$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa File: d5816c95-27da-3909-a321-ada4bf2376a3.roa (raw, json) Hash identifier: NsVtPdaLOeSe6scdEUDk8p6jdJB79H3F6JlQMJClFCI= Subject key identifier: 7A:10:26:2E:15:8E:E5:7A:AE:15:69:73:9A:44:1D:93:C2:C2:0A:3B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A5DFB43FD88589775980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a5:df:b4:3f:d8:85:89:77:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=33c1f1b9-426b-4c48-8743-5269edd2af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:82:b4:d2:04:6e:84:a3:cb:31:c1:33:dd: 65:0d:f3:50:6e:9b:25:b4:fe:1c:3f:bb:8e:85:e7: 22:bb:2d:c4:c6:a5:d3:3c:ac:5e:3c:7c:6e:1a:ba: df:d1:90:aa:9e:98:27:50:f7:7d:c1:52:b7:b3:62: 69:7b:ae:76:9f:ec:36:4f:eb:8a:7d:6e:0a:b8:17: 38:3b:29:d5:d6:60:27:ab:c6:ca:4c:d2:ee:45:52: eb:77:cd:c6:bd:00:1a:83:1f:a2:92:7f:ec:48:b9: 26:8f:d3:56:97:5a:07:a4:08:c3:0f:62:61:d6:4a: 74:d1:86:93:46:09:60:78:df:da:06:7f:46:6a:60: 10:5a:d4:96:49:00:8b:c2:a5:df:71:5a:52:c1:98: db:49:34:4d:c8:1b:b4:7f:b6:4a:a7:23:71:63:db: 76:4d:9e:39:55:e4:94:de:ae:d5:2e:d4:2b:91:f4: 32:d4:34:ef:db:4d:6e:79:f9:f0:37:a7:82:dc:58: f8:8e:5b:07:60:84:f3:e9:5f:03:98:67:55:92:1d: d6:88:c7:92:a4:14:e5:bf:74:81:97:d1:27:2d:c3: b2:9d:8a:5a:b1:f3:f6:aa:03:be:35:f2:12:03:de: 58:2a:7c:93:e8:70:ca:cb:93:9c:da:b8:78:6b:b9: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:10:26:2E:15:8E:E5:7A:AE:15:69:73:9A:44:1D:93:C2:C2:0A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5816c95-27da-3909-a321-ada4bf2376a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0b:57:b2:62:71:42:66:1c:8b:e1:5f:00:4f:a2:61:e7:f5: 7e:d9:cb:6d:f5:7c:a0:db:28:33:a9:45:98:1e:36:b6:fc:0f: 9e:3d:2f:91:f6:16:d5:a4:9c:0f:d4:8f:ce:e4:4b:dd:dd:4c: e7:7d:10:e3:e3:e5:42:8c:91:dd:18:80:d4:9b:68:cb:ae:cd: 9c:01:a6:58:56:fb:d9:c0:61:d8:b2:26:ad:fd:ba:cf:14:bf: 9f:0a:b5:2c:96:b5:eb:d8:e4:f7:f6:a9:65:43:e8:a0:47:c3: 02:bc:31:e3:7b:4e:51:db:42:d1:50:96:b9:f8:25:84:01:22: 2c:48:b5:f5:b3:01:f5:8a:a8:e9:11:dd:0f:41:49:bc:09:d8: c8:01:4f:6d:15:25:86:43:a1:a9:1d:5e:40:0d:d7:b0:f1:94: e2:ee:a0:a4:90:a4:8b:87:64:dd:ef:5a:e2:49:4c:91:e7:9b: 73:cb:03:de:bc:cd:bd:56:82:1d:8a:3b:d7:35:27:62:4c:52: 40:8e:73:14:3f:8d:b0:32:6f:ee:35:bb:f6:ae:fd:39:27:f0: 9b:61:67:23:db:df:73:c2:d3:3c:82:55:89:e9:48:51:7d:3c: 1b:5b:e7:54:45:7e:fa:5e:ef:1b:e5:a9:ff:62:39:c7:95:b7: d7:1b:01:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKXftD/YhYl3WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzNjMWYxYjktNDI2Yi00YzQ4LTg3NDMtNTI2OWVkZDJhZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpWCtNIEboSjyzHBM91lDfNQbpsltP4cP7uO heciuy3ExqXTPKxePHxuGrrf0ZCqnpgnUPd9wVK3s2Jpe652n+w2T+uKfW4KuBc4 OynV1mAnq8bKTNLuRVLrd83GvQAagx+ikn/sSLkmj9NWl1oHpAjDD2Jh1kp00YaT RglgeN/aBn9GamAQWtSWSQCLwqXfcVpSwZjbSTRNyBu0f7ZKpyNxY9t2TZ45VeSU 3q7VLtQrkfQy1DTv201uefnwN6eC3Fj4jlsHYITz6V8DmGdVkh3WiMeSpBTlv3SB l9EnLcOynYpasfP2qgO+NfISA95YKnyT6HDKy5Oc2rh4a7mejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoQJi4VjuV6rhVpc5pEHZPCwgo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDU4MTZjOTUtMjdkYS0z OTA5LWEzMjEtYWRhNGJmMjM3NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4LV7JicUJmHIvhXwBPomHn9X7Zy231fKDbKDOpRZgeNrb8D549L5H2 FtWknA/Uj87kS93dTOd9EOPj5UKMkd0YgNSbaMuuzZwBplhW+9nAYdiyJq39us8U v58KtSyWtevY5Pf2qWVD6KBHwwK8MeN7TlHbQtFQlrn4JYQBIixItfWzAfWKqOkR 3Q9BSbwJ2MgBT20VJYZDoakdXkAN17DxlOLuoKSQpIuHZN3vWuJJTJHnm3PLA968 zb1Wgh2KO9c1J2JMUkCOcxQ/jbAyb+41u/au/Tkn8JthZyPb33PC0zyCVYnpSFF9 PBtb51RFfvpe7xvlqf9iOceVt9cbAZc= -----END CERTIFICATE-----Generated at Mon Apr 28 09:10:27 2025 by rpki-client