$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9295b97-864f-3524-9322-fbb16da1e73f.roa File: d9295b97-864f-3524-9322-fbb16da1e73f.roa (raw, json) Hash identifier: zaqGTbCaEXE5yXmdVgX1s+AkM9JOPvcmHxbRF7UZQ8I= Subject key identifier: 02:EC:F4:CD:99:A4:88:85:EF:1C:E0:DB:03:CA:1D:16:90:0D:27:8A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849C20AB96F4774794797271800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9295b97-864f-3524-9322-fbb16da1e73f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 6939 IP address blocks: 166.88.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:b9:6f:47:74:79:47:97:27:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=d731d6fa-7e7b-4848-b193-a2d3e6c94435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:69:b8:d6:44:3a:44:30:77:8d:60:7b:fc: 5f:ee:00:04:0b:63:a8:14:ca:b9:71:e9:63:f8:d6: e0:9a:9c:7e:7a:6e:7d:39:68:0c:1e:2e:14:34:d2: 23:45:7d:38:d8:ec:f3:41:32:e8:3e:2d:28:3a:8d: 46:f7:13:21:99:e2:38:94:fc:38:ab:62:d4:ec:e7: 5e:16:e6:e7:44:45:88:35:db:4a:c0:36:6f:7c:af: 4a:c7:be:bf:47:de:31:98:4d:49:41:8a:f2:1a:2e: 9e:9c:38:cd:34:db:8e:9b:a0:c8:11:c6:15:9e:d1: f2:08:11:84:e7:a6:c3:9e:ce:6e:d3:03:ac:20:15: 00:24:16:d1:22:1c:0f:49:2a:f0:bf:c1:35:d6:7d: 4d:84:89:50:44:d0:5d:a8:92:c1:e8:42:1c:bf:81: 4c:c9:41:f2:00:12:92:9e:ab:0d:49:59:d5:9e:47: 12:c0:6d:cf:ec:e5:e9:79:87:fc:7c:99:5f:ca:fd: f7:a4:a1:f8:f6:e6:b2:8b:02:c5:83:ea:d8:ca:4e: 70:56:a2:68:df:1d:a5:8e:86:c1:84:fe:0d:2b:54: 70:d1:d0:7c:3e:06:5e:5e:b7:d0:8d:54:68:3e:33: 60:71:e7:19:a3:82:f1:e9:f9:fc:5e:66:28:40:42: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:F4:CD:99:A4:88:85:EF:1C:E0:DB:03:CA:1D:16:90:0D:27:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9295b97-864f-3524-9322-fbb16da1e73f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:99:97:f5:1f:0f:45:86:b5:0b:71:7e:53:d9:a3:0c:f8:89: 8b:f5:d9:6b:37:c6:95:3d:d9:9f:2f:c5:01:41:7d:f0:e4:e7: f9:c0:b7:b8:ae:5d:24:34:ed:b3:7a:4f:ab:04:b6:74:66:8b: e6:fe:e9:2d:c6:d2:9d:b6:07:20:7b:0f:59:a2:d3:ef:7e:ac: bf:29:78:b8:17:98:47:dc:f9:f2:5c:58:40:73:71:e6:f1:17: 8b:56:28:72:08:ee:59:25:f3:1c:ec:21:00:b0:54:34:53:8c: 48:95:11:76:9a:64:dd:3d:ec:44:b4:6b:d2:df:a2:1c:2b:89: 00:d9:bf:6a:01:67:07:89:96:41:eb:fd:5d:d9:0c:db:f9:d0: fd:1e:81:c8:f3:22:5b:18:9a:44:23:f9:26:82:68:f3:ed:cb: 01:c5:3a:8a:92:2e:71:6f:c1:69:c0:c4:60:e5:96:7d:86:b4: 30:8f:09:c2:5c:d4:46:8b:41:7c:f2:b0:4f:a4:4b:1e:e1:b8: d3:88:af:e3:4c:68:54:c0:6f:2e:eb:60:09:63:1b:47:d5:6c: 67:d6:93:f2:d1:c5:f6:60:e1:7c:d4:31:3b:ee:77:88:87:92: 1a:e6:fe:e7:7d:2b:5e:a3:c2:6d:8c:0e:f5:da:d2:11:4c:c3: 10:5d:84:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCrlvR3R5R5cnGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDczMWQ2ZmEtN2U3Yi00ODQ4LWIxOTMtYTJkM2U2Yzk0NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtclpuNZEOkQwd41ge/xf7gAEC2OoFMq5celj +Nbgmpx+em59OWgMHi4UNNIjRX042OzzQTLoPi0oOo1G9xMhmeI4lPw4q2LU7Ode FubnREWINdtKwDZvfK9Kx76/R94xmE1JQYryGi6enDjNNNuOm6DIEcYVntHyCBGE 56bDns5u0wOsIBUAJBbRIhwPSSrwv8E11n1NhIlQRNBdqJLB6EIcv4FMyUHyABKS nqsNSVnVnkcSwG3P7OXpeYf8fJlfyv33pKH49uayiwLFg+rYyk5wVqJo3x2ljobB hP4NK1Rw0dB8PgZeXrfQjVRoPjNgcecZo4Lx6fn8XmYoQEJFVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALs9M2ZpIiF7xzg2wPKHRaQDSeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDkyOTViOTctODY0Zi0z NTI0LTkzMjItZmJiMTZkYTFlNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeZl/UfD0WGtQtxflPZowz4iYv12Ws3xpU92Z8vxQFBffDk5/nAt7iu XSQ07bN6T6sEtnRmi+b+6S3G0p22ByB7D1mi0+9+rL8peLgXmEfc+fJcWEBzcebx F4tWKHII7lkl8xzsIQCwVDRTjEiVEXaaZN097ES0a9LfohwriQDZv2oBZweJlkHr /V3ZDNv50P0egcjzIlsYmkQj+SaCaPPtywHFOoqSLnFvwWnAxGDlln2GtDCPCcJc 1EaLQXzysE+kSx7huNOIr+NMaFTAby7rYAljG0fVbGfWk/LRxfZg4XzUMTvud4iH khrm/ud9K16jwm2MDvXa0hFMwxBdhPE= -----END CERTIFICATE-----Generated at Sat May 10 13:15:52 2025 by rpki-client