$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa File: c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa (raw, json) Hash identifier: QFdIW1bsfPj/lLEKLRzRSCUl1++SgNep6BoP+N5Prfo= Subject key identifier: D2:99:46:1C:46:C8:50:E3:32:88:77:53:9E:AB:4C:53:5E:15:37:38 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498CFF28A0FCFE70168EFBE478 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 26383 IP address blocks: 166.88.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:28:a0:fc:fe:70:16:8e:fb:e4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=c4622b15-07d9-4378-8919-49df525d98b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:cb:f7:82:37:2e:62:d4:32:52:1a:a2:b0: 69:69:07:8a:c3:ba:60:82:b7:2b:cf:66:5d:ed:2d: da:aa:ae:74:48:56:4a:f6:b0:79:f4:f9:09:e2:51: a5:fc:fe:2a:c9:e7:3a:7f:1e:c0:dc:f1:ba:96:2c: 03:e1:d7:c6:5e:96:2f:3c:13:f4:67:e7:7a:d1:1a: 0a:6e:d2:13:d2:49:a9:e2:2d:80:8d:f7:f2:a7:06: 6b:a2:e7:fc:5d:e0:d4:98:eb:df:0d:72:41:5d:d4: 70:c0:1a:47:05:d5:61:3e:55:08:24:15:05:34:94: c2:f7:e8:2c:93:9f:f1:de:f9:88:44:91:9f:58:91: 5d:4d:4b:b6:d9:3e:e9:6d:36:8e:ee:c7:d4:7b:36: 4e:8d:44:7a:17:0f:05:ff:fd:2a:fc:61:b7:8e:f5: e2:17:3f:6d:95:60:6e:09:c9:33:bf:83:35:01:b5: d6:24:dc:c7:3e:f4:a3:5b:aa:1f:e2:fb:b1:8e:56: 08:7a:a0:25:81:44:df:5e:31:fa:c4:a7:a0:c9:56: 74:cf:c6:ca:f4:37:29:ad:c2:c0:e8:64:f7:71:a9: 59:98:69:e8:27:49:5f:84:15:3e:8a:9e:ef:7b:32: 8b:7c:44:1a:4c:ce:d8:5a:26:dd:e5:65:65:13:78: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:99:46:1C:46:C8:50:E3:32:88:77:53:9E:AB:4C:53:5E:15:37:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7b:6e:aa:a5:a2:ab:ad:35:e9:cd:d0:12:34:05:f2:0c:10: b0:c9:46:89:f7:05:70:82:94:a0:86:32:44:98:63:7c:02:39: 15:a2:95:13:25:e4:c0:fc:c8:7c:f2:4e:37:45:e1:5d:31:dc: 1e:a1:c8:19:d2:5f:14:1d:24:a9:fc:3e:b1:7d:3c:2e:b8:d6: eb:b3:33:62:4a:b5:46:e8:c2:ff:6c:4e:6b:2d:ba:df:a9:12: 11:0b:58:15:65:89:00:0c:9e:69:96:d8:99:ea:fc:ac:30:42: d9:41:d5:55:14:15:9c:14:77:fe:c3:92:06:41:9a:10:62:ae: 4f:d2:40:7f:33:72:86:3d:93:dc:c4:97:46:91:87:12:e7:27: c8:3d:b9:78:b6:f0:58:4f:3a:70:1a:fd:a5:0e:0f:b3:31:b0: 78:a7:4c:93:a4:30:a9:c8:e4:69:25:d6:91:23:f1:83:8c:d6: 1f:d5:71:f9:44:46:7f:a6:f0:b2:ec:c0:ad:50:9a:10:91:ee: 69:62:ef:12:8e:93:60:df:51:6d:77:cc:7c:54:69:a7:3d:99: 5e:f6:7e:02:f2:19:d2:5e:55:ff:14:64:89:82:88:d0:b1:e4: 45:d4:d4:8d:c1:3c:21:8e:51:6e:a2:f4:f7:e8:5c:fb:b2:da: 58:c8:b1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/yig/P5wFo775HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YzQ2MjJiMTUtMDdkOS00Mzc4LTg5MTktNDlkZjUyNWQ5OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJHL94I3LmLUMlIaorBpaQeKw7pggrcrz2Zd 7S3aqq50SFZK9rB59PkJ4lGl/P4qyec6fx7A3PG6liwD4dfGXpYvPBP0Z+d60RoK btIT0kmp4i2AjffypwZrouf8XeDUmOvfDXJBXdRwwBpHBdVhPlUIJBUFNJTC9+gs k5/x3vmIRJGfWJFdTUu22T7pbTaO7sfUezZOjUR6Fw8F//0q/GG3jvXiFz9tlWBu Cckzv4M1AbXWJNzHPvSjW6of4vuxjlYIeqAlgUTfXjH6xKegyVZ0z8bK9DcprcLA 6GT3calZmGnoJ0lfhBU+ip7vezKLfEQaTM7YWibd5WVlE3iDYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKZRhxGyFDjMoh3U56rTFNeFTc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzE2MDdmZDctYjY4ZS0z YWQ5LWFlM2YtYTg3YzY2NzMxNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF7bqqloqutNenN0BI0BfIMELDJRon3BXCClKCGMkSYY3wCORWilRMl 5MD8yHzyTjdF4V0x3B6hyBnSXxQdJKn8PrF9PC641uuzM2JKtUbowv9sTmstut+p EhELWBVliQAMnmmW2Jnq/KwwQtlB1VUUFZwUd/7DkgZBmhBirk/SQH8zcoY9k9zE l0aRhxLnJ8g9uXi28FhPOnAa/aUOD7MxsHinTJOkMKnI5Gkl1pEj8YOM1h/VcflE Rn+m8LLswK1QmhCR7mli7xKOk2DfUW13zHxUaac9mV72fgLyGdJeVf8UZImCiNCx 5EXU1I3BPCGOUW6i9PfoXPuy2ljIsTA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:53 2025 by rpki-client