$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e7c301d-ea32-3ac8-bfc7-81a1338fd6a3.roa File: 3e7c301d-ea32-3ac8-bfc7-81a1338fd6a3.roa (raw, json) Hash identifier: OR3lHfI3wzD+XV7pNZB6e0CIQmFXSwKtfABj6cYmo+s= Subject key identifier: 70:42:45:26:96:93:47:A0:76:74:59:35:65:C9:AB:02:B6:F4:97:F6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849A61F49C18F3152FF7E2B5A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e7c301d-ea32-3ac8-bfc7-81a1338fd6a3.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 149440 IP address blocks: 166.88.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:49:c1:8f:31:52:ff:7e:2b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=959335ee-5c96-44e7-a282-11fa16c7f8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:85:95:01:a1:1c:16:9e:10:1f:fa:f6:d0: 77:5c:a1:dd:f9:b0:3f:9f:df:d0:85:05:f0:03:28: 28:00:49:ca:80:fb:bb:10:ac:89:29:a1:f1:76:68: 44:e2:e2:e2:3b:07:35:4a:c8:32:ac:bb:de:98:9e: ef:1f:10:2b:6d:fb:1f:0c:d9:a0:ea:54:00:13:e4: 8f:85:8c:cc:b5:e3:d0:26:49:ec:10:77:07:60:0d: 2a:bc:8d:28:b5:01:81:4b:d9:3f:3e:35:8c:3f:9d: 69:c5:51:e7:da:6d:99:5d:d0:f2:88:5c:dc:62:d5: 29:87:49:29:b1:b4:75:4a:10:21:54:44:84:3c:aa: e7:58:1a:3b:c8:6c:e7:5e:fd:b3:32:f4:ee:ce:f2: 87:cd:c1:17:f9:7f:75:a1:0e:2b:72:f4:d3:5a:70: 05:1e:de:0e:0e:1a:72:4d:50:c0:8c:f5:07:df:05: 23:36:bb:e5:4c:66:b5:c0:8b:60:fc:63:79:0e:35: 06:7e:79:19:01:6b:6e:5e:25:e9:dc:9d:56:d5:37: d3:d2:16:05:07:32:71:8c:2f:5c:2c:b9:31:64:ea: 7b:56:c4:6a:16:ba:99:8c:2b:42:46:d8:d4:8b:78: a4:34:e6:dd:59:6d:2f:46:1c:4d:fe:d6:59:eb:f4: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:42:45:26:96:93:47:A0:76:74:59:35:65:C9:AB:02:B6:F4:97:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e7c301d-ea32-3ac8-bfc7-81a1338fd6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3e:f0:9c:e1:78:f4:c2:b9:11:72:35:c6:37:13:ea:2a:a5: bd:67:f3:52:19:62:43:9c:4a:6e:dd:eb:9c:9f:4f:7e:f2:21: da:a0:eb:f4:66:af:d7:d4:0a:19:d5:36:b4:6e:00:46:dc:46: 6f:ab:c8:d2:9d:00:b5:f3:ee:d9:10:3f:fa:d5:35:a4:b6:5d: ee:0c:ba:67:15:a5:91:61:df:0d:eb:4a:f1:d7:67:ea:98:8a: fb:1d:3f:c1:15:91:e5:ce:b4:f9:bd:8a:05:e8:c9:72:c5:1f: 58:64:50:0b:b4:3a:ca:7f:87:17:50:14:5c:39:82:4c:a7:f1: 94:7c:50:df:dd:dc:e2:01:d8:9f:f3:fd:20:56:ff:0a:67:4e: e9:80:1a:da:8e:60:2b:aa:f3:a4:41:58:c4:b8:84:a4:c6:2a: 87:ee:9c:9f:fa:b4:35:61:7f:53:6b:28:16:42:af:f4:6e:39: 52:e4:dc:ee:a8:a9:a6:5a:50:f4:6e:dc:d7:cc:31:71:fb:c0: df:52:13:1d:6c:c8:a6:b1:c0:36:3c:d2:c4:68:8d:d1:ef:64: 01:22:3b:be:54:e4:ba:50:94:36:f8:4e:83:54:c5:aa:81:88: 25:c3:aa:0f:e2:dd:09:72:48:7d:71:fb:69:9c:00:7d:45:a5: 63:3d:0f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0nBjzFS/34rWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk OTU5MzM1ZWUtNWM5Ni00NGU3LWEyODItMTFmYTE2YzdmOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstmFlQGhHBaeEB/69tB3XKHd+bA/n9/QhQXw AygoAEnKgPu7EKyJKaHxdmhE4uLiOwc1SsgyrLvemJ7vHxArbfsfDNmg6lQAE+SP hYzMtePQJknsEHcHYA0qvI0otQGBS9k/PjWMP51pxVHn2m2ZXdDyiFzcYtUph0kp sbR1ShAhVESEPKrnWBo7yGznXv2zMvTuzvKHzcEX+X91oQ4rcvTTWnAFHt4ODhpy TVDAjPUH3wUjNrvlTGa1wItg/GN5DjUGfnkZAWtuXiXp3J1W1TfT0hYFBzJxjC9c LLkxZOp7VsRqFrqZjCtCRtjUi3ikNObdWW0vRhxN/tZZ6/S3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBCRSaWk0egdnRZNWXJqwK29Jf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2U3YzMwMWQtZWEzMi0z YWM4LWJmYzctODFhMTMzOGZkNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE+8JzhePTCuRFyNcY3E+oqpb1n81IZYkOcSm7d65yfT37yIdqg6/Rm r9fUChnVNrRuAEbcRm+ryNKdALXz7tkQP/rVNaS2Xe4MumcVpZFh3w3rSvHXZ+qY ivsdP8EVkeXOtPm9igXoyXLFH1hkUAu0Osp/hxdQFFw5gkyn8ZR8UN/d3OIB2J/z /SBW/wpnTumAGtqOYCuq86RBWMS4hKTGKofunJ/6tDVhf1NrKBZCr/RuOVLk3O6o qaZaUPRu3NfMMXH7wN9SEx1syKaxwDY80sRojdHvZAEiO75U5LpQlDb4ToNUxaqB iCXDqg/i3QlySH1x+2mcAH1FpWM9D2g= -----END CERTIFICATE-----Generated at Sun Apr 27 03:18:31 2025 by rpki-client