$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa File: 424f8058-950b-3da7-9d49-5b107b6ab80b.roa (raw, json) Hash identifier: BKS/3yq1GHtPS4HAh+ukmaMm2vC9EAcsSb4tAou9tXE= Subject key identifier: 4B:EC:29:E6:72:91:E6:E5:32:62:67:43:04:B2:B0:69:3E:0D:41:D6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A5C38B203F93F1BBA080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a5:c3:8b:20:3f:93:f1:bb:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=818dfd8c-78f8-4d9b-96ba-47228f4ca1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:80:a8:00:ff:58:be:39:67:68:65:a4:e2: 61:db:54:51:04:23:26:be:1a:38:6c:c3:d9:df:2c: 17:19:f4:d3:ce:39:b1:75:c5:b9:e7:92:e5:9c:d7: 33:72:a0:68:74:58:48:c0:e7:3e:f7:d8:ce:8c:56: 5b:d2:a8:fa:1b:a7:2f:2e:92:2f:ec:fd:90:1e:7b: 76:92:1d:46:76:92:0e:b1:54:5c:fe:4f:ae:39:23: cc:b8:d5:d3:52:8e:c9:53:b5:d0:ca:9b:81:54:e5: 21:94:93:ef:96:a4:62:a7:39:68:25:2e:dc:71:de: d6:28:ff:c0:72:d1:44:4e:7d:00:6c:9f:4d:26:82: 77:74:8c:cf:76:ce:fb:aa:17:f4:c9:da:6c:d4:e6: 54:0e:64:36:12:a3:e2:38:b4:fd:c4:78:c7:f6:d0: 42:49:3b:c5:1e:35:fe:61:b5:55:51:10:0e:f2:a6: 4c:c2:5d:f0:02:85:4a:21:d8:5d:7c:d2:12:ca:bb: c3:54:67:6b:60:62:39:97:ea:4d:86:02:c8:61:86: 13:f2:01:39:4b:5d:e3:38:aa:c8:81:79:e6:4b:7d: c9:23:4f:7e:39:38:ad:80:4d:2b:b5:fd:bd:ed:9c: cb:c2:e4:88:53:48:1c:bc:a8:84:7e:b2:03:84:06: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EC:29:E6:72:91:E6:E5:32:62:67:43:04:B2:B0:69:3E:0D:41:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:6d:8a:69:95:fc:21:6b:6e:c3:24:30:86:9a:cf:c6:99: 15:34:f3:2a:8f:46:b1:aa:45:51:29:ca:0b:f5:11:b0:ce:d3: 5a:bf:ab:68:73:e9:f4:d0:49:dd:9c:ce:dc:cc:ac:5f:ce:6e: fc:90:ba:f5:36:31:96:42:46:a9:1e:e2:be:e3:f0:d6:96:ac: 1e:34:a6:cc:0e:e6:4c:b5:64:44:9c:74:84:a1:5e:33:ef:c4: 5f:fd:ef:ac:60:48:d2:13:99:d9:4e:70:18:ff:67:38:25:b1: ae:05:dc:14:48:7c:6a:af:f4:28:7f:87:7c:32:bd:01:3e:97: ac:55:50:28:62:bc:59:35:bc:90:ed:d8:89:d0:06:f3:04:a0: e5:5a:2a:82:80:c2:df:cd:f3:53:71:9f:b5:bf:f3:f0:04:9f: af:02:11:6f:4a:3c:df:f6:a4:dd:df:88:38:14:da:72:6d:e5: f9:9b:41:e9:87:9e:41:71:db:07:c0:15:01:c7:60:82:34:48: 34:10:c6:51:f9:18:28:58:fe:fd:d2:19:45:c4:84:87:88:8c: da:7e:1e:b1:2c:15:e5:43:4a:6e:bb:10:9a:ac:7b:b6:df:f2: 1d:e9:25:87:21:30:ce:bd:97:38:bc:cd:aa:98:8e:b6:55:29: 0b:67:96:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKXDiyA/k/G7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ODE4ZGZkOGMtNzhmOC00ZDliLTk2YmEtNDcyMjhmNGNhMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmWAqAD/WL45Z2hlpOJh21RRBCMmvho4bMPZ 3ywXGfTTzjmxdcW555LlnNczcqBodFhIwOc+99jOjFZb0qj6G6cvLpIv7P2QHnt2 kh1GdpIOsVRc/k+uOSPMuNXTUo7JU7XQypuBVOUhlJPvlqRipzloJS7ccd7WKP/A ctFETn0AbJ9NJoJ3dIzPds77qhf0ydps1OZUDmQ2EqPiOLT9xHjH9tBCSTvFHjX+ YbVVURAO8qZMwl3wAoVKIdhdfNISyrvDVGdrYGI5l+pNhgLIYYYT8gE5S13jOKrI gXnmS33JI09+OTitgE0rtf297ZzLwuSIU0gcvKiEfrIDhAZ05QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvsKeZykeblMmJnQwSysGk+DUHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI0ZjgwNTgtOTUwYi0z ZGE3LTlkNDktNWIxMDdiNmFiODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFodbYpplfwha27DJDCGms/GmRU08yqPRrGqRVEpygv1EbDO01q/q2hz 6fTQSd2cztzMrF/ObvyQuvU2MZZCRqke4r7j8NaWrB40pswO5ky1ZEScdIShXjPv xF/976xgSNITmdlOcBj/Zzglsa4F3BRIfGqv9Ch/h3wyvQE+l6xVUChivFk1vJDt 2InQBvMEoOVaKoKAwt/N81Nxn7W/8/AEn68CEW9KPN/2pN3fiDgU2nJt5fmbQemH nkFx2wfAFQHHYII0SDQQxlH5GChY/v3SGUXEhIeIjNp+HrEsFeVDSm67EJqse7bf 8h3pJYchMM69lzi8zaqYjrZVKQtnluk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:27 2025 by rpki-client