$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9245892f-8696-3e7b-a785-3efa3ee51013.roa File: 9245892f-8696-3e7b-a785-3efa3ee51013.roa (raw, json) Hash identifier: CQMFmFRaHH+sBQO+5iAPtcpbpp3I4/dig8frKi/eJ5w= Subject key identifier: 24:47:B9:B4:8E:1C:8D:2C:2A:AE:A1:1D:17:7C:2B:66:FD:42:1A:36 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B67EF0F5DAA71ACAF915A180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9245892f-8696-3e7b-a785-3efa3ee51013.roa Signing time: Thu 01 May 2025 21:46:43 +0000 ROA not before: Thu 01 May 2025 21:46:43 +0000 ROA not after: Wed 30 Jul 2025 21:46:43 +0000 asID: 401152 IP address blocks: 166.88.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:7e:f0:f5:da:a7:1a:ca:f9:15:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 21:46:43 2025 GMT Not After : Jul 30 21:46:43 2025 GMT Subject: CN=c31e7dc5-8708-4ab2-ae2b-aa3b74114c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:ec:90:27:61:af:00:af:9e:54:65:7c:fb: 43:b0:d8:57:1e:3a:fb:5f:49:4d:9b:86:a5:0d:14: 6a:ec:6a:e9:c3:ef:61:6b:6b:ad:d2:90:48:35:c0: 01:71:a5:9c:0e:ac:d9:2d:9e:52:77:13:ec:8e:5a: 08:57:4c:81:13:34:36:f0:17:d7:30:1e:8a:c2:eb: ec:70:09:04:55:d6:79:39:34:81:fa:7a:b0:65:80: 1f:f0:10:dc:af:a9:6b:4f:1c:a7:31:80:9e:bf:03: 9e:39:be:71:2d:20:03:3b:40:55:3b:bc:31:09:57: 7e:93:06:ef:ca:e5:02:f9:98:fe:17:e3:2f:67:76: 7d:c4:11:88:2f:12:fd:82:8c:e2:a1:0e:66:a1:73: e8:49:a3:c3:12:2e:82:da:66:a6:a4:16:44:bd:80: 96:7d:e2:fc:ed:b8:e7:70:4a:ac:b5:29:e2:f5:9f: 16:25:bb:0b:6f:13:f6:7c:f2:26:65:bc:9f:12:e1: b7:13:3e:b6:c3:78:04:e8:3b:a8:7f:6a:2b:c4:83: 23:7c:8d:d0:54:ad:3a:12:ef:54:dd:a7:03:33:ca: b9:65:d1:0e:3f:6f:59:f0:17:ce:33:45:2d:63:85: 59:23:58:66:7e:93:5a:97:a3:fd:51:18:74:b1:0c: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:47:B9:B4:8E:1C:8D:2C:2A:AE:A1:1D:17:7C:2B:66:FD:42:1A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9245892f-8696-3e7b-a785-3efa3ee51013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:87:76:ad:5d:46:83:d2:41:1e:16:50:95:21:83:c8:61:a9: 77:76:8d:b5:ed:8a:33:a0:66:5d:87:04:41:ed:29:10:33:d0: c1:b3:31:d1:aa:4c:e5:14:8e:f2:1c:08:02:73:6d:04:8a:5e: 86:38:8a:b0:b0:cd:60:53:35:4b:86:c0:6e:84:ec:17:70:2f: 8f:87:60:01:b3:af:a4:5a:f3:73:a6:fc:53:bc:5f:ce:58:e5: 7f:ed:66:b8:05:e5:44:e7:39:97:16:b8:05:0e:29:e9:f7:9a: b3:17:9d:6d:80:5d:20:da:44:a3:29:b5:80:2c:fd:84:c2:57: f4:ae:b1:48:2d:b9:1f:37:95:d8:c1:3b:fe:db:f6:96:02:8b: 09:13:8c:1a:e9:c2:84:a9:ab:67:64:b4:6d:ce:99:cf:27:be: 44:82:31:1f:06:8b:04:1b:8d:9d:12:d5:99:e2:81:6b:c4:28: c2:84:be:5c:c3:9a:71:ac:d3:fe:31:4a:05:e6:b6:60:c6:f1: 39:0b:70:9f:02:1f:7f:bb:b4:a9:a9:86:e6:57:21:98:52:c3: ee:9f:f6:09:84:4c:e5:23:17:6b:d4:94:88:22:44:ba:66:27: fc:5c:fc:23:e8:22:89:3b:ca:4c:d2:04:b7:d0:af:a4:40:4b: 22:a1:c8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2fvD12qcayvkVoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTIxNDY0M1oXDTI1MDczMDIxNDY0M1owLzEtMCsGA1UEAxMk YzMxZTdkYzUtODcwOC00YWIyLWFlMmItYWEzYjc0MTE0YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DvskCdhrwCvnlRlfPtDsNhXHjr7X0lNm4al DRRq7Grpw+9ha2ut0pBINcABcaWcDqzZLZ5SdxPsjloIV0yBEzQ28BfXMB6Kwuvs cAkEVdZ5OTSB+nqwZYAf8BDcr6lrTxynMYCevwOeOb5xLSADO0BVO7wxCVd+kwbv yuUC+Zj+F+MvZ3Z9xBGILxL9gozioQ5moXPoSaPDEi6C2mampBZEvYCWfeL87bjn cEqstSni9Z8WJbsLbxP2fPImZbyfEuG3Ez62w3gE6Duof2orxIMjfI3QVK06Eu9U 3acDM8q5ZdEOP29Z8BfOM0UtY4VZI1hmfpNal6P9URh0sQyV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRHubSOHI0sKq6hHRd8K2b9Qho2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTI0NTg5MmYtODY5Ni0z ZTdiLWE3ODUtM2VmYTNlZTUxMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Hdq1dRoPSQR4WUJUhg8hhqXd2jbXtijOgZl2HBEHtKRAz0MGzMdGq TOUUjvIcCAJzbQSKXoY4irCwzWBTNUuGwG6E7BdwL4+HYAGzr6Ra83Om/FO8X85Y 5X/tZrgF5UTnOZcWuAUOKen3mrMXnW2AXSDaRKMptYAs/YTCV/SusUgtuR83ldjB O/7b9pYCiwkTjBrpwoSpq2dktG3Omc8nvkSCMR8GiwQbjZ0S1ZnigWvEKMKEvlzD mnGs0/4xSgXmtmDG8TkLcJ8CH3+7tKmphuZXIZhSw+6f9gmETOUjF2vUlIgiRLpm J/xc/CPoIok7ykzSBLfQr6RASyKhyBI= -----END CERTIFICATE-----Generated at Sat May 10 07:21:50 2025 by rpki-client