$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1040a6c6-140b-3469-a825-8aa0b987efeb.roa File: 1040a6c6-140b-3469-a825-8aa0b987efeb.roa (raw, json) Hash identifier: wuLT44K+0mpat3Dm1heMbLe1BjD+SPAs9zUPLjWjyDY= Subject key identifier: 40:87:C0:D4:03:74:8D:94:8C:AE:F1:8C:10:CE:A2:78:58:3A:B3:B7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849C20AB941BF72C99E9D862700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1040a6c6-140b-3469-a825-8aa0b987efeb.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 6939 IP address blocks: 166.88.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:b9:41:bf:72:c9:9e:9d:86:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=3ef055a3-7eb4-4aec-9db5-4d8fa8b3d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:2b:c3:41:e7:87:eb:d7:1f:74:a0:33:b8: 50:06:cf:dd:a2:c6:d7:60:b7:3c:ea:56:b2:8f:61: c4:30:3c:af:34:fc:44:4c:fa:f5:57:27:bf:5b:dd: 1f:3a:71:89:40:f2:8a:52:1d:52:ef:4e:77:62:33: fb:f7:8f:5e:a4:9c:2d:4e:2d:c3:10:f2:48:b3:0c: 43:37:25:9e:84:eb:f8:94:77:e2:f7:6c:5c:c1:90: 3d:ae:8e:dc:1f:97:12:9d:42:3d:23:cd:e9:61:23: 3c:c7:9b:c2:40:a0:78:cc:5b:27:99:6a:30:24:c2: e3:07:ed:83:08:26:b1:8d:59:3f:ea:ee:f2:15:e0: 64:66:4e:62:2b:8f:be:cf:66:87:04:c3:75:01:64: ab:73:75:a3:58:5c:0e:40:50:28:b4:ba:65:2b:8c: 93:a8:c6:76:21:5e:56:f6:70:3f:32:0c:0d:2f:5b: b1:1b:60:57:de:e0:72:80:84:eb:77:cb:72:21:0d: 09:8c:5f:33:7b:3f:2c:0d:5f:b5:d3:92:d8:7f:fd: ea:3a:b5:4c:55:c2:00:d5:84:13:dc:c6:67:f1:0b: 73:55:b7:ef:92:8b:e9:8d:a7:11:24:1a:f2:1c:9f: 08:3b:55:ba:bd:4f:13:20:e3:14:f2:4f:09:c1:87: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:87:C0:D4:03:74:8D:94:8C:AE:F1:8C:10:CE:A2:78:58:3A:B3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1040a6c6-140b-3469-a825-8aa0b987efeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b6:69:c1:1c:00:ab:4e:4f:3e:20:60:61:c9:c1:ff:e8:2f: 93:cd:f3:5a:62:67:d4:00:31:f0:90:ed:ec:b9:92:89:b7:a9: 40:54:0f:f1:9b:ff:73:3b:4e:17:e6:c4:07:a5:cb:5d:e2:78: 72:24:63:26:6e:3d:71:79:32:01:01:33:f0:85:6f:96:5e:c5: 34:03:9b:0c:8c:fa:0f:03:27:40:41:5c:46:4b:f0:47:a0:8c: 19:1c:ee:94:62:04:de:fe:83:d0:f1:29:8e:06:3c:17:02:fb: d4:bf:f6:fb:8b:b5:d8:1f:52:3c:33:9b:da:e4:46:a1:1e:c3: 51:c7:29:4f:4d:24:97:31:62:df:8e:34:09:b8:9a:eb:18:ff: 74:81:9a:87:bd:33:d3:12:5b:87:88:3d:8d:c8:44:5a:52:1c: a1:07:02:09:29:60:87:0d:6f:8b:71:76:25:80:ef:7f:67:3a: cb:07:7b:d7:90:41:a5:ba:f1:45:4c:50:00:63:c7:0c:79:94: 88:b6:93:39:5b:99:99:66:69:7e:38:11:77:09:bf:bf:0e:c4: 17:c4:8e:b5:a3:ee:66:e8:f0:bc:13:7d:3d:f0:4e:b3:84:96: db:e8:6a:c8:df:4f:0e:86:92:d0:53:40:e4:ea:f0:ce:c3:04: 6d:d5:c0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCrlBv3LJnp2GJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk M2VmMDU1YTMtN2ViNC00YWVjLTlkYjUtNGQ4ZmE4YjNkNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVgrw0Hnh+vXH3SgM7hQBs/dosbXYLc86lay j2HEMDyvNPxETPr1Vye/W90fOnGJQPKKUh1S7053YjP7949epJwtTi3DEPJIswxD NyWehOv4lHfi92xcwZA9ro7cH5cSnUI9I83pYSM8x5vCQKB4zFsnmWowJMLjB+2D CCaxjVk/6u7yFeBkZk5iK4++z2aHBMN1AWSrc3WjWFwOQFAotLplK4yTqMZ2IV5W 9nA/MgwNL1uxG2BX3uBygITrd8tyIQ0JjF8zez8sDV+105LYf/3qOrVMVcIA1YQT 3MZn8QtzVbfvkovpjacRJBryHJ8IO1W6vU8TIOMU8k8JwYcKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECHwNQDdI2UjK7xjBDOonhYOrO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTA0MGE2YzYtMTQwYi0z NDY5LWE4MjUtOGFhMGI5ODdlZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG2acEcAKtOTz4gYGHJwf/oL5PN81piZ9QAMfCQ7ey5kom3qUBUD/Gb /3M7ThfmxAely13ieHIkYyZuPXF5MgEBM/CFb5ZexTQDmwyM+g8DJ0BBXEZL8Eeg jBkc7pRiBN7+g9DxKY4GPBcC+9S/9vuLtdgfUjwzm9rkRqEew1HHKU9NJJcxYt+O NAm4musY/3SBmoe9M9MSW4eIPY3IRFpSHKEHAgkpYIcNb4txdiWA739nOssHe9eQ QaW68UVMUABjxwx5lIi2kzlbmZlmaX44EXcJv78OxBfEjrWj7mbo8LwTfT3wTrOE ltvoasjfTw6GktBTQOTq8M7DBG3VwOU= -----END CERTIFICATE-----Generated at Tue May 6 08:32:42 2025 by rpki-client