$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa File: 79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa (raw, json) Hash identifier: MkqRh+Y39wyQS49+96ZCYP+innWtwaS9qlso6NEtocY= Subject key identifier: 99:90:0D:67:65:D1:A3:B9:72:20:74:BC:D2:51:A8:25:D4:D9:41:E9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B97530F76A18134CF6A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 10557 IP address blocks: 166.88.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:75:30:f7:6a:18:13:4c:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=b2df7bcf-d3a5-4b4d-ab34-edf92f5ae46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:16:92:7d:d5:c9:f8:df:12:b1:e8:e1:99: a3:49:90:84:1f:6b:8f:5b:0d:78:a1:bf:a9:ab:da: 17:e6:b8:86:4c:60:86:9a:12:e1:e0:04:95:1a:35: 29:81:97:de:62:d1:70:48:c6:ef:41:7e:af:93:a1: 26:f4:a1:52:b4:bc:fb:09:41:1a:0d:b4:7a:29:8f: af:4d:3f:39:8b:bb:61:e3:87:5e:0c:d9:c1:13:41: 2a:f1:40:20:d9:80:d7:e5:3a:f9:a6:9d:a9:2f:8b: 90:19:ac:c3:ec:ad:78:6d:6f:21:d8:18:51:bb:f0: 47:21:2c:af:41:b8:f8:34:18:9b:c2:00:ae:eb:72: aa:32:bb:0d:1c:8e:df:36:6f:e7:e4:63:3c:84:45: 55:c1:3c:01:d3:3a:5e:36:76:af:12:70:34:db:c9: ee:a6:62:ad:6f:18:eb:f0:fd:1b:5f:ee:b3:b5:29: 8a:30:39:58:d4:e1:ce:e3:37:5e:da:b8:ad:9d:20: ed:3a:76:96:ba:86:7b:23:c8:ad:73:1c:67:d9:0b: 7e:63:d5:19:30:de:f2:cc:49:0a:78:0c:6e:bf:bb: 3c:ed:c9:f3:45:6f:93:5a:0d:c4:ba:4c:14:52:e9: b0:3d:6f:bd:06:6e:7b:8f:c0:6e:eb:6b:08:fb:96: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:90:0D:67:65:D1:A3:B9:72:20:74:BC:D2:51:A8:25:D4:D9:41:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:08:33:64:d4:24:4a:a0:8c:aa:70:88:93:8a:37:c8:16:9e: 36:6f:3f:ba:0a:c1:3b:62:ab:2b:1e:85:e4:c2:b9:e4:0b:67: f6:c7:ca:c8:c2:f2:9a:dc:1f:19:b9:fd:41:95:c9:dd:4f:4b: 7b:6d:5b:82:d1:5a:5f:b7:e1:5f:9c:f5:c8:9f:cf:4a:0f:c1: 15:58:f9:a8:5f:4e:8c:83:bd:4a:15:6c:8b:41:09:2f:da:6b: f8:70:12:ce:b2:27:ce:d8:3f:21:dc:77:73:c6:2c:fe:40:f9: 65:24:98:67:89:fd:80:0e:68:00:d9:4b:36:b9:ea:17:35:8c: ed:86:28:df:ac:87:46:e7:e1:43:f0:b2:67:2b:98:b1:90:35: 9a:f8:8d:ce:64:9c:36:ec:b5:40:ee:0a:21:56:ed:d2:05:56: cf:11:18:4c:fd:76:e0:f2:aa:40:9f:32:39:26:53:64:cf:f0: f6:82:81:a2:58:4a:91:6f:5a:e8:00:dd:2c:e2:26:a3:eb:4a: 22:ce:a9:c8:06:64:75:01:86:62:ee:ac:3d:13:08:07:32:b7: d5:86:19:ca:d6:af:44:b6:f5:7a:8c:92:91:04:07:2b:13:ea: 49:70:6d:c0:fa:d2:15:4c:96:b4:b4:21:1d:d3:2b:e4:a6:a6: 1a:ca:fc:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLl1MPdqGBNM9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YjJkZjdiY2YtZDNhNS00YjRkLWFiMzQtZWRmOTJmNWFlNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQAWkn3VyfjfErHo4ZmjSZCEH2uPWw14ob+p q9oX5riGTGCGmhLh4ASVGjUpgZfeYtFwSMbvQX6vk6Em9KFStLz7CUEaDbR6KY+v TT85i7th44deDNnBE0Eq8UAg2YDX5Tr5pp2pL4uQGazD7K14bW8h2BhRu/BHISyv Qbj4NBibwgCu63KqMrsNHI7fNm/n5GM8hEVVwTwB0zpeNnavEnA028nupmKtbxjr 8P0bX+6ztSmKMDlY1OHO4zde2ritnSDtOnaWuoZ7I8itcxxn2Qt+Y9UZMN7yzEkK eAxuv7s87cnzRW+TWg3EukwUUumwPW+9Bm57j8Bu62sI+5adIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmQDWdl0aO5ciB0vNJRqCXU2UHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzljZDRiZDgtMTdmNi0z MWZkLWI1YmUtZTNiNjRmOWQ5ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIIM2TUJEqgjKpwiJOKN8gWnjZvP7oKwTtiqyseheTCueQLZ/bHysjC 8prcHxm5/UGVyd1PS3ttW4LRWl+34V+c9cifz0oPwRVY+ahfToyDvUoVbItBCS/a a/hwEs6yJ87YPyHcd3PGLP5A+WUkmGeJ/YAOaADZSza56hc1jO2GKN+sh0bn4UPw smcrmLGQNZr4jc5knDbstUDuCiFW7dIFVs8RGEz9duDyqkCfMjkmU2TP8PaCgaJY SpFvWugA3SziJqPrSiLOqcgGZHUBhmLurD0TCAcyt9WGGcrWr0S29XqMkpEEBysT 6klwbcD60hVMlrS0IR3TK+SmphrK/G0= -----END CERTIFICATE-----Generated at Wed May 7 04:18:09 2025 by rpki-client