$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa File: 6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa (raw, json) Hash identifier: o4g3czWPl3BKrLRG/l8mvT6LrpHzO9XTSL20NLBxGN0= Subject key identifier: D2:C1:FF:2F:E4:32:0A:29:97:EE:0E:56:F6:2A:F8:E4:61:22:14:DC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E649E577101B6207F35AFC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9e:57:71:01:b6:20:7f:35:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=cc7a8056-a98b-4c0e-8b33-8a86d9d28a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:98:3d:67:56:3d:f4:7f:ff:e1:ea:3b:0e: 52:6f:ff:d1:47:ac:34:df:f2:db:ab:40:f1:c7:6b: 81:39:60:29:66:a0:27:f3:65:ac:f4:56:76:a7:ef: e4:39:4d:ac:b2:b8:e4:1d:fa:6a:12:c1:54:90:ef: 9e:37:b4:fc:9f:30:c5:22:54:2d:c2:54:37:2c:d0: f7:6b:05:b3:84:b6:20:80:46:7b:d9:65:97:8a:46: 95:37:15:76:7f:f7:6d:a1:b2:22:a2:eb:5a:52:5a: 5b:3b:7f:8d:1d:d8:b5:eb:b7:a7:56:26:ea:55:86: 2b:e4:2e:fc:de:a0:d3:be:46:cc:8e:a0:20:3d:05: dc:ab:d7:33:d3:e8:94:ab:02:20:7d:b6:3e:6e:ab: 0c:3a:0c:6c:d5:50:93:42:60:c4:73:40:b0:ae:ed: 09:8c:e8:87:cc:03:21:a7:3d:b6:a3:4d:0d:c6:e4: c4:d8:93:1a:47:ba:9b:4e:35:50:35:5d:0e:86:c0: 5e:0f:29:d3:6e:ed:07:56:2f:2d:71:f8:4f:f4:00: 3a:a0:cb:0b:e5:84:3f:4e:35:e8:88:9c:2a:51:3a: 85:84:54:45:a6:ec:a7:bf:c3:f2:3c:9d:e3:f7:96: 71:4c:e8:2d:75:5a:c7:35:ff:6e:76:92:b9:5e:5d: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C1:FF:2F:E4:32:0A:29:97:EE:0E:56:F6:2A:F8:E4:61:22:14:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9d:72:98:16:7d:33:25:78:94:12:a5:3a:6d:00:49:82:5e: 97:07:ed:03:26:80:15:b6:c9:ce:1c:95:5c:60:00:c3:5e:65: 98:e0:31:49:17:88:0a:19:41:4f:96:5a:49:aa:c9:40:b7:7e: 8f:58:7c:d2:18:24:8f:4c:21:c7:6d:ff:a3:6a:af:f2:ae:8a: be:18:b3:69:dd:6c:d2:92:b0:0b:23:25:ae:49:bd:03:aa:b1: bd:46:0d:e2:be:a3:62:b9:3b:bb:cd:06:15:7e:30:bd:02:77: 37:78:c9:a5:33:9e:16:ff:10:bb:7d:c7:e1:83:fc:17:9e:e3: a5:4e:be:84:80:fe:0d:09:c9:76:a7:56:0e:93:91:3c:2f:75: 56:28:55:64:82:9b:cd:7c:6b:8f:30:a5:98:ed:c0:3e:ff:c9: 9e:94:b0:88:cd:2b:a5:77:53:76:a5:f7:d7:3d:74:93:0e:8a: f5:7a:85:53:c6:e0:2a:44:57:7b:95:7c:99:ad:b1:7b:fa:92: 1f:89:dc:55:4f:42:04:3d:81:cb:25:18:54:1b:63:0b:79:03: 22:5f:e4:72:ae:0d:5a:f7:c4:62:39:8c:cc:1e:29:7b:55:e3: 86:68:a2:04:ff:56:12:c7:ff:9a:b4:d6:73:4f:8e:58:f3:d9: d9:8d:8b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJ5XcQG2IH81r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2M3YTgwNTYtYTk4Yi00YzBlLThiMzMtOGE4NmQ5ZDI4YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpSYPWdWPfR//+HqOw5Sb//RR6w03/Lbq0Dx x2uBOWApZqAn82Ws9FZ2p+/kOU2ssrjkHfpqEsFUkO+eN7T8nzDFIlQtwlQ3LND3 awWzhLYggEZ72WWXikaVNxV2f/dtobIioutaUlpbO3+NHdi167enVibqVYYr5C78 3qDTvkbMjqAgPQXcq9cz0+iUqwIgfbY+bqsMOgxs1VCTQmDEc0Cwru0JjOiHzAMh pz22o00NxuTE2JMaR7qbTjVQNV0OhsBeDynTbu0HVi8tcfhP9AA6oMsL5YQ/TjXo iJwqUTqFhFRFpuynv8PyPJ3j95ZxTOgtdVrHNf9udpK5Xl2UUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLB/y/kMgopl+4OVvYq+ORhIhTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjkyOWE1ZGUtY2UxNC0z NDViLThmNmYtYTFkM2E2NzQ5NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqdcpgWfTMleJQSpTptAEmCXpcH7QMmgBW2yc4clVxgAMNeZZjgMUkX iAoZQU+WWkmqyUC3fo9YfNIYJI9MIcdt/6Nqr/Kuir4Ys2ndbNKSsAsjJa5JvQOq sb1GDeK+o2K5O7vNBhV+ML0Cdzd4yaUznhb/ELt9x+GD/Bee46VOvoSA/g0JyXan Vg6TkTwvdVYoVWSCm818a48wpZjtwD7/yZ6UsIjNK6V3U3al99c9dJMOivV6hVPG 4CpEV3uVfJmtsXv6kh+J3FVPQgQ9gcslGFQbYwt5AyJf5HKuDVr3xGI5jMweKXtV 44ZoogT/VhLH/5q01nNPjljz2dmNi9w= -----END CERTIFICATE-----Generated at Sun Apr 27 19:50:37 2025 by rpki-client