$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa File: 86f61352-45a4-3d85-9f07-9a73694b819e.roa (raw, json) Hash identifier: kK65fiIJcMRtGLxrKWKKhlkFNFZn2InY9i3lNuCEC7M= Subject key identifier: C3:24:A5:3C:E3:16:CF:3C:79:89:92:14:49:FD:D1:3C:25:2D:60:B9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849A61F4A0F0BEC0B1CCFAC7710 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 9312 IP address blocks: 166.88.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:4a:0f:0b:ec:0b:1c:cf:ac:77:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=de716fd7-5b8c-455e-b0bd-b36dc57c1e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f3:e5:87:0e:7b:c6:45:5c:f3:c1:f8:7f:ff: ce:42:b2:4a:b0:35:4d:77:c4:8b:37:1f:14:0a:be: 32:fb:fb:2a:a5:fe:0e:ba:fb:ce:6e:62:d1:d0:a7: e5:a1:e7:32:db:d0:fd:d0:56:33:26:38:20:ca:4e: 64:0c:b2:18:fa:b7:be:e5:f0:8f:ef:49:b8:07:62: 57:e4:2c:f6:a7:2d:45:dc:3d:08:c7:a2:ea:a9:2f: 87:01:bf:6d:02:0c:f9:73:1e:fb:b0:52:00:50:21: c4:6d:0b:3f:a6:13:36:73:64:2b:a7:ad:f8:f2:ca: 1d:60:8f:63:78:49:d2:9a:5a:d9:00:8d:c7:d4:5b: 8f:04:d9:cc:59:6f:15:99:2e:ef:7a:cf:db:9d:65: 99:27:54:3f:a1:5b:5a:c5:dc:6d:16:e6:7e:2b:92: 17:31:2d:73:5d:f0:20:d4:aa:1e:16:99:ee:cd:17: 56:1a:30:d1:a7:9d:06:59:e7:9c:ce:50:a4:4d:52: ea:82:ad:1b:bf:dc:6d:3c:3f:4a:72:ab:dc:86:44: 52:c6:c2:ef:bb:36:6e:e5:0f:13:63:37:af:e9:9b: da:61:a1:8e:5e:b1:7f:c9:b7:cd:86:05:bc:24:e2: d7:85:8d:58:b9:b6:e1:1a:61:19:b2:85:07:43:14: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:A5:3C:E3:16:CF:3C:79:89:92:14:49:FD:D1:3C:25:2D:60:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:62:0a:12:92:7a:a3:d2:d9:bb:f6:c7:69:d3:9e:12:83:65: cc:38:bd:2a:36:21:a7:c4:da:ba:14:f8:6e:99:ca:b3:53:99: 3c:ed:c5:aa:54:8b:d5:c9:af:75:29:82:1f:b1:2f:64:95:b5: 35:7d:7b:52:40:c0:7e:16:e8:80:ca:08:a0:df:27:bf:5a:d9: b6:9d:7d:87:50:f8:fe:ce:05:0a:d1:e4:ca:dc:c3:f7:41:23: 78:26:3c:e7:3e:c3:e7:15:29:52:41:01:13:84:32:80:a1:58: 28:42:50:02:1e:ed:cc:03:6e:b2:74:88:3a:5e:71:39:53:f3: 15:73:60:ca:98:2e:9c:79:5a:6c:26:e0:4a:81:c4:e2:e9:f6: 8c:87:09:9b:64:8b:2b:7c:ed:80:2e:25:e5:8d:86:b3:1e:79: d2:a3:cd:be:a8:db:e2:4b:41:5c:89:b6:88:12:20:b5:1a:33: 0d:8f:e8:b3:b3:94:74:85:53:d3:3b:5f:c5:c6:07:0d:3c:c8: 70:7d:f5:ec:a1:36:57:2f:23:de:be:d2:03:d4:fb:b8:04:63: cd:22:1d:bc:4c:12:47:e5:bf:d6:cb:c3:6f:16:4d:21:03:0d: 0c:00:5e:85:54:8b:01:43:35:b3:e6:8b:ce:be:d7:4b:7f:83: a8:d5:75:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0oPC+wLHM+sdxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZGU3MTZmZDctNWI4Yy00NTVlLWIwYmQtYjM2ZGM1N2MxZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PPlhw57xkVc88H4f//OQrJKsDVNd8SLNx8U Cr4y+/sqpf4OuvvObmLR0Kfloecy29D90FYzJjggyk5kDLIY+re+5fCP70m4B2JX 5Cz2py1F3D0Ix6LqqS+HAb9tAgz5cx77sFIAUCHEbQs/phM2c2Qrp6348sodYI9j eEnSmlrZAI3H1FuPBNnMWW8VmS7ves/bnWWZJ1Q/oVtaxdxtFuZ+K5IXMS1zXfAg 1KoeFpnuzRdWGjDRp50GWeeczlCkTVLqgq0bv9xtPD9KcqvchkRSxsLvuzZu5Q8T Yzev6ZvaYaGOXrF/ybfNhgW8JOLXhY1YubbhGmEZsoUHQxSuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMkpTzjFs88eYmSFEn90TwlLWC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODZmNjEzNTItNDVhNC0z ZDg1LTlmMDctOWE3MzY5NGI4MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1iChKSeqPS2bv2x2nTnhKDZcw4vSo2IafE2roU+G6ZyrNTmTztxapU i9XJr3Upgh+xL2SVtTV9e1JAwH4W6IDKCKDfJ79a2badfYdQ+P7OBQrR5Mrcw/dB I3gmPOc+w+cVKVJBAROEMoChWChCUAIe7cwDbrJ0iDpecTlT8xVzYMqYLpx5Wmwm 4EqBxOLp9oyHCZtkiyt87YAuJeWNhrMeedKjzb6o2+JLQVyJtogSILUaMw2P6LOz lHSFU9M7X8XGBw08yHB99eyhNlcvI96+0gPU+7gEY80iHbxMEkflv9bLw28WTSED DQwAXoVUiwFDNbPmi86+10t/g6jVdR8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:18 2025 by rpki-client