$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa File: 59f6afbb-919b-3388-ab22-83582473d385.roa (raw, json) Hash identifier: XdzSFBdRyTSvGjcdqVfcdr0N4T01O3mOrYKBn2L6Drs= Subject key identifier: 59:8F:88:DD:93:94:BF:D0:F9:54:CE:66:59:B8:D5:3E:8A:2F:3B:79 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B149F9D742CC1C4462387F7E Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26383 IP address blocks: 166.88.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f9:d7:42:cc:1c:44:62:38:7f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=50dc1d89-4559-491f-88d4-b6ee24a71913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:12:b6:ce:92:a2:a0:2f:98:bb:ca:fe:56: 93:d4:4f:94:52:99:24:81:45:ac:5d:30:50:99:d5: 61:b1:4f:e6:fa:3b:b9:17:7f:4a:63:34:80:b6:43: 4e:68:61:d6:42:31:8c:d4:2a:2d:a8:72:f9:26:bb: ca:77:6f:39:00:a0:58:f0:e8:30:1b:dc:c2:bc:8f: 24:78:1f:25:f9:28:27:ec:4c:64:aa:50:d8:71:02: c8:b0:b9:f8:df:f3:72:b9:0e:94:f1:21:0a:c1:21: 2d:7d:44:ac:e9:ac:8b:1f:c5:78:ed:3e:f0:f1:7e: df:ca:52:97:9a:3c:96:15:52:a4:b1:4a:fa:71:51: f3:3a:43:5a:41:cd:1e:bd:c0:0d:d9:81:2e:0d:6d: 4a:07:a9:9a:5e:f5:10:c2:ac:f4:0e:f2:bf:c7:de: c5:39:44:c1:3e:a9:eb:a8:70:d7:09:55:d9:49:7b: e4:df:b4:0c:fc:2f:25:16:43:27:1c:8b:b5:65:a8: 81:7e:a3:a5:46:bb:89:05:cc:66:57:22:53:ed:27: 96:5a:9b:5d:ad:a5:6d:f4:e9:6b:ed:a7:7a:77:9d: 06:e6:46:be:91:3a:19:b6:ab:a5:9c:7d:b8:cf:e1: 97:c4:69:e7:8a:67:96:46:78:65:af:6e:f8:25:9d: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8F:88:DD:93:94:BF:D0:F9:54:CE:66:59:B8:D5:3E:8A:2F:3B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c3:b6:18:41:53:12:9b:04:81:5d:36:80:42:fe:0e:84:70: 09:4f:61:b6:65:05:c5:cb:05:12:9a:86:27:73:97:9e:35:40: 4f:fc:b7:05:fd:af:8d:2a:0f:b2:31:0b:ce:6a:a4:e3:35:7a: f7:5c:0e:6e:10:0a:3a:30:80:3e:5c:d0:af:51:fa:a3:bb:63: dc:10:37:51:73:b6:2b:18:85:37:c9:00:55:61:50:11:19:f5: 56:3f:63:b1:13:d5:ab:a8:d9:35:5d:a6:12:12:20:5d:2f:f2: 89:4d:a9:c9:93:7d:4e:0d:a4:05:d6:a2:1e:ea:bc:0f:71:31: 84:00:9e:02:e1:9c:cf:75:eb:1e:63:2a:33:b6:6f:85:0d:9a: 14:92:16:41:e7:91:5c:43:7f:3f:6d:e8:fd:24:bf:b7:21:b0: 77:05:69:67:63:90:28:7b:dd:fd:b1:fb:00:79:e8:40:6c:09: 71:9c:67:09:b9:c6:35:e2:32:87:30:a6:c5:a9:27:2d:1e:68: 93:13:f3:91:25:02:5b:87:ef:9a:66:e4:cc:5f:93:09:95:71: 33:0a:e3:0e:dd:d2:fd:06:d1:1b:b2:6a:e7:16:a7:53:3e:33: 51:ee:c2:04:fb:af:47:82:e8:40:b8:01:5a:87:d3:2c:f1:e8: 19:10:69:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfnXQswcRGI4f34wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTBkYzFkODktNDU1OS00OTFmLTg4ZDQtYjZlZTI0YTcxOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGoSts6SoqAvmLvK/laT1E+UUpkkgUWsXTBQ mdVhsU/m+ju5F39KYzSAtkNOaGHWQjGM1CotqHL5JrvKd285AKBY8OgwG9zCvI8k eB8l+Sgn7ExkqlDYcQLIsLn43/NyuQ6U8SEKwSEtfUSs6ayLH8V47T7w8X7fylKX mjyWFVKksUr6cVHzOkNaQc0evcAN2YEuDW1KB6maXvUQwqz0DvK/x97FOUTBPqnr qHDXCVXZSXvk37QM/C8lFkMnHIu1ZaiBfqOlRruJBcxmVyJT7SeWWptdraVt9Olr 7ad6d50G5ka+kToZtqulnH24z+GXxGnnimeWRnhlr274JZ1w/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmPiN2TlL/Q+VTOZlm41T6KLzt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTlmNmFmYmItOTE5Yi0z Mzg4LWFiMjItODM1ODI0NzNkMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXDthhBUxKbBIFdNoBC/g6EcAlPYbZlBcXLBRKahidzl541QE/8twX9 r40qD7IxC85qpOM1evdcDm4QCjowgD5c0K9R+qO7Y9wQN1FztisYhTfJAFVhUBEZ 9VY/Y7ET1auo2TVdphISIF0v8olNqcmTfU4NpAXWoh7qvA9xMYQAngLhnM916x5j KjO2b4UNmhSSFkHnkVxDfz9t6P0kv7chsHcFaWdjkCh73f2x+wB56EBsCXGcZwm5 xjXiMocwpsWpJy0eaJMT85ElAluH75pm5MxfkwmVcTMK4w7d0v0G0RuyaucWp1M+ M1HuwgT7r0eC6EC4AVqH0yzx6BkQaYM= -----END CERTIFICATE-----Generated at Mon May 12 19:21:04 2025 by rpki-client