$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/406a7a1a-e539-3488-a206-ae31468fb1d0.roa File: 406a7a1a-e539-3488-a206-ae31468fb1d0.roa (raw, json) Hash identifier: BU0l8+i+L1dUA8dDsRS1i8u32rOhElB/0UyBuYAVuyg= Subject key identifier: E2:F4:AF:E1:D3:62:BB:88:B2:DD:4D:AA:39:E0:9B:D1:5B:1A:6E:E0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849350EA3E62F6EA6C8D5E3DB80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/406a7a1a-e539-3488-a206-ae31468fb1d0.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 43444 IP address blocks: 166.88.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a3:e6:2f:6e:a6:c8:d5:e3:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=9cee39d1-7c0c-4dfb-bb03-957ab2a7c10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:8a:9e:e7:88:5a:eb:7a:da:30:a8:e7:cd: 9a:a8:45:8c:7e:f4:56:ab:e5:f9:45:dd:45:31:7a: ff:77:da:cf:a6:91:37:e9:ad:a2:e6:f4:44:00:03: 77:fb:eb:99:26:63:77:b9:99:0f:aa:e3:a2:69:24: 04:e6:52:41:fb:9d:f3:2a:ec:0b:aa:59:aa:ee:25: 4a:d2:53:e4:36:a6:65:26:66:3b:c4:35:9e:93:4d: 72:e0:80:4e:a7:8e:ac:4a:1e:be:92:a4:15:be:47: 77:44:fd:30:b4:bf:1a:d3:de:9f:4c:61:fc:d9:96: 0c:c2:63:87:af:71:79:c2:b7:ec:43:06:1d:79:18: 47:e7:6e:86:5c:2e:ba:06:89:ab:15:94:b5:cc:46: 4f:a3:ae:40:4b:e2:67:0d:03:9d:80:07:3d:10:89: 37:9a:00:70:42:5f:bd:25:bc:22:c6:5f:8c:9b:ab: 10:c2:96:1f:c1:de:a2:ef:0a:fd:53:10:7b:eb:b4: 26:59:cd:bf:66:75:be:6c:54:7d:ef:65:be:46:4c: ae:cf:ae:65:a8:9d:fd:f2:01:02:69:61:7a:2c:a5: a2:6a:ed:75:4f:86:25:89:d9:32:71:b8:c2:ef:01: 42:da:5e:8a:03:e6:97:54:3c:f1:b7:c4:7c:04:4c: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F4:AF:E1:D3:62:BB:88:B2:DD:4D:AA:39:E0:9B:D1:5B:1A:6E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/406a7a1a-e539-3488-a206-ae31468fb1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c1:7e:6a:9c:c0:34:2e:a9:99:3b:66:c0:2b:ad:c7:e1:31: 9d:d3:42:a7:cd:fe:7f:10:8c:f5:d9:bd:a6:36:3a:94:9d:8d: f0:84:8c:29:f8:0d:d4:36:c0:29:34:a2:1a:4b:8c:53:3c:8a: 2e:55:ee:f6:4c:1e:60:b2:9c:12:38:ab:d3:6e:6b:59:47:d6: c2:3d:8b:28:74:2f:45:77:b3:b9:b5:7f:2d:45:ae:57:72:6c: 14:ae:16:f0:39:b4:27:f4:63:ba:65:56:0c:e2:55:9d:99:fc: cb:3b:bb:dc:61:57:c4:0c:9d:05:3a:3d:1b:a9:56:ed:45:42: 7c:37:43:90:53:51:37:bb:2d:1d:7d:17:a5:e8:a1:d6:95:9c: 37:27:21:2e:b5:75:7e:a5:dd:94:ad:a7:ef:1b:94:c5:19:5d: 17:11:7b:8c:29:42:a1:68:27:3c:c2:11:cb:43:ae:49:88:89: 75:bd:cf:f5:88:52:42:39:b3:12:90:32:d1:8e:fc:73:3e:93: 96:0a:2f:70:aa:44:ba:3f:dd:b7:fd:8b:7a:fa:75:e7:30:21: cf:36:71:c2:2a:4a:43:83:11:25:c2:ce:fd:e8:83:d6:ac:84: 29:c9:77:b5:82:8d:26:15:07:07:8c:6e:c5:b8:15:c7:70:0b: f7:e0:09:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqPmL26myNXj24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OWNlZTM5ZDEtN2MwYy00ZGZiLWJiMDMtOTU3YWIyYTdjMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJyKnueIWut62jCo582aqEWMfvRWq+X5Rd1F MXr/d9rPppE36a2i5vREAAN3++uZJmN3uZkPquOiaSQE5lJB+53zKuwLqlmq7iVK 0lPkNqZlJmY7xDWek01y4IBOp46sSh6+kqQVvkd3RP0wtL8a096fTGH82ZYMwmOH r3F5wrfsQwYdeRhH526GXC66BomrFZS1zEZPo65AS+JnDQOdgAc9EIk3mgBwQl+9 Jbwixl+Mm6sQwpYfwd6i7wr9UxB767QmWc2/ZnW+bFR972W+Rkyuz65lqJ398gEC aWF6LKWiau11T4YlidkycbjC7wFC2l6KA+aXVDzxt8R8BEyQYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL0r+HTYruIst1Nqjngm9FbGm7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDA2YTdhMWEtZTUzOS0z NDg4LWEyMDYtYWUzMTQ2OGZiMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvBfmqcwDQuqZk7ZsArrcfhMZ3TQqfN/n8QjPXZvaY2OpSdjfCEjCn4 DdQ2wCk0ohpLjFM8ii5V7vZMHmCynBI4q9Nua1lH1sI9iyh0L0V3s7m1fy1Frldy bBSuFvA5tCf0Y7plVgziVZ2Z/Ms7u9xhV8QMnQU6PRupVu1FQnw3Q5BTUTe7LR19 F6XoodaVnDcnIS61dX6l3ZStp+8blMUZXRcRe4wpQqFoJzzCEctDrkmIiXW9z/WI UkI5sxKQMtGO/HM+k5YKL3CqRLo/3bf9i3r6decwIc82ccIqSkODESXCzv3og9as hCnJd7WCjSYVBweMbsW4FcdwC/fgCak= -----END CERTIFICATE-----Generated at Sun Apr 27 10:50:08 2025 by rpki-client