$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d553319e-c98a-3386-9af1-2f86678cc7fb.roa File: d553319e-c98a-3386-9af1-2f86678cc7fb.roa (raw, json) Hash identifier: Ke+hBAbqCyePfhBZUDNhQeTTMfBmdL7dCWGO2E55nME= Subject key identifier: 11:87:2F:AB:96:89:1C:23:8A:3D:71:5B:23:24:B2:09:79:32:3B:BD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848F00C4CCCF7228260B7507600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d553319e-c98a-3386-9af1-2f86678cc7fb.roa Signing time: Wed 19 Feb 2025 19:45:40 +0000 ROA not before: Wed 19 Feb 2025 19:45:40 +0000 ROA not after: Tue 20 May 2025 18:45:40 +0000 asID: 62240 IP address blocks: 166.88.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:4c:cc:f7:22:82:60:b7:50:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 19 19:45:40 2025 GMT Not After : May 20 18:45:40 2025 GMT Subject: CN=1b42aef6-45c2-48c9-bc51-7cbc42da6aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:60:d4:e4:a6:07:74:0a:1b:2a:6d:cd:43: a3:66:e7:80:e7:36:4d:47:14:be:21:f2:32:8e:19: 76:ed:87:3d:e8:51:56:1c:de:23:a9:c5:0b:10:cc: 89:45:46:09:e9:8b:2c:d8:17:b0:e6:10:f8:2d:61: 2f:5e:5e:50:71:ec:e6:34:60:00:1e:7d:d0:a2:89: 1d:05:8c:67:00:69:d1:77:76:42:cc:e8:70:4e:7e: 30:6b:7e:20:ce:af:3c:ab:83:60:ea:f8:42:06:db: 40:28:bb:85:25:9a:af:f0:05:bc:41:ed:f2:83:51: 84:ec:30:1f:e8:c5:1e:66:aa:86:87:45:c3:aa:6f: 6d:fb:f2:f4:c6:16:91:72:b4:eb:38:ae:09:fb:8b: 84:8b:42:44:4d:e2:35:0c:6c:40:0f:40:e9:88:de: 59:88:79:a5:a3:55:2e:08:be:81:b8:99:b4:5a:31: a5:64:36:7b:35:6a:04:2a:50:14:0b:ab:45:a8:68: e7:dd:d3:b5:2d:f2:2f:a4:d1:84:3e:b8:a4:9e:be: 5b:e3:1a:57:0b:9a:c6:91:b4:b1:d3:b0:27:66:6b: 8e:3e:65:72:fe:0d:87:fb:6c:1b:fc:0c:39:e9:1d: 82:2d:72:80:eb:9c:9f:38:61:9e:d7:4d:d6:e8:ab: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:2F:AB:96:89:1C:23:8A:3D:71:5B:23:24:B2:09:79:32:3B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d553319e-c98a-3386-9af1-2f86678cc7fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:23:5f:5b:fc:23:67:ca:8c:2b:65:13:2c:bf:28:96:07:69: a4:6c:82:1c:d1:af:b5:c7:f1:c8:ac:20:c6:03:7b:35:eb:55: 00:a4:c0:02:98:3e:9e:89:49:bf:18:5e:c0:6f:cd:01:61:ba: a4:5f:59:f9:47:4e:db:94:79:4e:2a:b8:c4:c2:24:19:f6:08: 6a:04:ee:a7:b4:fe:86:81:03:63:f8:35:df:a9:ff:b4:34:5b: c6:46:e7:07:79:87:b1:3c:0d:b2:de:47:e9:18:6d:bd:d5:e3: d6:15:4f:ca:ce:ff:95:e9:6b:d5:2f:69:75:42:3d:11:df:28: a1:15:cd:5f:4f:01:39:da:d5:34:31:ae:58:89:49:c2:b7:b0: fd:c6:f5:2a:9d:4e:8e:dc:eb:77:e6:ff:2f:ee:0e:0d:88:72: e5:bb:c8:50:60:92:fb:77:a2:a4:73:f3:76:97:a9:4b:68:04: 17:dd:35:57:f3:3f:f4:3b:a2:ee:39:23:a9:83:60:15:1e:ad: 4a:f6:e2:fe:d7:f1:3e:a3:04:cb:71:e6:13:93:3a:c5:af:93: d4:f1:c5:a5:93:70:05:6b:b7:a0:b6:37:29:e8:51:85:dc:b7: 9d:bb:cf:60:22:2c:14:10:8d:82:71:db:21:51:db:f6:af:68: ad:2c:c8:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDEzM9yKCYLdQdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxOTE5NDU0MFoXDTI1MDUyMDE4NDU0MFowLzEtMCsGA1UEAxMk MWI0MmFlZjYtNDVjMi00OGM5LWJjNTEtN2NiYzQyZGE2YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhdg1OSmB3QKGyptzUOjZueA5zZNRxS+IfIy jhl27Yc96FFWHN4jqcULEMyJRUYJ6Yss2Bew5hD4LWEvXl5QcezmNGAAHn3Qookd BYxnAGnRd3ZCzOhwTn4wa34gzq88q4Ng6vhCBttAKLuFJZqv8AW8Qe3yg1GE7DAf 6MUeZqqGh0XDqm9t+/L0xhaRcrTrOK4J+4uEi0JETeI1DGxAD0DpiN5ZiHmlo1Uu CL6BuJm0WjGlZDZ7NWoEKlAUC6tFqGjn3dO1LfIvpNGEPriknr5b4xpXC5rGkbSx 07AnZmuOPmVy/g2H+2wb/Aw56R2CLXKA65yfOGGe103W6KtC5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGHL6uWiRwjij1xWyMksgl5Mju9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDU1MzMxOWUtYzk4YS0z Mzg2LTlhZjEtMmY4NjY3OGNjN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUjX1v8I2fKjCtlEyy/KJYHaaRsghzRr7XH8cisIMYDezXrVQCkwAKY Pp6JSb8YXsBvzQFhuqRfWflHTtuUeU4quMTCJBn2CGoE7qe0/oaBA2P4Nd+p/7Q0 W8ZG5wd5h7E8DbLeR+kYbb3V49YVT8rO/5Xpa9UvaXVCPRHfKKEVzV9PATna1TQx rliJScK3sP3G9SqdTo7c63fm/y/uDg2IcuW7yFBgkvt3oqRz83aXqUtoBBfdNVfz P/Q7ou45I6mDYBUerUr24v7X8T6jBMtx5hOTOsWvk9TxxaWTcAVrt6C2NynoUYXc t527z2AiLBQQjYJx2yFR2/avaK0syGY= -----END CERTIFICATE-----Generated at Mon May 5 23:15:20 2025 by rpki-client