$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3b09fbd9-442c-33f5-ab45-3023d52d45c0.roa File: 3b09fbd9-442c-33f5-ab45-3023d52d45c0.roa (raw, json) Hash identifier: En3KwqpTGCDHyt40ov9KUWiB/0IlM47hDueqztCzGPE= Subject key identifier: DE:B8:A2:50:4D:C6:7A:0C:55:41:54:B2:7B:38:2B:B6:7F:EE:D8:E3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4BA374EB198A46EA01C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3b09fbd9-442c-33f5-ab45-3023d52d45c0.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 166.88.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:ba:37:4e:b1:98:a4:6e:a0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=b9916232-fe0f-4fa9-8289-ccc12b3a78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:b2:c8:17:3d:b8:30:ca:4c:f8:45:15:1b: 87:96:28:26:0e:4d:a7:a0:8a:11:62:4c:55:0b:5b: 49:f0:e4:71:1d:d0:70:a9:2e:86:18:37:6a:7f:d1: 52:27:a0:38:86:8f:21:7e:98:c3:ec:86:c4:6f:b7: a8:cf:1a:a7:8a:a6:75:91:f8:94:7c:eb:01:58:d5: bf:9d:28:cc:62:db:03:f3:c4:54:52:26:45:e9:b0: 64:96:e5:2e:69:82:47:1f:f0:23:d0:41:1f:41:6f: 9a:4a:62:82:92:ad:ec:18:eb:2e:5f:68:45:dc:23: df:f8:ad:8d:9a:ce:5d:5d:ef:32:9d:ea:b8:cf:18: 49:ff:b8:ab:f0:eb:2f:63:c0:fe:99:e8:0b:37:04: db:81:89:c0:af:ec:58:2a:0d:09:87:23:18:dc:bd: 96:9c:46:88:1a:42:c7:6d:0b:ea:96:b0:48:78:c1: 73:e3:52:84:f8:80:1e:8a:d4:91:04:fa:51:b0:fd: 04:bd:1c:46:13:41:c8:a4:49:fe:18:e0:fb:4e:e6: fc:70:82:79:3b:56:b5:6a:1f:28:55:74:ea:b1:54: 14:a7:58:ac:25:86:33:96:51:ec:46:04:5f:75:20: ec:93:93:c9:16:21:2d:3c:1e:94:28:1d:9d:95:75: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:A2:50:4D:C6:7A:0C:55:41:54:B2:7B:38:2B:B6:7F:EE:D8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3b09fbd9-442c-33f5-ab45-3023d52d45c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:36:6e:2a:b9:89:ff:70:2b:12:0e:1e:94:41:1c:94:fb:b8: 45:76:6e:58:cb:36:e4:77:7e:92:83:44:d6:3e:fa:ea:ba:ff: 08:f1:c1:0b:6c:6f:09:ec:9d:da:94:9f:78:14:8d:1c:dd:46: a1:21:11:91:d7:71:d3:96:5f:e8:88:c7:4d:64:41:1f:24:dd: 4d:c9:86:15:68:b4:8a:b6:7c:84:9c:d0:b2:ff:c0:03:4c:15: 8c:c4:2b:4d:78:4f:74:85:e6:7f:19:89:18:93:05:1d:05:83: 48:54:31:c1:67:aa:8a:85:1f:64:12:15:14:06:9a:77:c7:18: f2:ef:80:66:cf:7b:a4:4d:98:4e:73:64:f4:71:2e:c3:3b:44: 8b:2b:26:25:ba:bd:37:74:1b:0a:09:20:6f:bf:9d:3e:c9:99: c3:e2:17:c2:de:06:0b:b6:05:41:18:c3:c4:66:9c:d0:39:80: 92:28:1b:64:ad:ee:27:77:0e:a5:65:f6:b0:e6:8f:91:1d:81: fb:e8:56:fe:c1:42:6f:a2:6f:66:10:18:2d:67:ea:b8:91:0c: b2:17:b6:b5:f3:70:6c:90:e3:9b:99:60:a5:06:8b:45:22:ab: 4f:43:e4:6e:8e:97:1e:40:4a:35:75:31:66:07:ac:a0:ba:6c: 17:68:d6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLo3TrGYpG6gHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Yjk5MTYyMzItZmUwZi00ZmE5LTgyODktY2NjMTJiM2E3OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0myyBc9uDDKTPhFFRuHligmDk2noIoRYkxV C1tJ8ORxHdBwqS6GGDdqf9FSJ6A4ho8hfpjD7IbEb7eozxqniqZ1kfiUfOsBWNW/ nSjMYtsD88RUUiZF6bBkluUuaYJHH/Aj0EEfQW+aSmKCkq3sGOsuX2hF3CPf+K2N ms5dXe8yneq4zxhJ/7ir8OsvY8D+megLNwTbgYnAr+xYKg0JhyMY3L2WnEaIGkLH bQvqlrBIeMFz41KE+IAeitSRBPpRsP0EvRxGE0HIpEn+GOD7Tub8cIJ5O1a1ah8o VXTqsVQUp1isJYYzllHsRgRfdSDsk5PJFiEtPB6UKB2dlXUQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN64olBNxnoMVUFUsns4K7Z/7tjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2IwOWZiZDktNDQyYy0z M2Y1LWFiNDUtMzAyM2Q1MmQ0NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ82biq5if9wKxIOHpRBHJT7uEV2bljLNuR3fpKDRNY++uq6/wjxwQts bwnsndqUn3gUjRzdRqEhEZHXcdOWX+iIx01kQR8k3U3JhhVotIq2fISc0LL/wANM FYzEK014T3SF5n8ZiRiTBR0Fg0hUMcFnqoqFH2QSFRQGmnfHGPLvgGbPe6RNmE5z ZPRxLsM7RIsrJiW6vTd0GwoJIG+/nT7JmcPiF8LeBgu2BUEYw8RmnNA5gJIoG2St 7id3DqVl9rDmj5EdgfvoVv7BQm+ib2YQGC1n6riRDLIXtrXzcGyQ45uZYKUGi0Ui q09D5G6Olx5ASjV1MWYHrKC6bBdo1ok= -----END CERTIFICATE-----Generated at Sun Jun 15 04:47:21 2025 by rpki-client