$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa File: 2d4f8043-29be-3a85-bf94-295cc860e108.roa (raw, json) Hash identifier: 7s23G9SmOnYs1sZM2oeBRvy+zvu3asyP06jteFtgTSI= Subject key identifier: 03:03:9E:45:25:3B:04:BD:E0:38:E8:0D:93:1A:B0:D8:11:46:07:67 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B84F623D2D067B99C580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 166.88.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b8:4f:62:3d:2d:06:7b:99:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=5f43fd00-2d33-4f56-9835-a09eae3f1b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:35:d4:1a:a6:c8:98:95:03:e5:1b:c3:10: fc:5e:c0:e2:a1:63:51:3b:f3:aa:65:b3:b5:7a:14: d4:3c:ee:d7:2e:e6:85:95:3a:db:92:6b:a1:3f:da: e0:55:33:b9:c0:8a:a1:56:24:87:1e:de:76:7c:77: 3c:8a:fc:cf:60:33:43:df:67:51:2f:41:3e:99:13: a2:00:9f:39:86:dc:d5:57:94:a0:38:56:6c:96:6a: 4a:ab:5b:10:8a:d6:32:e2:54:ce:44:2d:5c:86:31: e3:81:d6:5f:11:7f:2e:0a:23:a4:2c:fc:1a:5a:23: d4:98:26:d3:7a:95:87:d6:08:ec:3a:c2:35:de:39: c9:21:1e:34:41:5a:e6:c8:b3:37:3f:2c:89:f8:48: f5:54:ee:83:91:53:9f:bf:4e:0e:b3:9e:9a:ff:1a: 04:e6:b6:0c:2e:3e:51:89:50:fe:32:2e:6f:59:01: 31:d2:16:b9:ba:51:92:55:cb:aa:60:dd:e7:58:2f: 47:2a:4a:f1:13:6e:15:0a:5e:5a:0b:e3:79:c4:04: 88:fa:b8:01:04:ca:39:a6:f6:13:1c:21:fe:6c:2e: 91:a1:7f:53:f4:62:e2:cf:52:21:d5:75:30:27:32: 7a:95:33:91:b0:23:c0:c5:54:45:48:79:e7:39:b5: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:9E:45:25:3B:04:BD:E0:38:E8:0D:93:1A:B0:D8:11:46:07:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:01:87:4c:1d:10:d5:81:a2:74:39:5c:3b:25:37:d0:b4:e3: 70:58:92:77:9c:1b:fe:06:e1:18:3e:0e:ac:3c:7e:52:34:2b: 15:1d:ba:ed:f8:f4:2e:0a:14:2a:5c:96:b8:09:ee:bb:db:e2: 62:ee:2c:94:dd:eb:ce:d5:8e:ad:14:40:62:04:8f:f8:bc:bc: ed:02:2c:e9:2b:8b:03:12:a6:e7:d2:5b:e3:6d:26:ff:4f:c7: 6b:fc:08:9d:d7:80:61:60:52:1a:91:e9:39:da:3b:1b:b9:9d: 17:a1:6e:23:2d:23:7a:70:aa:d5:fb:88:34:70:02:80:84:16: 08:78:92:63:39:4d:df:66:a0:33:26:6c:46:9c:52:87:de:27: d7:3a:fd:f3:99:77:2e:f7:c2:32:cd:b7:62:c9:47:05:e6:28: 9f:62:78:e6:29:f7:79:61:9c:e4:44:8a:8f:88:f2:f8:0d:09: 72:63:63:09:0a:60:24:36:2f:27:ea:d0:5a:3e:4d:df:f1:90: 5b:5f:7a:6c:5b:85:24:34:00:62:ae:41:d5:99:9e:05:45:2c: b8:70:67:e6:85:08:a0:9f:46:92:2e:54:1c:62:5b:7d:f4:d1: ff:40:4a:ed:de:23:ae:fb:62:5a:71:8e:97:fc:da:f7:b7:ca: 92:1b:02:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLhPYj0tBnuZxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NWY0M2ZkMDAtMmQzMy00ZjU2LTk4MzUtYTA5ZWFlM2YxYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zE11BqmyJiVA+UbwxD8XsDioWNRO/OqZbO1 ehTUPO7XLuaFlTrbkmuhP9rgVTO5wIqhViSHHt52fHc8ivzPYDND32dRL0E+mROi AJ85htzVV5SgOFZslmpKq1sQitYy4lTORC1chjHjgdZfEX8uCiOkLPwaWiPUmCbT epWH1gjsOsI13jnJIR40QVrmyLM3PyyJ+Ej1VO6DkVOfv04Os56a/xoE5rYMLj5R iVD+Mi5vWQEx0ha5ulGSVcuqYN3nWC9HKkrxE24VCl5aC+N5xASI+rgBBMo5pvYT HCH+bC6RoX9T9GLiz1Ih1XUwJzJ6lTORsCPAxVRFSHnnObVHTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMDnkUlOwS94DjoDZMasNgRRgdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmQ0ZjgwNDMtMjliZS0z YTg1LWJmOTQtMjk1Y2M4NjBlMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMBh0wdENWBonQ5XDslN9C043BYknecG/4G4Rg+Dqw8flI0KxUduu34 9C4KFCpclrgJ7rvb4mLuLJTd687Vjq0UQGIEj/i8vO0CLOkriwMSpufSW+NtJv9P x2v8CJ3XgGFgUhqR6TnaOxu5nRehbiMtI3pwqtX7iDRwAoCEFgh4kmM5Td9moDMm bEacUofeJ9c6/fOZdy73wjLNt2LJRwXmKJ9ieOYp93lhnOREio+I8vgNCXJjYwkK YCQ2Lyfq0Fo+Td/xkFtfemxbhSQ0AGKuQdWZngVFLLhwZ+aFCKCfRpIuVBxiW330 0f9ASu3eI677Ylpxjpf82ve3ypIbAik= -----END CERTIFICATE-----Generated at Sun Apr 27 12:00:20 2025 by rpki-client