$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa File: 29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa (raw, json) Hash identifier: sa7V3MzB2F/sT9q8MBeJjqRWiQ+bXwY/cm3OLpeyzU0= Subject key identifier: C0:6D:F6:62:2F:BE:DA:8D:51:59:84:55:39:52:25:30:8D:2E:10:71 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849860476F91D317A0A6B53F100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 10557 IP address blocks: 166.88.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:76:f9:1d:31:7a:0a:6b:53:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=44f81517-ecac-4527-bbd7-050a26f0481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:a1:e5:51:af:b6:63:d7:8c:4c:36:23:c2: d6:02:5d:f3:7e:74:08:c0:d5:ae:fb:81:4b:2d:96: 36:60:2b:df:55:cf:f4:34:07:e6:27:20:2c:9f:07: eb:55:67:30:53:83:7d:f6:22:4e:43:b6:3d:3e:d3: 14:45:da:49:d9:cb:95:b4:ec:e9:a2:77:45:e6:4b: 65:b5:82:3e:41:24:8d:06:29:d8:f8:4c:8d:e3:98: 59:c6:c6:c7:93:6c:8e:2b:17:5c:df:2c:54:98:bb: a5:44:72:56:e5:ad:da:57:0b:63:d1:53:ec:53:51: db:3c:dc:40:37:5c:ce:71:33:d8:2e:75:69:35:db: ec:42:cf:8a:99:2e:af:e0:10:df:d6:57:c4:46:a5: c0:9c:4a:b1:15:e4:0e:15:30:47:ec:d6:7f:ae:8e: c8:06:5e:eb:9b:9e:e8:62:f3:e2:89:1f:d6:48:be: 75:df:1c:2d:20:56:93:4f:1f:a1:6c:3d:7a:88:47: 9a:82:50:c4:e6:bb:5b:aa:34:49:61:d7:96:fa:97: f3:5f:5e:cb:01:fb:14:a6:b2:6f:c3:ef:ca:2c:74: 8a:39:4b:26:dc:2a:75:18:47:bc:30:9b:10:30:07: 3e:21:30:00:2f:ea:97:98:7b:1d:91:a7:10:51:34: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6D:F6:62:2F:BE:DA:8D:51:59:84:55:39:52:25:30:8D:2E:10:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ab:8e:72:12:e4:f7:8d:b8:25:4c:88:0d:82:55:03:1c:59: 0e:ef:67:fb:ea:95:36:6f:1c:32:63:70:45:0f:b0:ed:e4:d8: d2:5b:e6:64:87:94:6e:d0:7e:f9:2f:a5:dc:62:81:c3:55:42: 7e:b2:b7:c9:73:02:22:db:35:c0:f6:30:af:51:18:f9:e9:92: 6d:7d:ca:e1:dc:85:a0:e9:ea:9e:1c:76:77:77:3d:5f:e0:62: 4a:d2:2d:13:98:f3:80:68:3e:13:5d:09:e7:81:af:8c:09:15: b4:9e:0e:c0:ac:e2:da:23:3a:8e:29:0b:6d:02:58:5c:9c:b8: d3:37:f5:72:99:dd:01:10:cb:7f:dc:07:88:e9:fe:da:48:0b: 2c:59:d0:43:35:a8:57:67:c5:46:8e:4e:2f:c9:f8:7a:ce:22: 6d:f6:ce:1c:73:12:00:3e:15:e3:00:7b:7f:4a:3c:6c:e0:d2: 91:74:fc:e5:33:4e:dc:7a:14:df:ca:c4:e2:6f:7f:08:d2:7b: cf:38:77:9d:a0:13:2e:85:cb:62:42:80:58:6e:06:f3:99:9b: 53:33:dc:ce:1d:b7:4e:b1:a4:f3:ed:7a:74:7e:41:4c:83:ee: df:9a:5c:62:33:c4:86:8c:5f:ad:66:1f:94:2e:d1:bc:70:6d: 99:d2:62:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHb5HTF6CmtT8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk NDRmODE1MTctZWNhYy00NTI3LWJiZDctMDUwYTI2ZjA0ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxOh5VGvtmPXjEw2I8LWAl3zfnQIwNWu+4FL LZY2YCvfVc/0NAfmJyAsnwfrVWcwU4N99iJOQ7Y9PtMURdpJ2cuVtOzpondF5ktl tYI+QSSNBinY+EyN45hZxsbHk2yOKxdc3yxUmLulRHJW5a3aVwtj0VPsU1HbPNxA N1zOcTPYLnVpNdvsQs+KmS6v4BDf1lfERqXAnEqxFeQOFTBH7NZ/ro7IBl7rm57o YvPiiR/WSL513xwtIFaTTx+hbD16iEeaglDE5rtbqjRJYdeW+pfzX17LAfsUprJv w+/KLHSKOUsm3Cp1GEe8MJsQMAc+ITAAL+qXmHsdkacQUTRBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBt9mIvvtqNUVmEVTlSJTCNLhBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjkyMzliNmEtZTdkOC0z YTBiLTk3MzAtOTcwYzk2ODFlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSrjnIS5PeNuCVMiA2CVQMcWQ7vZ/vqlTZvHDJjcEUPsO3k2NJb5mSH lG7QfvkvpdxigcNVQn6yt8lzAiLbNcD2MK9RGPnpkm19yuHchaDp6p4cdnd3PV/g YkrSLROY84BoPhNdCeeBr4wJFbSeDsCs4tojOo4pC20CWFycuNM39XKZ3QEQy3/c B4jp/tpICyxZ0EM1qFdnxUaOTi/J+HrOIm32zhxzEgA+FeMAe39KPGzg0pF0/OUz Ttx6FN/KxOJvfwjSe884d52gEy6Fy2JCgFhuBvOZm1Mz3M4dt06xpPPtenR+QUyD 7t+aXGIzxIaMX61mH5Qu0bxwbZnSYrY= -----END CERTIFICATE-----Generated at Sun Apr 27 09:08:51 2025 by rpki-client