$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/693c818a-7edd-3315-bd66-d5b914f5d1bc.roa File: 693c818a-7edd-3315-bd66-d5b914f5d1bc.roa (raw, json) Hash identifier: Zp+sbH0pSXFYb72EXxBCIkiNh4JRmRqGiBhrZTB9rrw= Subject key identifier: 19:38:C7:A6:D8:42:99:5C:17:8F:CA:04:9C:B3:97:CD:77:D4:54:EF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584988CF65CF583E49AD5C69F080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/693c818a-7edd-3315-bd66-d5b914f5d1bc.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 149440 IP address blocks: 166.88.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:65:cf:58:3e:49:ad:5c:69:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=cff10f58-293c-4eb9-807e-7914ef30f851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:be:05:56:e1:85:2a:55:96:a0:e8:83:54: f1:36:ca:28:62:4a:e8:7d:14:48:24:ad:b1:6d:2a: ca:ce:c2:c2:8d:2f:af:34:80:a2:8c:51:24:87:ee: 72:9e:69:22:fa:5b:43:73:9e:b3:cc:69:0c:26:e5: f5:68:f6:0c:d3:e1:1a:77:56:6f:4a:ac:8e:99:53: 3d:6d:5a:3b:c9:f1:97:84:da:e4:47:6c:e8:b5:24: d2:67:90:25:31:41:59:da:0d:1a:66:34:bb:c6:8d: bf:3e:b2:00:3b:64:4f:81:0f:35:f5:9f:35:8f:37: 77:c8:96:13:47:e7:ad:9a:cb:be:ac:b1:1b:c9:86: ea:1a:bb:c2:47:0f:fb:88:65:e7:c3:99:9f:3f:f7: a3:1d:c3:2a:75:d9:3f:bc:c0:57:8c:77:0b:45:03: ad:6d:95:5e:17:2d:7e:e2:04:ff:12:1a:43:4a:18: 78:35:5f:b0:31:22:34:0b:72:12:48:6e:bb:f8:70: f0:39:ad:fa:0d:5a:41:ff:9d:8e:3a:fb:2d:58:44: 9c:75:93:2f:21:23:55:76:29:4a:ac:a6:c7:25:a7: c2:9b:13:e2:1f:71:87:04:a6:58:d7:23:dc:5a:63: dd:cf:1f:40:81:75:2c:c9:1d:61:1d:91:ba:17:5b: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:C7:A6:D8:42:99:5C:17:8F:CA:04:9C:B3:97:CD:77:D4:54:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/693c818a-7edd-3315-bd66-d5b914f5d1bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:04:22:5b:ec:30:21:ca:d1:fe:4c:58:24:b7:02:f0:09:d0: 3f:65:f0:50:9d:c5:50:43:2a:71:9b:ac:d3:28:51:af:bf:ba: d4:22:dc:91:17:17:b5:7f:73:85:10:b3:e0:f2:70:29:82:c6: cf:93:bf:81:98:bf:6f:cd:47:4b:df:6b:22:27:8a:48:8f:50: 3b:ce:5f:56:44:39:f0:c7:4d:8c:f3:bd:02:5f:6d:d2:0c:4d: 57:0f:db:bb:fc:16:a7:7d:c6:84:39:90:12:1c:44:0d:97:2c: 3b:cf:da:b7:66:dc:f6:c1:b7:a3:81:82:95:af:84:0b:f1:54: c0:3f:14:a9:7f:de:03:dd:6f:75:6d:ea:8d:90:56:6c:40:ea: 2d:b1:26:41:27:55:1d:9e:a3:cb:31:97:e4:ca:08:b8:d7:77: d2:86:24:14:9e:d5:1b:96:dc:4a:8c:10:53:65:ed:3a:82:77: f8:45:76:51:45:ea:87:b3:4d:15:66:28:f4:94:b6:92:29:f2: a0:50:ff:98:5e:98:21:c2:26:a8:10:94:7b:75:5f:8e:54:ee: 3f:ea:28:82:e8:9a:88:6f:76:36:26:5d:2d:0b:70:5e:f5:5a: 02:ae:32:a4:2a:8f:a1:84:11:97:db:a9:3f:00:c4:18:60:ce: 64:91:8d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2XPWD5JrVxp8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Y2ZmMTBmNTgtMjkzYy00ZWI5LTgwN2UtNzkxNGVmMzBmODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikC+BVbhhSpVlqDog1TxNsooYkrofRRIJK2x bSrKzsLCjS+vNICijFEkh+5ynmki+ltDc56zzGkMJuX1aPYM0+Ead1ZvSqyOmVM9 bVo7yfGXhNrkR2zotSTSZ5AlMUFZ2g0aZjS7xo2/PrIAO2RPgQ819Z81jzd3yJYT R+etmsu+rLEbyYbqGrvCRw/7iGXnw5mfP/ejHcMqddk/vMBXjHcLRQOtbZVeFy1+ 4gT/EhpDShh4NV+wMSI0C3ISSG67+HDwOa36DVpB/52OOvstWEScdZMvISNVdilK rKbHJafCmxPiH3GHBKZY1yPcWmPdzx9AgXUsyR1hHZG6F1sWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk4x6bYQplcF4/KBJyzl8131FTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjkzYzgxOGEtN2VkZC0z MzE1LWJkNjYtZDViOTE0ZjVkMWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4EIlvsMCHK0f5MWCS3AvAJ0D9l8FCdxVBDKnGbrNMoUa+/utQi3JEX F7V/c4UQs+DycCmCxs+Tv4GYv2/NR0vfayInikiPUDvOX1ZEOfDHTYzzvQJfbdIM TVcP27v8Fqd9xoQ5kBIcRA2XLDvP2rdm3PbBt6OBgpWvhAvxVMA/FKl/3gPdb3Vt 6o2QVmxA6i2xJkEnVR2eo8sxl+TKCLjXd9KGJBSe1RuW3EqMEFNl7TqCd/hFdlFF 6oezTRVmKPSUtpIp8qBQ/5hemCHCJqgQlHt1X45U7j/qKILomohvdjYmXS0LcF71 WgKuMqQqj6GEEZfbqT8AxBhgzmSRjRI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:33 2025 by rpki-client