$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0257e50-f066-3d91-a9e9-034d421f2b3e.roa File: d0257e50-f066-3d91-a9e9-034d421f2b3e.roa (raw, json) Hash identifier: cBw+dApiAgJ/XWEcR3NVY0uJLrOjFC6SLUylSl8nAmo= Subject key identifier: 3E:43:B9:75:12:E7:98:66:C2:65:3A:C8:1A:AB:A0:D1:0F:A7:5B:D1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B930EAA08735AFF15180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0257e50-f066-3d91-a9e9-034d421f2b3e.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 166.88.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:30:ea:a0:87:35:af:f1:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=bce415eb-3348-459d-98de-a2eb4e7c6da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:c1:29:f4:58:f1:44:0c:4e:9b:9f:a1:6e: 9d:ea:d1:8d:f9:9d:c6:cf:54:83:2b:e0:c6:7c:a7: 7f:f5:84:a7:bd:40:51:e8:01:b9:c8:c4:9b:80:21: 60:e6:a5:80:12:16:20:64:e4:b1:71:c1:03:d1:28: b1:3b:24:85:97:e3:de:0b:ec:4e:06:a8:bb:ca:be: 69:b9:8f:54:b2:ba:23:e8:60:2b:6b:ea:13:5d:43: 81:19:b8:db:f4:fd:6c:c8:86:5f:4e:aa:63:81:aa: 00:6f:8e:f6:7a:36:a2:e5:bb:94:7c:61:f6:78:60: f8:80:89:86:6e:f0:05:fa:63:06:1b:41:cb:9a:40: 77:28:7a:19:47:b2:0a:e8:dd:fb:5e:27:9b:ca:a4: cb:d5:b4:37:de:6b:0e:56:3b:bd:b2:e9:91:49:26: f9:7b:bc:04:39:7a:fe:38:2d:dd:90:87:6b:1c:39: 1e:7e:9b:ba:27:bb:be:45:38:21:c2:48:09:e5:13: 1b:9d:01:f2:6f:4c:d6:7a:0b:d9:95:07:14:57:d7: e0:ea:be:d5:1e:48:41:1b:57:1d:6f:e9:16:b4:11: ff:fb:40:60:b6:45:8a:0f:bc:04:84:78:d0:a8:e7: 35:8b:37:26:f2:8f:0b:fc:ce:10:80:24:6c:46:81: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:B9:75:12:E7:98:66:C2:65:3A:C8:1A:AB:A0:D1:0F:A7:5B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0257e50-f066-3d91-a9e9-034d421f2b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:44:90:5b:9d:1d:8a:89:83:fb:1b:f7:e2:e0:31:7b:42:28: c6:99:56:59:73:9f:7a:69:e7:cb:bd:ff:7d:b5:f2:8d:48:1c: 7c:e9:3f:57:ef:db:87:7e:9f:34:68:f3:0a:15:07:f4:2e:cc: b1:0b:a6:fe:bd:84:2d:bb:d7:d6:4d:71:6c:ab:c2:08:00:72: c3:37:c8:75:37:09:55:59:9f:d8:81:4d:9b:4e:0c:d7:26:76: dd:73:bd:69:75:35:69:d9:02:9e:8a:71:5d:20:25:8f:32:53: f3:d4:7a:40:7d:82:ce:d1:fa:2f:4f:6e:14:f2:0c:6d:05:7a: 2f:4e:6a:71:04:1a:c2:f8:76:ce:56:90:89:b5:79:85:4a:3a: ff:71:f2:1d:0b:f6:6f:c7:4e:c7:81:90:f2:e7:38:fc:aa:e0: 74:5c:db:72:e7:40:0c:a7:61:c2:af:c2:b1:76:73:2b:a5:23: a9:7f:43:3d:a0:2a:0c:41:02:05:e0:e2:6c:2c:1b:dc:df:5d: 22:9b:64:a7:a3:81:95:e5:e5:8a:3d:f4:6a:42:5b:60:f3:91: 0e:84:26:be:0e:bd:d2:55:9d:54:ec:a7:64:b0:3b:03:44:1e: 7b:ec:a8:50:2a:bd:24:70:06:9d:01:e3:e1:c3:9b:e0:09:2f: 0a:da:a5:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLkw6qCHNa/xUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YmNlNDE1ZWItMzM0OC00NTlkLTk4ZGUtYTJlYjRlN2M2ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqfBKfRY8UQMTpufoW6d6tGN+Z3Gz1SDK+DG fKd/9YSnvUBR6AG5yMSbgCFg5qWAEhYgZOSxccED0SixOySFl+PeC+xOBqi7yr5p uY9Usroj6GAra+oTXUOBGbjb9P1syIZfTqpjgaoAb472ejai5buUfGH2eGD4gImG bvAF+mMGG0HLmkB3KHoZR7IK6N37XiebyqTL1bQ33msOVju9sumRSSb5e7wEOXr+ OC3dkIdrHDkefpu6J7u+RTghwkgJ5RMbnQHyb0zWegvZlQcUV9fg6r7VHkhBG1cd b+kWtBH/+0BgtkWKD7wEhHjQqOc1izcm8o8L/M4QgCRsRoEk5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5DuXUS55hmwmU6yBqroNEPp1vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDAyNTdlNTAtZjA2Ni0z ZDkxLWE5ZTktMDM0ZDQyMWYyYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpEkFudHYqJg/sb9+LgMXtCKMaZVllzn3pp58u9/3218o1IHHzpP1fv 24d+nzRo8woVB/QuzLELpv69hC2719ZNcWyrwggAcsM3yHU3CVVZn9iBTZtODNcm dt1zvWl1NWnZAp6KcV0gJY8yU/PUekB9gs7R+i9PbhTyDG0Fei9OanEEGsL4ds5W kIm1eYVKOv9x8h0L9m/HTseBkPLnOPyq4HRc23LnQAynYcKvwrF2cyulI6l/Qz2g KgxBAgXg4mwsG9zfXSKbZKejgZXl5Yo99GpCW2DzkQ6EJr4OvdJVnVTsp2SwOwNE HnvsqFAqvSRwBp0B4+HDm+AJLwrapWs= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:55 2025 by rpki-client