86:92:21:87:77:1a:02:f6:3b:02:e7:1e: 49:52:76:e2:ad:fd:dc:3d:13:46:1f:f8:dc:57:08: e5:2d:83:9e:e2:65:49:42:72:c9:80:3d:66:e3:c2: 74:50:c2:8e:bd:80:73:54:38:05:4a:92:7b:32:4a: 98:ee:e3:e3:91:5d:93:85:bb:99:36:8e:eb:97:60: bc:af:78:cb:cd:27:a1:f9:76:f7:83:6b:f1:82:8c: 16:47:e8:4f:d3:bf:6b:2b:39:90:9c:01:ff:96:4d: f7:11:a1:28:14:42:9e:fa:83:a8:13:a4:6f:70:57: 17:d3:59:91:5e:d3:bf:fe:62:25:2e:4f:a9:dd:08: a9:e9:75:0f:b9:81:b0:fb:94:d2:bb:9c:cd:98:1d: ba:02:6b:24:71:ae:0c:f5:44:0e:0c:39:72:50:f5: 1d:70:33:9e:9e:cd:7b:95:82:e6:ac:ca:43:c0:e5: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:CB:A9:76:EF:F6:44:C5:AC:2D:6C:16:46:97:3F:03:7C:57:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e40770-c123-37dd-bdc1-5fdabd4dc421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:72:47:51:fe:a8:9e:60:a4:64:6a:94:70:95:f4:2a:77:69: f9:ef:65:89:88:92:60:cc:42:e2:bf:bc:de:32:6c:c2:2e:9f: ed:1d:e7:50:e0:99:e7:01:41:ed:e8:fd:90:b3:bb:00:1a:a4: 1d:0a:8b:59:eb:b8:e2:e9:04:80:88:13:e7:0a:fd:8a:f8:d8: bd:8e:14:42:ea:57:47:b6:f4:91:46:2b:9d:97:23:c0:17:7f: dd:2b:15:54:9b:68:b9:f5:75:69:41:56:ca:00:5d:87:6e:89: eb:b8:a6:76:e2:8b:f0:3a:ae:69:81:65:1d:97:f1:98:f4:85: d1:4e:89:b9:e6:2b:fb:8e:74:85:30:76:d0:56:81:fb:ad:f7: 71:b3:78:b9:02:58:fc:fa:90:3b:c1:cd:c5:60:a4:f9:95:10: 7c:ae:88:86:f2:35:77:1c:88:34:da:7a:42:42:e4:ae:77:3d: f6:c0:cf:43:e1:1f:22:a0:d5:3e:21:d5:1e:d3:96:65:51:35: 62:ad:e6:d8:90:37:cb:01:53:90:50:85:76:d5:09:ac:a7:96: 76:66:00:46:1e:a2:2a:41:ec:e4:af:7a:8a:c8:7c:b4:8b:7a: 4b:ee:6a:32:80:2c:1d:bf:3f:2c:6b:b9:b3:74:cd:66:aa:50: 7b:6f:26:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLh9eFirbrXxqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NmFiYjNmZTEtMmEzOS00ODJmLTlmNDQtZDU5ZWNhM2Y3Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUQJEdHGVN1896BTKeZIuaqHKPJnemHMIYr6 hBCnhbIbr5Bd/KWsz0itf+fHzL/R9QCkL067dzWd1YCwUijlhXgBGVHeSZT5XuZP m4CGkiGHdxoC9jsC5x5JUnbirf3cPRNGH/jcVwjlLYOe4mVJQnLJgD1m48J0UMKO vYBzVDgFSpJ7MkqY7uPjkV2ThbuZNo7rl2C8r3jLzSeh+Xb3g2vxgowWR+hP079r KzmQnAH/lk33EaEoFEKe+oOoE6RvcFcX01mRXtO//mIlLk+p3Qip6XUPuYGw+5TS u5zNmB26Amskca4M9UQODDlyUPUdcDOens17lYLmrMpDwOXvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgLy6l27/ZExawtbBZGlz8DfFfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTdlNDA3NzAtYzEyMy0z N2RkLWJkYzEtNWZkYWJkNGRjNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplg5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlyR1H+qJ5gpGRqlHCV9Cp3afnvZYmIkmDMQuK/vN4ybMIun+0d51Dg mecBQe3o/ZCzuwAapB0Ki1nruOLpBICIE+cK/Yr42L2OFELqV0e29JFGK52XI8AX f90rFVSbaLn1dWlBVsoAXYduieu4pnbii/A6rmmBZR2X8Zj0hdFOibnmK/uOdIUw dtBWgfut93GzeLkCWPz6kDvBzcVgpPmVEHyuiIbyNXcciDTaekJC5K53PfbAz0Ph HyKg1T4h1R7TlmVRNWKt5tiQN8sBU5BQhXbVCaynlnZmAEYeoipB7OSveorIfLSL ekvuajKALB2/PyxrubN0zWaqUHtvJpQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:46 2025 by rpki-client