$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a504e16-0f45-333c-9eba-ce6c38966d2b.roa File: 9a504e16-0f45-333c-9eba-ce6c38966d2b.roa (raw, json) Hash identifier: QUBp+FjLUldUijCB7SAJDMHbGBYH8fpJDumN3yHvD9s= Subject key identifier: 5C:49:FA:55:81:D5:03:82:6B:54:72:BE:7C:B6:DC:30:61:F4:06:63 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A416BBD93758058BD800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a504e16-0f45-333c-9eba-ce6c38966d2b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a4:16:bb:d9:37:58:05:8b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=7bdcbc4d-0cf1-4eff-996b-177c3180f392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:37:17:cb:ab:bb:19:1b:1d:31:98:ef:44: 8a:89:95:10:df:40:70:f2:cb:09:ce:33:58:e2:1a: b1:e0:c6:43:ae:23:14:b8:49:68:78:6c:ef:31:d9: 59:b1:2f:a6:44:2f:7f:6b:c0:f7:4b:c5:f9:71:da: 46:bf:88:8f:f2:3c:0d:64:50:18:0f:03:f7:3a:a1: d1:e7:c6:29:de:ce:6d:a4:33:72:4d:b9:41:7c:37: 0c:d7:de:04:f1:1a:34:17:40:39:d5:9a:c8:c7:04: e3:4d:e7:6c:ee:e5:1d:44:e4:16:ff:7a:0e:01:54: dc:07:b7:d7:93:5c:d8:e2:e6:b7:ae:c0:d1:a6:e9: ac:c6:f4:30:e8:57:6e:be:1c:fc:12:c1:39:00:6b: 92:40:51:34:07:8f:90:96:4a:0b:bd:37:d0:af:29: 25:1e:51:3c:a2:f7:a1:0f:ec:c9:f4:2f:ec:a6:b5: 4d:c3:87:89:9f:a2:e1:91:bf:54:ac:76:c0:e2:04: 8d:90:c1:b2:d1:ed:de:4a:48:b9:33:51:bf:84:12: 94:ee:90:bf:00:bd:69:b5:ae:50:fd:27:42:85:06: d8:d9:5b:9f:e6:ca:a8:9c:de:f9:94:a1:f0:3f:5f: 11:16:3e:d4:c9:16:0b:f3:c1:20:e8:b7:c8:ce:ff: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:FA:55:81:D5:03:82:6B:54:72:BE:7C:B6:DC:30:61:F4:06:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a504e16-0f45-333c-9eba-ce6c38966d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cf:7e:a9:5c:f6:9c:6a:10:50:b2:af:a5:bb:b7:b3:ba:9b: 98:a8:95:db:fa:60:98:9f:06:53:10:cf:e5:b9:e0:99:aa:cb: 50:08:44:c0:87:dd:74:a2:23:a2:7d:f2:ad:5a:30:34:28:5b: d3:62:eb:7f:56:47:63:4c:29:a3:40:f1:39:ff:a7:e0:e0:62: 52:5f:09:b4:5c:df:dc:b5:0e:85:9f:9d:3c:5e:22:ed:13:be: c5:84:28:ce:73:9b:f1:ca:93:5a:85:83:d0:c0:8e:1b:00:df: 77:7c:be:72:98:aa:6a:87:7c:d9:2b:5b:31:9f:95:32:8c:b6: 25:cf:4a:4f:1f:57:69:a1:c2:27:d0:8c:c8:4e:6e:53:2b:25: 39:a5:c6:3e:6d:13:c3:8a:cf:e7:9b:58:10:05:aa:cd:60:ea: 0d:74:86:f1:78:f4:7f:cb:70:7c:e1:56:d8:fe:f7:dc:dd:10: c5:19:a9:9b:22:f2:15:d9:62:c0:f4:8a:59:35:9d:15:84:39: 17:d2:71:7f:ef:5d:fd:3c:67:15:75:61:89:35:5d:37:b5:64: cc:c3:da:1d:2e:60:09:73:be:e1:21:71:df:58:55:a1:ed:79: 79:55:d5:11:4e:2d:87:be:47:56:bc:c9:53:75:43:ba:24:80: d3:d7:60:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKQWu9k3WAWL2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk N2JkY2JjNGQtMGNmMS00ZWZmLTk5NmItMTc3YzMxODBmMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0k3F8uruxkbHTGY70SKiZUQ30Bw8ssJzjNY 4hqx4MZDriMUuEloeGzvMdlZsS+mRC9/a8D3S8X5cdpGv4iP8jwNZFAYDwP3OqHR 58Yp3s5tpDNyTblBfDcM194E8Ro0F0A51ZrIxwTjTeds7uUdROQW/3oOAVTcB7fX k1zY4ua3rsDRpumsxvQw6Fduvhz8EsE5AGuSQFE0B4+QlkoLvTfQryklHlE8oveh D+zJ9C/sprVNw4eJn6Lhkb9UrHbA4gSNkMGy0e3eSki5M1G/hBKU7pC/AL1pta5Q /SdChQbY2Vuf5sqonN75lKHwP18RFj7UyRYL88Eg6LfIzv/t8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxJ+lWB1QOCa1Ryvny23DBh9AZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWE1MDRlMTYtMGY0NS0z MzNjLTllYmEtY2U2YzM4OTY2ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPPfqlc9pxqEFCyr6W7t7O6m5ioldv6YJifBlMQz+W54Jmqy1AIRMCH 3XSiI6J98q1aMDQoW9Ni639WR2NMKaNA8Tn/p+DgYlJfCbRc39y1DoWfnTxeIu0T vsWEKM5zm/HKk1qFg9DAjhsA33d8vnKYqmqHfNkrWzGflTKMtiXPSk8fV2mhwifQ jMhOblMrJTmlxj5tE8OKz+ebWBAFqs1g6g10hvF49H/LcHzhVtj+99zdEMUZqZsi 8hXZYsD0ilk1nRWEORfScX/vXf08ZxV1YYk1XTe1ZMzD2h0uYAlzvuEhcd9YVaHt eXlV1RFOLYe+R1a8yVN1Q7okgNPXYCw= -----END CERTIFICATE-----Generated at Wed May 7 21:56:53 2025 by rpki-client