$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8235e80-7dd4-37ad-8945-3099fa8b9654.roa File: d8235e80-7dd4-37ad-8945-3099fa8b9654.roa (raw, json) Hash identifier: YTWkaeXlfqJSu1vDw5HmPErneHEF+4EgJPOtbLqREf4= Subject key identifier: 29:BC:F2:86:06:90:C5:93:07:B3:D7:34:26:EB:82:36:4E:65:BF:84 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A3B9FFAF5CD142B138F0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8235e80-7dd4-37ad-8945-3099fa8b9654.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a3:b9:ff:af:5c:d1:42:b1:38:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=0be47c3a-2764-4911-bb8f-41223c3c2d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:99:f0:0b:0d:b5:20:4b:ab:4a:09:f5:aa: 14:a8:7b:7f:57:f2:34:99:5d:7b:2a:92:12:c4:30: 59:ac:68:ca:70:47:da:90:7f:46:ae:03:6f:e1:2d: 41:31:11:ab:04:ed:42:3d:3c:e5:ef:93:2f:35:26: df:f9:9e:ce:19:09:79:b6:ff:1d:01:91:24:3a:ac: 58:0a:37:37:b1:c8:6d:48:0b:a0:86:e2:56:f0:9f: 55:f8:58:dd:9e:08:b4:43:13:c3:29:b5:36:53:ed: 16:32:6a:85:18:c3:f5:f9:6f:19:f5:14:ee:99:f3: 44:1f:95:e8:f3:80:1b:b4:81:e7:c1:1c:08:d0:aa: 4c:fa:64:28:cb:a7:f3:e4:ab:e8:bf:22:5c:41:9f: 64:4c:39:36:a8:33:50:3d:f2:e6:2d:df:7b:05:64: 80:30:ad:31:2f:cd:04:27:a9:97:74:fb:91:56:8d: 8c:09:98:9f:a8:29:f6:69:a4:c1:22:85:78:58:6f: d6:23:73:15:f8:e9:36:bb:cf:2f:e5:0d:f0:d3:4e: ed:c0:a1:0b:f3:a9:13:6e:99:48:26:29:46:aa:42: de:97:81:59:02:ff:9a:7b:4e:fe:45:a5:83:78:58: 06:20:35:7c:14:41:1e:f5:07:39:3c:69:4a:3d:00: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:F2:86:06:90:C5:93:07:B3:D7:34:26:EB:82:36:4E:65:BF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8235e80-7dd4-37ad-8945-3099fa8b9654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:32:f0:87:b0:13:e0:ad:20:3d:8b:a2:0d:14:98:ef:e9:db: 7e:5d:51:9a:95:bd:f9:74:93:3a:6c:87:53:c5:78:44:45:9e: b4:87:aa:56:05:a5:53:68:80:10:97:a6:14:0d:a7:48:b7:83: b7:6c:02:97:7a:24:f6:76:2e:90:9f:ac:f7:47:a6:18:a4:c6: 5b:6e:88:f7:72:65:05:c6:11:44:da:83:5f:65:36:59:52:b5: b7:a0:6f:bf:6c:72:55:69:13:c7:a5:df:ae:7b:21:88:8e:10: 4c:ed:e4:56:ed:1d:b3:67:c6:06:2a:4c:d0:9a:7e:d8:a1:b7: 6a:60:fc:cd:4b:72:b1:69:11:2e:2a:83:bf:73:f8:29:ee:e1: 69:2d:ba:76:4b:f1:2d:2a:b6:76:51:b5:96:0e:1c:ab:9d:2a: 85:90:df:02:a4:d9:b8:d9:e5:c5:ca:42:73:1d:e0:ca:c3:47: 20:07:0f:d0:69:20:d5:5e:a3:db:b2:0a:07:be:68:59:68:62: 9b:a4:52:d9:91:97:b8:c5:3f:fd:4c:06:be:42:9f:22:aa:73: 7b:9d:3e:ed:18:90:a0:95:59:5f:84:2d:bf:8b:a8:fc:af:e3: 7d:78:19:f6:f1:6e:18:b0:81:20:76:03:50:17:48:2c:4e:43: f7:d7:f5:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKO5/69c0UKxOPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MGJlNDdjM2EtMjc2NC00OTExLWJiOGYtNDEyMjNjM2MyZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi92Z8AsNtSBLq0oJ9aoUqHt/V/I0mV17KpIS xDBZrGjKcEfakH9GrgNv4S1BMRGrBO1CPTzl75MvNSbf+Z7OGQl5tv8dAZEkOqxY Cjc3schtSAughuJW8J9V+Fjdngi0QxPDKbU2U+0WMmqFGMP1+W8Z9RTumfNEH5Xo 84AbtIHnwRwI0KpM+mQoy6fz5KvovyJcQZ9kTDk2qDNQPfLmLd97BWSAMK0xL80E J6mXdPuRVo2MCZifqCn2aaTBIoV4WG/WI3MV+Ok2u88v5Q3w007twKEL86kTbplI JilGqkLel4FZAv+ae07+RaWDeFgGIDV8FEEe9Qc5PGlKPQBabwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm88oYGkMWTB7PXNCbrgjZOZb+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDgyMzVlODAtN2RkNC0z N2FkLTg5NDUtMzA5OWZhOGI5NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0y8IewE+CtID2Log0UmO/p235dUZqVvfl0kzpsh1PFeERFnrSHqlYF pVNogBCXphQNp0i3g7dsApd6JPZ2LpCfrPdHphikxltuiPdyZQXGEUTag19lNllS tbegb79sclVpE8el3657IYiOEEzt5FbtHbNnxgYqTNCaftiht2pg/M1LcrFpES4q g79z+Cnu4WktunZL8S0qtnZRtZYOHKudKoWQ3wKk2bjZ5cXKQnMd4MrDRyAHD9Bp INVeo9uyCge+aFloYpukUtmRl7jFP/1MBr5CnyKqc3udPu0YkKCVWV+ELb+LqPyv 4314GfbxbhiwgSB2A1AXSCxOQ/fX9cY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:06 2025 by rpki-client