$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d11998c5-52fe-3f24-83b2-34def83e2694.roa File: d11998c5-52fe-3f24-83b2-34def83e2694.roa (raw, json) Hash identifier: phY7q7UZ+edRbKvtoHmGnO/sl7EuN9p9lt8LHYXWsLU= Subject key identifier: 98:82:5D:6E:B9:38:80:34:7E:9D:9F:B2:52:C7:EE:90:95:5F:A0:3D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A545BFD13653EF2C1400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d11998c5-52fe-3f24-83b2-34def83e2694.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a5:45:bf:d1:36:53:ef:2c:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=50428c59-eb45-48b5-952d-b9bf77c5d75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:2e:f5:5b:72:07:e0:d0:8b:09:f9:22:73: 40:1f:30:15:74:f0:30:37:69:38:6c:e3:ed:01:05: a9:77:d2:34:00:e9:9c:71:ab:b2:8b:1e:7f:82:45: 55:4d:4c:a5:ff:91:45:c2:7f:98:3c:04:ed:f6:cd: b8:a4:07:42:68:96:74:fb:35:73:86:5d:d7:8f:42: ad:8c:f7:3b:3e:3a:03:da:1d:25:45:53:07:c3:a6: 55:95:45:da:65:0b:6c:9e:7d:3d:73:73:65:20:50: bf:09:54:b0:a8:69:4e:0b:1c:88:54:ec:b7:49:4a: 39:71:70:6e:77:52:a1:43:57:60:50:3d:e7:e8:0f: 66:f2:19:2d:b0:f6:67:91:af:c1:47:ab:ce:22:39: 67:7e:85:06:60:fa:fa:8c:8e:f9:28:ce:49:64:3c: 40:58:40:bb:f6:a7:f7:8c:2a:a6:08:ce:ab:8a:ab: de:9f:e3:b9:c0:46:20:aa:89:5f:20:13:92:d2:57: f2:14:14:46:52:d6:80:59:a1:d2:05:74:cf:89:28: 4e:65:dd:1d:b9:b1:92:a2:4b:41:26:5c:b1:e9:de: c7:a7:8d:43:c4:75:1f:01:ff:7f:74:37:b7:6d:84: cc:e9:c4:31:fb:16:90:dd:2b:cb:d5:83:fc:1f:8b: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:5D:6E:B9:38:80:34:7E:9D:9F:B2:52:C7:EE:90:95:5F:A0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d11998c5-52fe-3f24-83b2-34def83e2694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:72:45:c8:22:74:d5:92:cd:14:ff:e3:f6:76:57:47:2e:7a: 8b:5f:a4:8b:ab:52:42:e2:ef:bd:3e:36:d2:83:7f:66:23:f9: 0a:fe:cf:21:95:91:0a:68:eb:6a:fd:4f:d2:e7:3e:d8:5b:27: fc:a7:21:3a:a8:f4:64:f1:d8:66:64:cb:6f:b7:b3:20:42:f6: f8:4e:17:14:c3:f4:c5:37:6a:34:74:3f:6f:cb:ae:e8:21:fb: 1e:7a:d3:56:15:f8:31:a8:dc:84:39:7a:9f:5f:aa:29:b0:5c: 01:da:b9:27:4f:2a:9f:15:58:41:6a:db:67:97:f8:1e:66:07: 37:1b:c5:7f:ac:46:b1:db:a0:c5:ba:6c:67:08:9d:9a:30:90: 51:a0:93:f7:8e:28:57:82:89:72:0d:ce:0a:b7:ef:50:b2:fa: 96:10:69:0a:1f:77:08:44:d5:76:95:e2:0c:9f:f3:48:7c:b2: 6a:78:f7:05:cb:40:c7:61:f0:9d:c0:93:cd:32:83:8b:57:00: ee:4c:3d:96:bd:b1:c2:1c:3c:33:fc:4e:61:8e:59:0a:02:51: d9:dc:77:ac:cf:d3:09:62:9b:a7:90:0c:8e:21:96:6f:03:a9: 66:a3:a5:31:97:68:7f:8b:65:76:e3:00:8b:0d:a9:8d:ff:6d: c5:32:0e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKVFv9E2U+8sFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NTA0MjhjNTktZWI0NS00OGI1LTk1MmQtYjliZjc3YzVkNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnou9VtyB+DQiwn5InNAHzAVdPAwN2k4bOPt AQWpd9I0AOmccauyix5/gkVVTUyl/5FFwn+YPATt9s24pAdCaJZ0+zVzhl3Xj0Kt jPc7PjoD2h0lRVMHw6ZVlUXaZQtsnn09c3NlIFC/CVSwqGlOCxyIVOy3SUo5cXBu d1KhQ1dgUD3n6A9m8hktsPZnka/BR6vOIjlnfoUGYPr6jI75KM5JZDxAWEC79qf3 jCqmCM6riqven+O5wEYgqolfIBOS0lfyFBRGUtaAWaHSBXTPiShOZd0dubGSoktB Jlyx6d7Hp41DxHUfAf9/dDe3bYTM6cQx+xaQ3SvL1YP8H4s8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiCXW65OIA0fp2fslLH7pCVX6A9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDExOTk4YzUtNTJmZS0z ZjI0LTgzYjItMzRkZWY4M2UyNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACByRcgidNWSzRT/4/Z2V0cueotfpIurUkLi770+NtKDf2Yj+Qr+zyGV kQpo62r9T9LnPthbJ/ynITqo9GTx2GZky2+3syBC9vhOFxTD9MU3ajR0P2/Lrugh +x5601YV+DGo3IQ5ep9fqimwXAHauSdPKp8VWEFq22eX+B5mBzcbxX+sRrHboMW6 bGcInZowkFGgk/eOKFeCiXINzgq371Cy+pYQaQofdwhE1XaV4gyf80h8smp49wXL QMdh8J3Ak80yg4tXAO5MPZa9scIcPDP8TmGOWQoCUdncd6zP0wlim6eQDI4hlm8D qWajpTGXaH+LZXbjAIsNqY3/bcUyDo0= -----END CERTIFICATE-----Generated at Sun Apr 27 15:54:25 2025 by rpki-client