$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa File: affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa (raw, json) Hash identifier: w5SpQCe+zpAMsiry0fh65Qdwv8kh8c9w0zSgVnso8Ds= Subject key identifier: 8E:CD:E7:A6:F0:47:C9:03:81:A4:F3:2C:92:64:9A:44:5E:38:81:15 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A4AF96B37E521EA43600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a4:af:96:b3:7e:52:1e:a4:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=931fb63d-c197-432b-bf17-af07377896be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:d7:6a:52:41:18:54:e2:cb:6c:d6:46:4c: 64:1c:0b:0c:dc:94:86:33:5d:5d:47:63:cc:9d:14: 51:10:a5:fb:ce:71:c9:18:c8:4c:8f:9f:30:56:4e: f2:43:ff:81:69:ff:26:f9:7c:bc:af:e8:cd:91:40: 1a:b3:09:8b:11:57:c2:28:32:db:3c:63:04:1f:42: 7d:a6:1e:4e:36:25:78:31:76:ac:36:08:96:13:2c: 45:ca:26:40:8a:ac:92:e7:84:bc:9a:34:0a:12:d3: ee:fb:39:17:3e:c9:81:61:0e:76:38:20:44:34:8b: 65:1e:83:47:9b:29:81:04:f3:a8:94:12:b1:dd:99: 13:fc:22:58:63:e6:6a:bc:57:a7:54:7f:7e:1e:86: d3:e6:d0:dd:12:9f:ad:0f:cc:3b:c3:a7:1a:ab:e5: 67:29:39:39:d7:5e:f4:8f:4f:35:30:e3:f6:58:87: d0:97:52:75:c3:54:69:7b:93:e8:d6:4d:cd:01:87: 11:af:69:f4:f8:4a:a2:56:b1:0b:90:65:b1:0d:2e: 8b:8d:b9:35:97:03:9f:15:b1:55:60:78:8f:7a:36: e2:49:63:c4:42:83:1f:b9:8e:cd:ad:ec:54:7d:84: 1e:6c:3f:62:c2:ec:79:04:b8:c5:56:12:9f:78:e9: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:E7:A6:F0:47:C9:03:81:A4:F3:2C:92:64:9A:44:5E:38:81:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:44:13:77:f4:a8:c5:ec:29:23:97:3f:cb:fc:73:95:24:59: 8d:3a:56:65:71:33:1e:6c:8a:03:8f:db:e9:a1:b6:b0:dc:f9: 0b:08:7b:ea:1a:a0:0e:7a:d5:69:2d:2c:a8:76:5b:3b:85:1e: 4f:9b:db:94:a6:05:10:6f:88:ec:d3:ca:28:4c:d2:a7:f1:c1: 45:1c:34:08:46:9f:ce:b4:06:00:6f:d6:15:a5:01:c3:35:30: 3e:a4:7a:2e:d6:f0:ee:30:63:75:90:58:98:77:37:8f:3f:c7: ae:12:92:e6:8b:1b:c1:75:08:8e:af:70:ce:d6:ab:42:ec:77: e9:ab:3c:b9:13:5c:98:1b:25:c4:ae:7b:a2:1c:b8:41:d4:19: b6:41:1c:d0:c7:25:62:14:35:97:e3:48:63:55:8f:27:c6:44: aa:0e:96:4c:6e:e8:46:7e:6c:da:6c:55:c4:9e:93:da:67:3b: bb:47:0d:6d:23:c5:16:0a:9b:b8:c1:b8:25:88:16:1c:45:b1: 4c:bf:31:de:31:1a:59:aa:db:a9:f1:bc:d7:1f:85:e5:62:9b: 32:78:fd:d4:52:1d:11:dc:13:85:02:7f:72:f1:9c:0f:53:66: 7e:f3:d7:46:a4:c1:46:7a:ce:8d:5d:e8:fe:23:8c:8c:b1:5d: ab:e0:f1:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKSvlrN+Uh6kNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTMxZmI2M2QtYzE5Ny00MzJiLWJmMTctYWYwNzM3Nzg5NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0XXalJBGFTiy2zWRkxkHAsM3JSGM11dR2PM nRRREKX7znHJGMhMj58wVk7yQ/+Baf8m+Xy8r+jNkUAaswmLEVfCKDLbPGMEH0J9 ph5ONiV4MXasNgiWEyxFyiZAiqyS54S8mjQKEtPu+zkXPsmBYQ52OCBENItlHoNH mymBBPOolBKx3ZkT/CJYY+ZqvFenVH9+HobT5tDdEp+tD8w7w6caq+VnKTk51170 j081MOP2WIfQl1J1w1Rpe5Po1k3NAYcRr2n0+EqiVrELkGWxDS6Ljbk1lwOfFbFV YHiPejbiSWPEQoMfuY7NrexUfYQebD9iwux5BLjFVhKfeOnDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7N56bwR8kDgaTzLJJkmkReOIEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWZmYzkxOWMtZDAyOC0z YmY1LWE3YTUtZDk2OWJkZGUxYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpEE3f0qMXsKSOXP8v8c5UkWY06VmVxMx5sigOP2+mhtrDc+QsIe+oa oA561WktLKh2WzuFHk+b25SmBRBviOzTyihM0qfxwUUcNAhGn860BgBv1hWlAcM1 MD6kei7W8O4wY3WQWJh3N48/x64SkuaLG8F1CI6vcM7Wq0Lsd+mrPLkTXJgbJcSu e6IcuEHUGbZBHNDHJWIUNZfjSGNVjyfGRKoOlkxu6EZ+bNpsVcSek9pnO7tHDW0j xRYKm7jBuCWIFhxFsUy/Md4xGlmq26nxvNcfheVimzJ4/dRSHRHcE4UCf3LxnA9T Zn7z10akwUZ6zo1d6P4jjIyxXavg8RU= -----END CERTIFICATE-----Generated at Sun Jun 15 04:55:47 2025 by rpki-client