$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c5fcddee-ed66-3163-8582-7aae1498a8b2.roa File: c5fcddee-ed66-3163-8582-7aae1498a8b2.roa (raw, json) Hash identifier: 5TTXW//nAekKvWhk2wZn7oeTGeOBZspCM29EWyO7XWE= Subject key identifier: 88:11:B6:AE:A1:23:90:1D:A8:28:04:83:43:1C:81:6A:08:0F:CB:42 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4BA29BB4B2DE41E4C22C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c5fcddee-ed66-3163-8582-7aae1498a8b2.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 166.88.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:ba:29:bb:4b:2d:e4:1e:4c:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=d2a8d129-cb1f-47a7-82ce-bf679b852590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:4b:f8:0f:ec:6a:5f:d5:6d:52:88:aa:40: 9a:13:8c:95:12:e3:a3:a8:3f:3a:99:f9:b2:23:6d: b9:a2:6d:09:62:83:1d:10:c7:45:43:06:d1:53:66: a3:91:a4:ac:3c:c1:f7:a6:ef:0a:22:21:29:52:54: ea:7b:96:70:fb:5b:be:67:92:0f:0e:1f:00:5c:d1: 05:6e:98:91:b8:62:8d:48:75:03:2a:67:a1:15:74: 34:da:9e:8b:88:87:38:b9:3c:30:bc:88:04:36:9f: 1d:19:cb:87:62:12:f5:74:35:98:12:af:2a:0a:c2: ce:18:8e:8d:8d:a1:14:67:b8:ed:f3:77:d3:7a:79: f9:60:c2:9b:52:dc:b4:18:99:72:c8:87:25:32:77: 8d:51:c7:7f:2d:70:2b:10:ba:02:2b:96:2a:f8:13: b3:5a:1c:6c:14:cd:66:81:a7:01:53:f0:ae:d7:5f: bd:99:5b:30:82:b6:09:dd:17:41:32:7b:29:2e:ac: 11:4e:5e:74:73:dd:8c:8f:c5:5b:a7:66:f7:e7:4b: 38:2a:7d:95:cf:dd:fa:40:06:ee:cb:42:03:05:1b: 0d:ae:ef:25:39:f4:cb:3a:31:df:68:25:13:b5:53: 6b:64:10:a1:d4:4f:31:59:1c:cf:af:e8:9e:ec:ff: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:11:B6:AE:A1:23:90:1D:A8:28:04:83:43:1C:81:6A:08:0F:CB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c5fcddee-ed66-3163-8582-7aae1498a8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:16:0d:a7:3a:c4:04:66:9b:13:08:b3:a1:5c:fc:70:27:94: 06:80:8f:db:2c:12:06:61:6a:3a:aa:35:26:cc:ec:4e:f1:5f: 8f:fc:9c:78:8f:9d:be:3b:b0:f5:fa:8d:52:c0:24:fa:b0:15: 81:47:f4:53:fd:9c:35:e6:c6:ea:9f:89:7a:7c:87:02:82:48: c3:e1:ac:b5:84:8b:45:97:1d:5f:3a:fe:8e:63:79:8f:5b:f2: 83:9c:aa:08:2e:70:7c:00:b9:76:14:b5:d3:ff:25:5c:30:66: ec:da:6c:f6:f6:e3:38:fc:41:0f:51:00:33:60:0f:d9:37:cc: c9:b3:11:96:15:40:e1:50:cd:51:b6:aa:ed:77:66:b5:d6:1f: da:ea:1a:27:d7:35:bd:a1:30:7c:3c:10:0b:e2:95:28:af:ca: 6d:2f:77:ee:41:20:cc:8f:18:1a:20:41:98:35:87:84:19:10: 94:9b:04:28:f4:b9:57:c6:9d:f7:71:43:b2:3e:09:84:97:cd: de:c2:4e:86:39:9a:b0:c1:f7:37:bf:88:47:90:3d:69:29:5b: db:44:54:8a:8d:07:de:4d:31:3f:23:09:48:ab:18:95:fe:48: b5:6d:71:90:27:47:b6:a5:a9:ed:52:23:c2:7b:c1:12:37:16: fb:fa:d8:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLopu0st5B5MIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDJhOGQxMjktY2IxZi00N2E3LTgyY2UtYmY2NzliODUyNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xL+A/sal/VbVKIqkCaE4yVEuOjqD86mfmy I225om0JYoMdEMdFQwbRU2ajkaSsPMH3pu8KIiEpUlTqe5Zw+1u+Z5IPDh8AXNEF bpiRuGKNSHUDKmehFXQ02p6LiIc4uTwwvIgENp8dGcuHYhL1dDWYEq8qCsLOGI6N jaEUZ7jt83fTenn5YMKbUty0GJlyyIclMneNUcd/LXArELoCK5Yq+BOzWhxsFM1m gacBU/Cu11+9mVswgrYJ3RdBMnspLqwRTl50c92Mj8Vbp2b350s4Kn2Vz936QAbu y0IDBRsNru8lOfTLOjHfaCUTtVNrZBCh1E8xWRzPr+ie7P/wSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgRtq6hI5AdqCgEg0McgWoID8tCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzVmY2RkZWUtZWQ2Ni0z MTYzLTg1ODItN2FhZTE0OThhOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4WDac6xARmmxMIs6Fc/HAnlAaAj9ssEgZhajqqNSbM7E7xX4/8nHiP nb47sPX6jVLAJPqwFYFH9FP9nDXmxuqfiXp8hwKCSMPhrLWEi0WXHV86/o5jeY9b 8oOcqggucHwAuXYUtdP/JVwwZuzabPb24zj8QQ9RADNgD9k3zMmzEZYVQOFQzVG2 qu13ZrXWH9rqGifXNb2hMHw8EAvilSivym0vd+5BIMyPGBogQZg1h4QZEJSbBCj0 uVfGnfdxQ7I+CYSXzd7CToY5mrDB9ze/iEeQPWkpW9tEVIqNB95NMT8jCUirGJX+ SLVtcZAnR7alqe1SI8J7wRI3Fvv62OY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:06:51 2025 by rpki-client