$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa File: 520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa (raw, json) Hash identifier: 92XrWkYvfznNrVEsMwiuQF917lybPoOd3Kzs7XOmS80= Subject key identifier: 0F:42:3C:46:F2:77:60:FE:82:2C:B0:88:C7:D5:AD:14:B5:C1:F8:2D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF7BE36F32443BCF8BFEE0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 62240 IP address blocks: 166.88.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:7b:e3:6f:32:44:3b:cf:8b:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=3c1fffe6-049e-4127-8fdf-4a2c2349a3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:05:88:ef:e6:7e:23:8a:b7:2a:cc:ad:9f: 4f:ea:a7:52:a2:e0:7e:d3:5b:f5:fc:49:47:26:39: 53:d9:63:ac:f6:8e:0c:39:c3:fa:29:ad:73:35:28: c4:5b:34:3d:7a:92:2b:aa:eb:ea:8a:1e:d5:a4:c4: 65:db:00:04:46:96:b4:24:0b:33:1f:73:ca:45:e5: 14:74:8e:9b:8b:ec:37:ea:1c:af:c7:a9:0b:73:b6: 76:50:22:81:08:21:ea:2b:a9:ef:82:28:12:15:8f: 11:04:6c:53:b0:e7:4f:0f:64:22:c8:48:96:73:e8: d7:d8:5c:9c:dc:67:eb:07:38:bd:cf:05:b8:aa:96: aa:b2:0d:98:13:8a:f3:7b:24:e5:e7:35:fe:44:31: 6d:32:b9:e2:5e:d8:46:36:2e:f8:0e:dd:e3:d3:1c: 10:85:d4:52:71:1a:c1:01:92:be:1f:51:52:76:99: 15:61:04:15:db:d0:c7:19:13:b9:08:55:71:27:f5: 76:36:19:79:d7:d0:28:d0:67:78:f5:37:21:bc:5b: 7c:fd:5d:10:32:38:db:e2:d9:13:1c:72:4b:cc:12: d8:0e:2c:a0:6b:2d:42:72:24:50:d2:39:f3:3f:20: 53:c1:a3:79:02:e2:83:96:14:32:1c:61:ad:b2:f7: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:42:3C:46:F2:77:60:FE:82:2C:B0:88:C7:D5:AD:14:B5:C1:F8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1a:a6:ca:12:6d:9c:d1:3a:ea:f9:56:27:e8:7d:73:ba:52: 33:19:a0:ce:3e:98:5e:bd:a3:0c:75:c8:92:57:46:63:90:04: e0:ac:8e:d9:d0:87:07:b9:d2:26:34:21:6f:20:17:61:12:5e: 9b:df:ba:c9:7e:53:54:7c:03:24:cd:b8:99:e6:11:09:96:2c: 89:a2:54:d2:00:84:61:fc:3d:ce:32:55:ef:03:df:f0:90:29: 10:ff:de:8f:c1:da:16:39:ec:c4:20:80:9d:ee:95:d0:a0:3c: c7:9b:ce:8f:02:5a:4c:e8:7c:26:08:f3:8a:be:d4:a3:f6:6d: 40:b8:24:ac:7c:51:0a:a0:6e:47:af:71:00:7f:24:28:72:ed: f9:24:87:fb:2d:b3:09:db:71:ea:4a:4f:66:99:2c:b7:e5:85: c4:9f:b4:c3:22:d7:89:f6:07:32:a4:0d:32:f3:9c:fc:08:3e: c2:87:00:97:fa:8e:66:5e:d9:44:50:25:fe:7e:f3:de:34:94: 65:3a:e0:e2:80:ef:3f:41:e0:0e:8c:b9:dd:88:49:2a:06:3c: 8d:05:60:6c:44:60:1a:0e:f1:60:5b:b7:07:f0:74:6d:66:d1: 44:2d:79:e2:00:f7:dc:3c:9d:a8:db:65:e6:ad:4f:57:3a:20: bf:9f:34:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3vjbzJEO8+L/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk M2MxZmZmZTYtMDQ5ZS00MTI3LThmZGYtNGEyYzIzNDlhM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDMFiO/mfiOKtyrMrZ9P6qdSouB+01v1/ElH JjlT2WOs9o4MOcP6Ka1zNSjEWzQ9epIrquvqih7VpMRl2wAERpa0JAszH3PKReUU dI6bi+w36hyvx6kLc7Z2UCKBCCHqK6nvgigSFY8RBGxTsOdPD2QiyEiWc+jX2Fyc 3GfrBzi9zwW4qpaqsg2YE4rzeyTl5zX+RDFtMrniXthGNi74Dt3j0xwQhdRScRrB AZK+H1FSdpkVYQQV29DHGRO5CFVxJ/V2Nhl519Ao0Gd49TchvFt8/V0QMjjb4tkT HHJLzBLYDiygay1CciRQ0jnzPyBTwaN5AuKDlhQyHGGtsveYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9CPEbyd2D+giywiMfVrRS1wfgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTIwMjAzYWMtZmU0MS0z Mjk4LThiMjctN2U5YWQyYjVhYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4apsoSbZzROur5VifofXO6UjMZoM4+mF69owx1yJJXRmOQBOCsjtnQ hwe50iY0IW8gF2ESXpvfusl+U1R8AyTNuJnmEQmWLImiVNIAhGH8Pc4yVe8D3/CQ KRD/3o/B2hY57MQggJ3uldCgPMebzo8CWkzofCYI84q+1KP2bUC4JKx8UQqgbkev cQB/JChy7fkkh/stswnbcepKT2aZLLflhcSftMMi14n2BzKkDTLznPwIPsKHAJf6 jmZe2URQJf5+8940lGU64OKA7z9B4A6Mud2ISSoGPI0FYGxEYBoO8WBbtwfwdG1m 0UQteeIA99w8najbZeatT1c6IL+fNC0= -----END CERTIFICATE-----Generated at Sun May 11 11:51:23 2025 by rpki-client