$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa File: c9e18a32-4601-37f5-94a7-644a3acf1734.roa (raw, json) Hash identifier: AD1tuu+/eEdH2Jy8MZY+b4MQg41gsrOS/FRCtfOH1bE= Subject key identifier: 5C:FC:F4:3C:3F:65:A2:9F:56:A3:11:55:31:51:23:70:B8:6E:07:B3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B8C7BAEDAF5F8B846040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 166.88.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b8:c7:ba:ed:af:5f:8b:84:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=65cac5b4-91da-4342-a1e2-5fc3d76bd156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:41:0f:d1:b8:de:b9:c0:ee:3d:2b:78:b5: cd:92:bb:d5:df:32:b0:e9:6b:6e:29:41:58:18:16: ea:5b:c2:0e:d6:9e:83:85:d0:69:34:fa:43:63:17: b6:a1:18:cf:d0:20:80:6f:21:8c:ef:5d:f3:62:56: 3f:4b:60:78:58:e1:9d:66:33:b8:21:43:e2:18:95: 6d:83:59:e2:95:8a:d2:84:34:8e:dd:fd:1c:80:b5: 16:d1:72:24:77:4e:f9:98:85:22:e0:af:b0:70:3c: 8e:78:3b:ba:e3:6a:7e:69:78:e4:1a:a2:80:2e:85: 0f:5b:c3:9c:f8:cb:30:91:62:bd:2f:82:6f:9b:5c: 05:0f:00:be:71:14:7b:ac:1f:1b:fa:e3:61:76:3a: 37:0b:57:8b:04:fe:00:d4:da:41:bd:90:f9:22:c6: 0b:7e:a5:b2:d7:14:c2:3b:fc:91:20:aa:46:bb:5c: 6c:99:81:70:32:fb:72:4c:41:9e:a8:55:02:b0:3e: ac:ba:0d:b7:d0:69:d0:df:91:2a:e2:bc:45:5c:6b: 56:e3:7c:75:8e:5e:c9:e9:b8:6c:ad:7b:64:fd:cc: 2f:8e:1a:a5:24:e2:6a:67:b0:e2:df:d7:b9:55:17: ec:77:3d:4b:ee:dd:75:25:01:57:30:d8:14:c9:5a: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FC:F4:3C:3F:65:A2:9F:56:A3:11:55:31:51:23:70:B8:6E:07:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:58:c5:bd:cd:34:04:7b:5a:dc:af:b2:91:1c:15:fe:a4:3b: 7c:4d:fa:42:9e:19:d3:eb:44:dc:1d:d6:a7:8a:07:ea:c2:63: 0f:a6:16:70:51:8c:df:92:3f:40:3e:46:b5:f9:5f:fa:a6:0b: 80:40:f0:05:c9:d4:c1:9f:2d:df:18:77:fe:f8:5b:dc:58:6e: 11:70:c9:6e:56:ce:7a:3c:d2:1b:c6:65:c0:d1:a4:f3:56:ee: 11:b1:66:a3:fa:58:2c:a2:ec:0f:b3:c8:d1:b5:04:f1:44:03: 53:b5:a5:3d:8b:c6:2b:e2:fe:f2:b2:9a:71:6b:a8:db:99:0b: d4:8d:cb:7f:4b:0a:7e:c9:bd:fa:0b:b1:bc:45:b0:92:a6:57: 96:e8:d8:7c:30:82:ad:47:59:6c:26:d6:57:cd:0c:bd:80:dc: 42:36:eb:b0:40:2c:67:05:7e:b4:ec:0b:0d:da:17:1a:bc:9f: 6b:2b:cb:04:63:de:89:4c:83:17:66:94:e5:73:33:b1:58:ad: 0f:2c:e8:51:b1:cd:be:0d:4f:85:dd:c6:cd:a3:a1:c2:f8:91: 05:86:5c:b4:2d:ff:ab:61:e4:08:61:68:a7:69:55:e0:ac:c1: 93:d8:21:d7:df:a7:5c:ea:3b:b9:3b:7a:95:2b:8c:cc:f1:43: 49:be:94:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLjHuu2vX4uEYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NjVjYWM1YjQtOTFkYS00MzQyLWExZTItNWZjM2Q3NmJkMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuNBD9G43rnA7j0reLXNkrvV3zKw6WtuKUFY GBbqW8IO1p6DhdBpNPpDYxe2oRjP0CCAbyGM713zYlY/S2B4WOGdZjO4IUPiGJVt g1nilYrShDSO3f0cgLUW0XIkd075mIUi4K+wcDyOeDu642p+aXjkGqKALoUPW8Oc +MswkWK9L4Jvm1wFDwC+cRR7rB8b+uNhdjo3C1eLBP4A1NpBvZD5IsYLfqWy1xTC O/yRIKpGu1xsmYFwMvtyTEGeqFUCsD6sug230GnQ35Eq4rxFXGtW43x1jl7J6bhs rXtk/cwvjhqlJOJqZ7Di39e5VRfsdz1L7t11JQFXMNgUyVrT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz89Dw/ZaKfVqMRVTFRI3C4bgezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzllMThhMzItNDYwMS0z N2Y1LTk0YTctNjQ0YTNhY2YxNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJYxb3NNAR7WtyvspEcFf6kO3xN+kKeGdPrRNwd1qeKB+rCYw+mFnBR jN+SP0A+RrX5X/qmC4BA8AXJ1MGfLd8Yd/74W9xYbhFwyW5Wzno80hvGZcDRpPNW 7hGxZqP6WCyi7A+zyNG1BPFEA1O1pT2Lxivi/vKymnFrqNuZC9SNy39LCn7JvfoL sbxFsJKmV5bo2Hwwgq1HWWwm1lfNDL2A3EI267BALGcFfrTsCw3aFxq8n2srywRj 3olMgxdmlOVzM7FYrQ8s6FGxzb4NT4Xdxs2jocL4kQWGXLQt/6th5AhhaKdpVeCs wZPYIdffp1zqO7k7epUrjMzxQ0m+lEY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:06 2025 by rpki-client