$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efd82925-dc77-36ff-8a4f-97a6e0ad6c09.roa File: efd82925-dc77-36ff-8a4f-97a6e0ad6c09.roa (raw, json) Hash identifier: HZG3DQOusdQQ03JtkObN4Vk0pH5smG3a3FXDTD60U3s= Subject key identifier: 38:43:E5:94:0B:C8:C1:56:19:9C:B9:50:EF:74:C5:C2:FD:11:B7:2C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B813383A569EDAEF8580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efd82925-dc77-36ff-8a4f-97a6e0ad6c09.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 166.88.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b8:13:38:3a:56:9e:da:ef:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=765f6cd0-5efc-4d9a-9169-5e51ebb9e299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:bc:36:9f:22:fb:c7:1a:04:c1:4b:70:11: 47:7d:7a:59:73:d0:ff:f2:8a:b6:99:e7:7d:28:d3: 80:c4:ed:ef:97:c6:1e:24:21:8d:f9:ba:87:f5:62: dd:a3:e4:42:c5:f2:78:08:dc:35:10:f3:36:a4:6f: 1e:12:14:16:91:94:b8:80:bc:d1:ae:c1:be:59:20: 67:4d:d3:44:f5:93:a7:71:12:69:53:3c:c2:4d:39: bb:ea:e3:02:73:fe:93:8c:f1:67:d6:c6:97:bd:3d: 8e:14:91:c7:4f:ba:94:31:ed:03:60:ce:d7:32:a0: 5b:ff:01:88:25:7c:cc:77:a6:8e:65:8a:c2:c5:8a: af:5f:9e:5d:28:58:3c:6d:f9:28:d6:ac:89:30:09: 23:a8:e3:ef:b4:01:d9:b7:db:6d:d7:4b:29:11:2d: b9:b3:fa:6c:27:e4:f2:67:46:72:d3:52:b4:ca:0e: b5:59:76:35:e6:c0:d2:9a:6e:b5:d8:95:7f:ae:6b: b2:82:9e:d3:1a:34:70:dd:87:5f:a6:ab:ca:c7:47: 24:4b:ee:f5:21:d1:3e:02:20:32:ac:14:8f:5b:52: 6b:1f:46:d0:06:a1:c2:33:d7:aa:b0:bf:ec:fa:57: 36:fa:d6:02:ff:07:cd:db:77:99:90:49:33:8e:51: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:E5:94:0B:C8:C1:56:19:9C:B9:50:EF:74:C5:C2:FD:11:B7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efd82925-dc77-36ff-8a4f-97a6e0ad6c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d9:54:e8:35:d1:b1:b7:b0:a1:38:bd:61:8a:ae:73:6b:1b: 12:09:36:81:df:6c:10:2f:4b:36:25:f2:3a:e3:df:6a:8a:de: 99:ef:b8:fa:77:81:69:d1:84:20:0b:4a:6b:78:ed:ec:ea:b6: 99:4f:12:27:bd:2c:dd:f5:92:66:d6:1a:e1:fd:f2:b3:fd:3b: ca:a5:26:e5:02:e3:ac:1f:19:15:57:fc:1d:d5:61:ff:2c:f0: 69:09:b9:12:18:d8:dc:0e:8a:54:b2:20:1a:80:30:f4:2c:1f: d7:4e:80:1c:06:fe:02:43:0c:fc:9e:e0:81:dc:29:59:d3:d9: 6d:a6:a4:c2:1f:db:53:1a:ed:6b:bf:a2:2d:ef:df:7d:4b:aa: b8:89:87:3d:d7:75:38:77:24:d3:d5:14:46:30:5d:e1:d8:88: 04:44:99:dc:c7:d5:0f:b3:3f:ae:75:6f:f1:3f:e4:61:b3:4a: ae:4f:c1:99:7b:4b:e8:b4:c6:d5:6e:62:63:42:a9:f0:78:55: 02:78:dc:5b:c5:ed:9f:3c:1b:6a:67:d6:40:42:9e:e7:1c:59: 2f:df:9d:a8:09:0d:21:50:4f:2e:93:92:a3:24:09:e2:13:75: 40:2e:43:ce:5c:ee:e7:e0:c6:04:d5:9e:8d:9c:d8:78:cf:7b: 18:89:e5:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLgTODpWntrvhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NzY1ZjZjZDAtNWVmYy00ZDlhLTkxNjktNWU1MWViYjllMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU+8Np8i+8caBMFLcBFHfXpZc9D/8oq2med9 KNOAxO3vl8YeJCGN+bqH9WLdo+RCxfJ4CNw1EPM2pG8eEhQWkZS4gLzRrsG+WSBn TdNE9ZOncRJpUzzCTTm76uMCc/6TjPFn1saXvT2OFJHHT7qUMe0DYM7XMqBb/wGI JXzMd6aOZYrCxYqvX55dKFg8bfko1qyJMAkjqOPvtAHZt9tt10spES25s/psJ+Ty Z0Zy01K0yg61WXY15sDSmm612JV/rmuygp7TGjRw3YdfpqvKx0ckS+71IdE+AiAy rBSPW1JrH0bQBqHCM9eqsL/s+lc2+tYC/wfN23eZkEkzjlEsKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhD5ZQLyMFWGZy5UO90xcL9EbcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWZkODI5MjUtZGM3Ny0z NmZmLThhNGYtOTdhNmUwYWQ2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplglMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjZVOg10bG3sKE4vWGKrnNrGxIJNoHfbBAvSzYl8jrj32qK3pnvuPp3 gWnRhCALSmt47ezqtplPEie9LN31kmbWGuH98rP9O8qlJuUC46wfGRVX/B3VYf8s 8GkJuRIY2NwOilSyIBqAMPQsH9dOgBwG/gJDDPye4IHcKVnT2W2mpMIf21Ma7Wu/ oi3v331LqriJhz3XdTh3JNPVFEYwXeHYiAREmdzH1Q+zP651b/E/5GGzSq5PwZl7 S+i0xtVuYmNCqfB4VQJ43FvF7Z88G2pn1kBCnuccWS/fnagJDSFQTy6TkqMkCeIT dUAuQ85c7ufgxgTVno2c2HjPexiJ5W4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:24 2025 by rpki-client