$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c84728c-6bbe-33dd-b90b-26738287e9e9.roa File: 5c84728c-6bbe-33dd-b90b-26738287e9e9.roa (raw, json) Hash identifier: A1YhDzzKif2Pv4wwl6yxVR+5TmMQN+uUlS5wMvq/IX8= Subject key identifier: 5B:DD:C1:29:9F:74:F7:A8:53:97:D6:B7:64:16:CD:15:23:E5:33:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B67EF16474E8DA14CC4F3D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c84728c-6bbe-33dd-b90b-26738287e9e9.roa Signing time: Thu 01 May 2025 21:46:43 +0000 ROA not before: Thu 01 May 2025 21:46:43 +0000 ROA not after: Wed 30 Jul 2025 21:46:43 +0000 asID: 401152 IP address blocks: 166.88.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:7e:f1:64:74:e8:da:14:cc:4f:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 21:46:43 2025 GMT Not After : Jul 30 21:46:43 2025 GMT Subject: CN=acee9ba4-4e7d-423e-bd4b-447b9b9290e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:c2:d8:7a:19:43:68:50:1b:11:ee:c5:04: 08:e0:d8:3e:a6:9b:96:5e:cf:a9:4e:cb:04:98:aa: 28:91:dc:88:bb:c9:43:b8:5e:78:8a:99:fe:58:da: 33:05:02:bb:39:b9:d8:58:4f:2e:d7:cc:3f:3c:b5: 7d:11:8d:1d:34:31:7d:13:a5:37:ad:6d:cd:b9:86: 9f:35:1f:a5:4c:f2:82:d6:b0:d0:54:da:a3:48:5f: 2e:38:f8:27:fc:ca:2f:60:78:20:7d:71:4c:14:a6: 06:54:3c:6f:0d:ad:eb:04:fc:47:ed:1d:75:60:44: 5e:b0:4b:80:a9:ae:24:69:e5:3e:eb:3a:b3:ab:49: 8d:65:68:75:b3:fc:04:2a:4e:bd:2c:57:02:28:bc: 87:19:3e:aa:24:a1:79:27:9a:67:77:54:a5:ff:11: 3e:c9:79:0f:9c:a0:2e:57:35:38:68:53:f1:62:fd: ab:63:22:8e:d2:47:c0:38:53:04:9f:df:91:6c:3a: 79:e1:8d:3c:c0:df:e6:60:8a:18:90:a7:3f:65:78: 24:2f:4b:e4:4d:f3:ba:4b:85:82:2b:7f:57:15:41: c3:5c:61:b6:56:67:b0:de:78:61:a9:c6:95:a0:60: e8:41:5d:4b:3d:56:a1:4f:6f:48:38:d3:53:30:3e: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DD:C1:29:9F:74:F7:A8:53:97:D6:B7:64:16:CD:15:23:E5:33:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c84728c-6bbe-33dd-b90b-26738287e9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3b:81:1c:32:d4:e1:a9:3f:b4:17:b7:1e:88:53:0c:dc:cb: 05:45:ac:93:d1:19:e2:08:fd:25:6d:ae:54:e2:b8:52:75:8c: 43:91:c4:80:ca:ca:13:52:15:3e:31:c0:af:63:f1:a4:1d:c4: 62:61:fa:39:f8:e7:2a:d9:97:f5:c3:ee:91:d1:c9:52:4f:ae: f6:60:23:8d:35:fc:14:93:5c:23:59:66:ad:83:6f:54:2e:61: 05:fe:51:61:87:10:e3:df:53:ce:ad:90:f9:ca:65:03:8a:30: cb:90:ec:a3:3e:5b:0c:15:74:91:97:63:e0:3f:41:b2:59:95: a7:ee:ba:77:25:fb:41:88:f1:59:57:a0:94:a0:34:8e:fd:be: 23:45:7d:5c:73:c9:7e:e7:4e:48:94:ed:75:23:df:1a:d1:ff: 41:87:ad:b2:61:0c:6b:ad:d4:d5:44:24:03:9a:0b:14:ca:b3: 2b:9e:6c:07:43:30:f3:90:2e:44:27:06:cc:9e:de:5f:ab:07: 19:88:8b:2d:1b:43:38:9a:a1:4f:bb:cd:28:60:e2:a6:d6:10: 2f:28:90:51:0e:1e:73:41:58:ae:33:90:5b:9b:0f:29:7a:a1: c3:b5:2d:7f:d6:3f:25:2a:ff:ff:47:02:c9:51:dc:fd:6d:83: b0:c7:4b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2fvFkdOjaFMxPPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTIxNDY0M1oXDTI1MDczMDIxNDY0M1owLzEtMCsGA1UEAxMk YWNlZTliYTQtNGU3ZC00MjNlLWJkNGItNDQ3YjliOTI5MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaLC2HoZQ2hQGxHuxQQI4Ng+ppuWXs+pTssE mKookdyIu8lDuF54ipn+WNozBQK7ObnYWE8u18w/PLV9EY0dNDF9E6U3rW3NuYaf NR+lTPKC1rDQVNqjSF8uOPgn/MovYHggfXFMFKYGVDxvDa3rBPxH7R11YEResEuA qa4kaeU+6zqzq0mNZWh1s/wEKk69LFcCKLyHGT6qJKF5J5pnd1Sl/xE+yXkPnKAu VzU4aFPxYv2rYyKO0kfAOFMEn9+RbDp54Y08wN/mYIoYkKc/ZXgkL0vkTfO6S4WC K39XFUHDXGG2Vmew3nhhqcaVoGDoQV1LPVahT29IONNTMD6qUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvdwSmfdPeoU5fWt2QWzRUj5TNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWM4NDcyOGMtNmJiZS0z M2RkLWI5MGItMjY3MzgyODdlOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApli6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB47gRwy1OGpP7QXtx6IUwzcywVFrJPRGeII/SVtrlTiuFJ1jEORxIDK yhNSFT4xwK9j8aQdxGJh+jn45yrZl/XD7pHRyVJPrvZgI401/BSTXCNZZq2Db1Qu YQX+UWGHEOPfU86tkPnKZQOKMMuQ7KM+WwwVdJGXY+A/QbJZlafuuncl+0GI8VlX oJSgNI79viNFfVxzyX7nTkiU7XUj3xrR/0GHrbJhDGut1NVEJAOaCxTKsyuebAdD MPOQLkQnBsye3l+rBxmIiy0bQziaoU+7zShg4qbWEC8okFEOHnNBWK4zkFubDyl6 ocO1LX/WPyUq//9HAslR3P1tg7DHS5o= -----END CERTIFICATE-----Generated at Sat May 10 07:29:50 2025 by rpki-client