$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa File: 4120909a-da13-31c9-9ac4-d02ace972a6b.roa (raw, json) Hash identifier: JbN0/ZkfjsfvcssX3Bad6tIClRLokt6tUW+F1juISEo= Subject key identifier: 6A:39:50:80:72:69:A6:27:FD:C6:2A:F5:94:C2:77:6F:79:2F:B7:A7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584944695054DA30ADE9D3A4C2E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 26548 IP address blocks: 166.88.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:50:54:da:30:ad:e9:d3:a4:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=0b48b792-eec5-4a6f-b3e4-8ff28d1a2303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:aa:64:a4:64:33:d4:a4:b6:db:29:5b:c9:01: 02:30:6d:49:67:93:2b:d0:09:b4:1a:23:fa:7a:2e: ca:b4:f2:a7:c5:bf:32:f2:1d:e2:15:d6:0b:b2:c4: d6:24:08:9a:15:d5:82:87:9a:2c:c0:a9:95:5f:af: 67:c5:b3:18:c4:94:b7:89:c8:97:af:10:e8:c0:f0: 52:11:12:60:12:81:1e:64:b0:4c:8b:1c:31:2b:2d: 95:80:57:6e:66:2f:c2:7d:df:4f:67:cf:9d:65:38: 3c:63:9b:0a:2d:67:64:3d:f8:71:a1:e9:17:33:06: c9:66:9f:0c:50:96:57:c1:40:38:9e:65:4f:4d:ab: 79:2b:dd:9d:1a:cc:02:ec:b9:27:45:a6:0f:7d:7a: c6:b6:f4:9f:91:6f:5b:6b:18:de:9d:b0:fc:26:9e: 0a:26:75:1c:dd:e1:0b:8a:02:d3:60:4a:bf:79:e9: ec:22:4e:b7:29:af:d9:48:84:8b:69:71:51:80:bf: 76:7b:e9:88:22:1e:49:15:b2:6d:17:9c:f1:bc:54: 47:cf:fd:68:2f:35:2d:ca:7e:c3:34:bc:b9:40:3b: ce:2f:f2:5e:c4:65:21:7b:0c:ee:15:83:81:32:50: 5b:3c:4a:26:63:93:79:38:86:6d:fd:01:4d:b1:7e: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:39:50:80:72:69:A6:27:FD:C6:2A:F5:94:C2:77:6F:79:2F:B7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b8:7b:83:e9:7e:c1:5d:9a:74:45:cf:f7:af:48:20:a8:ed: e0:34:6b:7e:35:70:cf:1b:13:8d:e7:cc:88:6c:eb:ea:ed:50: 2c:be:83:44:63:df:a4:7b:9c:a2:80:29:67:ec:48:76:83:a0: 6a:3b:3e:45:a1:e8:a2:8d:82:9e:62:f9:2a:52:c9:89:79:14: 45:00:3b:b0:ce:d5:b5:b0:99:71:a7:22:6c:71:1a:33:a7:70: c1:1e:11:48:f6:9e:9d:5a:fe:f2:8b:a5:40:49:b6:f6:51:67: 10:01:c2:2b:ab:e1:17:66:5b:c5:79:3b:e0:a9:ff:74:c4:71: fa:97:18:d2:ac:4c:5e:b2:48:74:1c:8c:58:0c:5f:54:a8:e7: 10:a3:72:2b:3a:f9:a3:d4:b5:69:6d:22:75:56:47:3e:44:3d: 79:aa:5f:7a:e4:ee:36:9c:ff:33:f5:7b:f8:d4:f4:06:57:d7: 29:70:88:71:30:e0:69:b6:dd:7a:75:ef:c7:84:9c:38:46:9d: 02:5f:8d:23:6d:1d:7d:08:7d:93:30:8b:1d:e9:cb:55:87:cd: af:23:63:fc:af:a7:66:96:4a:94:96:e5:42:24:dd:0f:f4:43: fc:32:eb:2b:68:65:c7:32:8f:2a:d2:36:27:0b:af:69:e3:41: ea:6e:ab:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaVBU2jCt6dOkwuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MGI0OGI3OTItZWVjNS00YTZmLWIzZTQtOGZmMjhkMWEyMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKpkpGQz1KS22ylbyQECMG1JZ5Mr0Am0GiP6 ei7KtPKnxb8y8h3iFdYLssTWJAiaFdWCh5oswKmVX69nxbMYxJS3iciXrxDowPBS ERJgEoEeZLBMixwxKy2VgFduZi/Cfd9PZ8+dZTg8Y5sKLWdkPfhxoekXMwbJZp8M UJZXwUA4nmVPTat5K92dGswC7LknRaYPfXrGtvSfkW9baxjenbD8Jp4KJnUc3eEL igLTYEq/eensIk63Ka/ZSISLaXFRgL92e+mIIh5JFbJtF5zxvFRHz/1oLzUtyn7D NLy5QDvOL/JexGUhewzuFYOBMlBbPEomY5N5OIZt/QFNsX6N6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo5UIByaaYn/cYq9ZTCd295L7enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDEyMDkwOWEtZGExMy0z MWM5LTlhYzQtZDAyYWNlOTcyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS4e4PpfsFdmnRFz/evSCCo7eA0a341cM8bE43nzIhs6+rtUCy+g0Rj 36R7nKKAKWfsSHaDoGo7PkWh6KKNgp5i+SpSyYl5FEUAO7DO1bWwmXGnImxxGjOn cMEeEUj2np1a/vKLpUBJtvZRZxABwiur4RdmW8V5O+Cp/3TEcfqXGNKsTF6ySHQc jFgMX1So5xCjcis6+aPUtWltInVWRz5EPXmqX3rk7jac/zP1e/jU9AZX1ylwiHEw 4Gm23Xp178eEnDhGnQJfjSNtHX0IfZMwix3py1WHza8jY/yvp2aWSpSW5UIk3Q/0 Q/wy6ytoZccyjyrSNicLr2njQepuq1M= -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:50 2025 by rpki-client