$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa File: 99c1ce01-1f7c-33d7-a936-a9f228586f15.roa (raw, json) Hash identifier: wIV8d1sSAgB20qq10ipomq83+jcfEwD620czfeLnVx4= Subject key identifier: 3D:31:EE:54:41:AC:D6:F2:22:EF:21:CA:7F:9B:67:C9:36:4B:CA:07 Certificate issuer: /CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2 Certificate serial: 010D0C9F4328584A1E2AAC529CCF97151F5A4B80 Authority key identifier: 69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 4785 IP address blocks: 167.88.182.0/24 maxlen: 24 167.88.183.0/24 maxlen: 24 167.88.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:ac:52:9c:cf:97:15:1f:5a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=94eca65f-1dff-4ab6-bdd9-5c71a7ba39b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:bc:6d:96:ae:fd:b8:0c:53:a1:12:f4:fb: 0c:4e:7e:10:79:fd:ae:92:e1:33:d5:8d:0c:68:51: b1:ab:0d:39:ae:0b:f9:06:ad:87:9e:80:32:6f:ea: 48:a1:4c:ac:79:6b:23:a8:bb:0b:f5:e9:a1:d2:4c: 86:3c:70:9c:54:d1:3f:4b:41:10:02:e7:c7:d4:29: c6:e9:b7:1b:7a:af:cf:f3:f7:19:56:c7:0b:d2:25: f2:69:a5:97:28:be:f8:07:40:bc:1b:57:7e:25:88: 51:db:8d:2d:3d:d9:90:36:44:9f:5b:36:c2:37:5e: 54:62:ef:41:8a:6f:a2:83:c6:15:5d:3d:50:d4:9e: 61:35:23:0c:2c:a5:0a:26:9a:90:94:74:0c:e8:59: 85:db:94:a9:84:f3:ea:0f:60:9c:71:aa:52:dc:42: d3:30:49:aa:d5:ae:c8:48:be:c4:8c:53:2d:67:b4: 12:b4:80:66:82:06:c1:36:a5:ef:6d:79:b4:29:69: 46:af:e4:a4:fe:a5:d1:b9:05:52:43:dc:0a:9a:aa: 12:6c:d2:56:88:06:60:ea:59:76:cb:ea:ec:22:66: 16:ed:d1:aa:39:6b:96:9a:78:b3:f7:bb:11:dd:38: 97:f5:f7:c7:a2:dd:b7:df:17:13:c5:17:ef:c9:82: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:EE:54:41:AC:D6:F2:22:EF:21:CA:7F:9B:67:C9:36:4B:CA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl X509v3 Authority Key Identifier: keyid:69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer sbgp-ipAddrBlock: critical IPv4: 167.88.182.0-167.88.184.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:eb:ee:4e:c6:5c:d8:8d:92:21:5e:fb:fe:8c:86:d1:91:c8: 82:0d:f1:76:91:5e:ad:7d:af:78:b9:e9:9d:86:37:9d:d2:a1: f5:47:db:82:3b:b8:1b:a9:a1:2c:9d:49:57:54:66:5a:ed:7c: 23:2d:49:0c:07:0c:fd:bc:a4:61:7d:75:0c:c0:07:dd:f9:83: 6e:3a:7a:34:1b:b1:f5:7e:bc:e5:ff:21:d1:a3:ab:40:55:53: 02:2c:ef:4c:87:8b:00:2f:0f:ad:cb:e4:18:07:c5:31:1d:e1: 79:7a:42:2f:e1:a8:f1:b6:81:82:a2:88:0e:f0:7b:2b:00:cf: e5:82:f7:d3:f5:3f:13:1e:7c:27:83:f1:52:5a:a2:c3:87:61: 1a:14:72:d8:78:08:6f:ec:5a:d6:6e:2a:49:cf:2e:00:b4:c2: 63:dc:8d:42:b2:a0:c8:63:54:55:b6:7c:a6:d5:d4:f7:7e:a9: 16:85:69:98:50:d9:fc:01:e5:21:77:4d:cb:87:23:9c:a0:5f: 5e:bb:fc:db:36:89:59:69:f3:2f:76:74:2a:fd:c7:60:32:43: b9:41:5f:a2:d5:24:05:33:7a:22:9e:71:9a:75:34:3d:4f:bd: 82:0c:65:79:98:87:65:13:5d:b8:50:e3:0f:db:35:d9:86:83: 92:9e:02:d5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoeKqxSnM+XFR9aS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUyY2Q2NjMtNjNlYy00YmQ0LTg1MTYtNDBiNGJmZTYy NGMyMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk OTRlY2E2NWYtMWRmZi00YWI2LWJkZDktNWM3MWE3YmEzOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgim8bZau/bgMU6ES9PsMTn4Qef2ukuEz1Y0M aFGxqw05rgv5Bq2HnoAyb+pIoUyseWsjqLsL9emh0kyGPHCcVNE/S0EQAufH1CnG 6bcbeq/P8/cZVscL0iXyaaWXKL74B0C8G1d+JYhR240tPdmQNkSfWzbCN15UYu9B im+ig8YVXT1Q1J5hNSMMLKUKJpqQlHQM6FmF25SphPPqD2CccapS3ELTMEmq1a7I SL7EjFMtZ7QStIBmggbBNqXvbXm0KWlGr+Sk/qXRuQVSQ9wKmqoSbNJWiAZg6ll2 y+rsImYW7dGqOWuWmniz97sR3TiX9ffHot233xcTxRfvyYJa/QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFD0x7lRBrNbyIu8hyn+bZ8k2S8oHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNTJj ZDY2My02M2VjLTRiZDQtODUxNi00MGI0YmZlNjI0YzIvOTljMWNlMDEtMWY3Yy0z M2Q3LWE5MzYtYTlmMjI4NTg2ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzUyY2Q2NjMtNjNlYy00YmQ0LTg1 MTYtNDBiNGJmZTYyNGMyL2M1MmNkNjYzLTYzZWMtNGJkNC04NTE2LTQwYjRiZmU2 MjRjMi5jcmwwHwYDVR0jBBgwFoAUaVhGOXrVmoz6ZbSaw8Xzd8EK0uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNTJjZDY2My02M2VjLTRiZDQtODUxNi00MGI0 YmZlNjI0YzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGnWLYD BACnWLgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAu+vuTsZc2I2SIV77/oyG0ZHIgg3xdpFerX2veLnpnYY3 ndKh9Ufbgju4G6mhLJ1JV1RmWu18Iy1JDAcM/bykYX11DMAH3fmDbjp6NBux9X68 5f8h0aOrQFVTAizvTIeLAC8PrcvkGAfFMR3heXpCL+Go8baBgqKIDvB7KwDP5YL3 0/U/Ex58J4PxUlqiw4dhGhRy2HgIb+xa1m4qSc8uALTCY9yNQrKgyGNUVbZ8ptXU 936pFoVpmFDZ/AHlIXdNy4cjnKBfXrv82zaJWWnzL3Z0Kv3HYDJDuUFfotUkBTN6 Ip5xmnU0PU+9ggxleZiHZRNduFDjD9s12YaDkp4C1Q== -----END CERTIFICATE-----Generated at Sun Jun 15 18:51:34 2025 by rpki-client