$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be97de63-470f-3120-a737-89e073586c92.roa File: be97de63-470f-3120-a737-89e073586c92.roa (raw, json) Hash identifier: W2qQqFpSCiI0LZRiqEuJG/TXAsS+8ZNxldbmqKLMYVk= Subject key identifier: 66:B4:AC:68:44:B3:60:78:6C:E3:C7:C9:3F:D9:3E:AE:3B:AA:C4:3E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B904FD9E82D969394A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be97de63-470f-3120-a737-89e073586c92.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 166.88.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:04:fd:9e:82:d9:69:39:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=4fd69cfa-5ed8-40dc-98c0-c1a9a207ec62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3c:ac:70:1c:5b:2f:31:d4:e0:ac:a8:63:fc: 04:53:8d:27:fd:2b:e7:ef:e4:a4:2a:fa:2b:da:e3: 24:86:1a:46:38:54:0c:b7:67:4a:15:f2:66:b8:30: 1c:24:ee:48:93:fe:17:ce:62:32:07:6f:36:74:62: eb:48:80:96:20:8f:69:bd:01:17:28:4f:21:c7:8c: 2d:5b:81:87:ca:2a:8f:10:76:a0:cc:07:01:80:cd: 7a:71:01:00:18:67:67:e4:0a:55:90:93:94:52:a1: 60:ad:b3:db:1b:64:5f:63:98:a7:fa:0c:7f:47:b5: 6d:ad:6d:66:59:5c:3c:29:ca:c9:1a:c5:a5:4b:bb: 67:b8:5d:07:6a:5d:d6:23:ed:f5:25:a8:00:80:94: 1d:b8:86:f5:60:52:f0:d5:2d:24:a5:1d:1f:a0:d8: 1e:8f:94:5b:39:c1:a0:e3:bf:80:3c:b1:e0:d6:08: 8e:35:47:9b:ef:ef:01:03:37:d0:58:a3:46:bb:0d: 75:54:a0:cd:c4:fe:04:11:ca:6e:5e:59:c1:a3:35: 12:1a:06:60:8c:d8:75:c8:a0:03:28:3d:d0:7f:d7: a3:28:5c:21:74:4e:bd:67:b8:0e:af:41:9e:d2:b0: b1:b9:24:ab:7a:ec:0e:47:ef:94:97:8c:fc:13:b3: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B4:AC:68:44:B3:60:78:6C:E3:C7:C9:3F:D9:3E:AE:3B:AA:C4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be97de63-470f-3120-a737-89e073586c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0c:29:ba:d8:c1:2f:bc:25:c2:32:d9:72:e3:94:34:c9:c1: 94:27:35:88:19:f6:28:0b:59:34:43:aa:75:c1:04:0d:b4:a2: d2:6e:c2:fa:e3:17:f5:76:f0:07:1b:41:91:d1:f4:39:67:05: da:64:12:14:7b:87:e2:de:5e:62:5b:a8:1e:6b:20:32:bb:33: b6:38:dc:11:e7:f9:cd:6e:94:59:da:9e:e3:9f:c8:7f:fd:37: 92:4a:c4:cb:07:22:46:02:9a:41:a5:88:34:87:d7:18:c7:2b: 69:7c:a8:f8:a6:aa:f2:99:d8:6a:6b:a2:72:c8:a6:e3:d6:49: bb:85:77:cb:64:09:8f:27:a3:b3:27:79:f7:87:1e:ea:4d:75: 84:06:2d:53:a7:f4:71:90:d0:14:64:cf:a5:7e:3c:ab:e4:c6: 92:7f:9d:82:70:1a:ba:4f:d6:18:b7:e5:c3:34:61:a1:14:cf: 4d:66:e4:c7:b4:c5:be:40:4e:11:8b:3b:4b:38:70:d1:ab:ee: c3:c4:82:69:d1:05:8f:9c:6e:21:f3:1a:53:e2:b0:a6:d9:01: 0e:5b:f8:bc:e4:6a:dd:b7:1a:7f:b4:65:37:7d:f5:0e:67:a6: 47:a5:4f:71:4e:49:79:4e:de:3e:9d:11:bd:8c:df:85:90:06: ef:49:33:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLkE/Z6C2Wk5SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NGZkNjljZmEtNWVkOC00MGRjLTk4YzAtYzFhOWEyMDdlYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTyscBxbLzHU4KyoY/wEU40n/Svn7+SkKvor 2uMkhhpGOFQMt2dKFfJmuDAcJO5Ik/4XzmIyB282dGLrSICWII9pvQEXKE8hx4wt W4GHyiqPEHagzAcBgM16cQEAGGdn5ApVkJOUUqFgrbPbG2RfY5in+gx/R7VtrW1m WVw8KcrJGsWlS7tnuF0Hal3WI+31JagAgJQduIb1YFLw1S0kpR0foNgej5RbOcGg 47+APLHg1giONUeb7+8BAzfQWKNGuw11VKDNxP4EEcpuXlnBozUSGgZgjNh1yKAD KD3Qf9ejKFwhdE69Z7gOr0Ge0rCxuSSreuwOR++Ul4z8E7N6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa0rGhEs2B4bOPHyT/ZPq47qsQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmU5N2RlNjMtNDcwZi0z MTIwLWE3MzctODllMDczNTg2YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUMKbrYwS+8JcIy2XLjlDTJwZQnNYgZ9igLWTRDqnXBBA20otJuwvrj F/V28AcbQZHR9DlnBdpkEhR7h+LeXmJbqB5rIDK7M7Y43BHn+c1ulFnanuOfyH/9 N5JKxMsHIkYCmkGliDSH1xjHK2l8qPimqvKZ2GpronLIpuPWSbuFd8tkCY8no7Mn efeHHupNdYQGLVOn9HGQ0BRkz6V+PKvkxpJ/nYJwGrpP1hi35cM0YaEUz01m5Me0 xb5AThGLO0s4cNGr7sPEgmnRBY+cbiHzGlPisKbZAQ5b+Lzkat23Gn+0ZTd99Q5n pkelT3FOSXlO3j6dEb2M34WQBu9JM98= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:48 2025 by rpki-client