$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa File: bde60255-3067-31d9-ad0f-bdde0e359a8a.roa (raw, json) Hash identifier: hedAipFLS/50kd/IFUhk7mWVo9J2wCOki0lJpd07L04= Subject key identifier: E8:A6:FA:8D:35:00:47:8C:C5:47:02:99:24:44:2B:71:64:E6:4D:D3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B57A30FCC8F090BF941B9D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 7018 IP address blocks: 166.88.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:30:fc:c8:f0:90:bf:94:1b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=246ad186-91c3-4512-9d81-8a5b30a49662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:c6:29:49:a3:4f:96:6d:06:7b:18:11:68: 29:54:8a:32:21:e4:d7:93:d0:4f:7b:82:aa:21:9b: 5f:9a:51:03:c4:ef:c4:12:9f:8c:ee:a7:fc:cf:22: af:78:fd:a1:d1:c9:3b:82:73:cb:3c:2d:99:da:51: 37:72:a5:1e:b5:ba:6a:5d:93:6c:8d:35:f1:67:a0: 10:74:5f:f9:9e:69:16:2a:76:5a:54:bb:55:e4:85: be:32:c4:e2:72:90:99:49:a9:ca:9d:14:06:f2:dc: 77:15:c2:45:92:87:67:2c:be:66:7d:01:ce:c8:68: 09:7e:dc:c4:d3:74:6c:5a:02:67:73:2b:08:68:bb: 89:c9:d6:5d:21:7f:b5:58:21:fa:fd:62:ba:3c:66: bc:fc:69:76:05:5d:70:c4:cf:5b:e6:bf:74:5c:97: cf:3d:c1:2b:f3:29:24:a7:f0:69:e4:8b:bd:e0:c8: 23:ea:6e:9c:f3:b4:be:ff:65:44:2a:3a:f1:d1:d0: 6f:30:e0:ef:5a:88:fc:bb:d5:1e:7a:2a:90:fb:f1: 93:26:f2:28:f4:d7:4f:bf:80:1e:cb:80:52:40:26: 38:a3:aa:5a:0e:b4:a9:de:74:68:57:2e:20:e2:46: cb:50:0e:ed:cc:10:e2:0b:1d:7e:3a:0d:41:8e:af: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A6:FA:8D:35:00:47:8C:C5:47:02:99:24:44:2B:71:64:E6:4D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a7:e9:3a:48:a0:48:6a:f6:46:b5:c8:1d:5b:e5:ad:20:19: 4f:31:29:61:62:88:4d:eb:9f:ec:9d:45:70:52:de:72:53:d6: 87:74:71:a7:61:d7:28:3b:80:10:0e:a2:73:b3:45:32:7f:8d: 43:3d:a3:21:1e:95:4c:3a:60:d9:21:ed:35:fe:68:39:e1:6d: 4f:3c:1f:9d:72:7c:c9:b0:73:b3:4a:43:78:7c:a1:a6:bb:db: 2e:7b:19:3c:0d:94:d3:6c:b3:bc:42:1a:58:42:c5:85:90:ad: c8:03:82:2e:20:09:70:b8:2a:1d:fd:4a:bc:bd:b6:1f:d9:ed: bc:87:a8:1c:6e:13:dd:2f:e1:cb:b2:e1:32:2f:da:b2:f4:bf: 6a:1c:43:8f:97:22:63:12:79:e1:94:87:73:66:f5:c8:e2:50: 75:2d:0d:83:a4:d3:6f:99:ba:9f:8b:02:48:09:ac:b3:51:67: 2a:6f:15:97:97:95:4a:f2:66:f9:e4:2a:45:c1:85:92:e1:21: 1e:f0:93:d1:06:f1:13:5f:02:49:4f:09:e6:50:8e:1b:60:5d: b9:b7:2b:05:6e:01:e9:fd:83:30:c5:7c:03:d0:7f:d4:30:f1: e8:50:7d:a0:d3:a3:6f:51:20:62:90:b6:14:57:68:86:17:9b: b3:8e:70:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejD8yPCQv5QbnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MjQ2YWQxODYtOTFjMy00NTEyLTlkODEtOGE1YjMwYTQ5NjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTGKUmjT5ZtBnsYEWgpVIoyIeTXk9BPe4Kq IZtfmlEDxO/EEp+M7qf8zyKveP2h0ck7gnPLPC2Z2lE3cqUetbpqXZNsjTXxZ6AQ dF/5nmkWKnZaVLtV5IW+MsTicpCZSanKnRQG8tx3FcJFkodnLL5mfQHOyGgJftzE 03RsWgJncysIaLuJydZdIX+1WCH6/WK6PGa8/Gl2BV1wxM9b5r90XJfPPcEr8ykk p/Bp5Iu94Mgj6m6c87S+/2VEKjrx0dBvMODvWoj8u9UeeiqQ+/GTJvIo9NdPv4Ae y4BSQCY4o6paDrSp3nRoVy4g4kbLUA7tzBDiCx1+Og1Bjq+axwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOim+o01AEeMxUcCmSREK3Fk5k3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmRlNjAyNTUtMzA2Ny0z MWQ5LWFkMGYtYmRkZTBlMzU5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABun6TpIoEhq9ka1yB1b5a0gGU8xKWFiiE3rn+ydRXBS3nJT1od0cadh 1yg7gBAOonOzRTJ/jUM9oyEelUw6YNkh7TX+aDnhbU88H51yfMmwc7NKQ3h8oaa7 2y57GTwNlNNss7xCGlhCxYWQrcgDgi4gCXC4Kh39Sry9th/Z7byHqBxuE90v4cuy 4TIv2rL0v2ocQ4+XImMSeeGUh3Nm9cjiUHUtDYOk02+Zup+LAkgJrLNRZypvFZeX lUryZvnkKkXBhZLhIR7wk9EG8RNfAklPCeZQjhtgXbm3KwVuAen9gzDFfAPQf9Qw 8ehQfaDTo29RIGKQthRXaIYXm7OOcLg= -----END CERTIFICATE-----Generated at Thu May 8 17:00:52 2025 by rpki-client