$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa File: fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa (raw, json) Hash identifier: hlP10ilVoW7i5kavO6ezyYurHA0kIV22bQBTxy9xTGg= Subject key identifier: CB:43:04:92:90:05:98:42:CD:49:1C:AC:4D:B6:9F:B9:2F:52:7E:77 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849955F275BEB4FBE18D6423080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 166.88.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:27:5b:eb:4f:be:18:d6:42:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=68dd9626-57a0-4262-9f35-818c91e32620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:25:18:98:51:a1:3e:95:fe:23:14:cb:c6: d0:bb:bb:b0:7c:ea:27:e3:88:65:ce:55:da:4b:c1: 98:3a:f6:f0:65:9d:2a:83:95:45:86:56:83:22:99: ab:f4:e4:b7:00:9f:a9:d0:10:09:96:1c:08:dc:e4: 64:40:63:38:26:d9:70:0e:38:a3:6e:23:48:92:f1: f5:f3:b0:c4:0b:be:5c:84:61:5a:92:18:23:72:61: 50:a9:7a:7d:48:e0:14:ed:5f:3c:ad:89:bb:77:ea: 35:39:68:48:33:9b:f5:cf:e8:f4:57:12:60:58:b9: 8a:9d:4a:b9:cd:ba:d4:c2:09:48:a6:1a:9e:3e:e6: 2e:ab:bf:af:fc:a7:74:a7:46:b7:00:13:cb:a4:84: 2e:cb:9b:a9:aa:9f:81:c5:3f:c9:e5:0d:5b:a7:48: 1b:70:d7:e1:8d:72:f8:1a:a0:5a:bf:b7:07:41:bd: 1a:51:4d:45:11:03:32:fe:ff:0d:eb:70:30:5c:28: 84:ad:1c:0d:49:a1:3f:22:54:e2:cd:08:ce:67:22: a8:4f:df:f6:53:ef:e4:71:d8:e0:80:88:6c:7e:39: bc:ff:b7:21:62:26:8e:9f:2a:6d:67:fd:7b:3b:93: 83:11:63:06:10:cc:7d:bd:5c:bc:7f:a3:26:74:71: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:04:92:90:05:98:42:CD:49:1C:AC:4D:B6:9F:B9:2F:52:7E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fe:6b:19:b2:8e:88:0c:16:62:14:64:80:4e:3f:47:54:84: cd:5b:c0:a1:ef:b3:0e:46:21:78:49:b7:79:e0:c1:d3:7d:e5: b7:91:66:2e:5e:26:a5:fe:83:5e:db:e3:4b:57:8d:55:f8:a9: 1c:6f:ee:33:2f:38:b8:18:5f:19:f8:79:86:ca:9c:fe:12:b0: 28:4b:43:58:37:f6:c3:9e:18:f4:52:a3:fa:63:94:0e:db:d5: fc:bb:62:58:f3:59:ab:ca:78:bc:89:68:24:22:ff:75:e6:22: 7c:dd:fc:36:97:b7:6e:e7:95:24:d8:fe:97:ee:46:bb:24:37: 2f:a1:94:8e:c6:f3:20:6a:e1:74:c8:34:14:be:1c:01:6c:2e: 00:d0:b5:82:15:f8:e2:29:74:44:06:b5:94:ca:ab:81:f6:60: 97:8e:7a:b5:5b:bb:b3:59:0f:28:f2:c8:6e:82:39:21:1d:68: 21:75:c6:03:d4:46:20:d2:0f:22:98:c2:e5:c7:d5:b2:3d:c6: 17:b4:51:35:38:1e:a0:16:51:0e:c8:fa:c1:81:ba:da:63:be: 7d:cf:79:78:dd:7d:a9:f2:66:81:a2:00:eb:99:e5:47:a0:3d: e3:6d:8e:71:36:34:ac:d3:b3:73:11:5d:c3:af:85:4c:9e:5b: 10:c5:14:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXydb60++GNZCMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NjhkZDk2MjYtNTdhMC00MjYyLTlmMzUtODE4YzkxZTMyNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQslGJhRoT6V/iMUy8bQu7uwfOon44hlzlXa S8GYOvbwZZ0qg5VFhlaDIpmr9OS3AJ+p0BAJlhwI3ORkQGM4JtlwDjijbiNIkvH1 87DEC75chGFakhgjcmFQqXp9SOAU7V88rYm7d+o1OWhIM5v1z+j0VxJgWLmKnUq5 zbrUwglIphqePuYuq7+v/Kd0p0a3ABPLpIQuy5upqp+BxT/J5Q1bp0gbcNfhjXL4 GqBav7cHQb0aUU1FEQMy/v8N63AwXCiErRwNSaE/IlTizQjOZyKoT9/2U+/kcdjg gIhsfjm8/7chYiaOnyptZ/17O5ODEWMGEMx9vVy8f6MmdHGPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtDBJKQBZhCzUkcrE22n7kvUn53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmVhNThkNDYtYTliYi0z NWE3LWExYWQtMGUyMmY2NmEwMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3+axmyjogMFmIUZIBOP0dUhM1bwKHvsw5GIXhJt3ngwdN95beRZi5e JqX+g17b40tXjVX4qRxv7jMvOLgYXxn4eYbKnP4SsChLQ1g39sOeGPRSo/pjlA7b 1fy7YljzWavKeLyJaCQi/3XmInzd/DaXt27nlSTY/pfuRrskNy+hlI7G8yBq4XTI NBS+HAFsLgDQtYIV+OIpdEQGtZTKq4H2YJeOerVbu7NZDyjyyG6COSEdaCF1xgPU RiDSDyKYwuXH1bI9xhe0UTU4HqAWUQ7I+sGButpjvn3PeXjdfanyZoGiAOuZ5Ueg PeNtjnE2NKzTs3MRXcOvhUyeWxDFFKI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:27 2025 by rpki-client