$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df39308a-2713-353f-a7de-45db5e2c316b.roa File: df39308a-2713-353f-a7de-45db5e2c316b.roa (raw, json) Hash identifier: 6rN4xkwuppzIrRGoQOq1Tauot8K2fqzaUDmETWOvHCA= Subject key identifier: 07:95:96:3E:51:88:9C:B5:7C:B2:3E:20:8D:5E:EC:5A:8C:52:EB:8A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E649DC51BCA5865523F9780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df39308a-2713-353f-a7de-45db5e2c316b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9d:c5:1b:ca:58:65:52:3f:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=b56fdbff-8e7e-408d-a32d-9db48bcfe916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3f:26:05:35:a1:cb:a2:16:4d:b8:6a:dd:30: 8a:59:89:db:6a:18:3c:07:f2:28:3a:b6:c1:88:5e: 30:05:6b:a9:d9:d3:25:1a:a4:a1:f2:5e:05:57:06: c7:44:d4:3d:98:19:d4:77:52:dc:40:4f:53:43:8d: 2f:df:c6:86:6e:f3:3e:91:8c:e0:42:eb:a8:85:ac: de:e4:99:a0:e9:ca:ed:d5:55:8d:4f:f4:47:ad:30: d9:fd:73:08:61:e3:bc:41:10:20:27:ec:c8:de:14: 54:33:fa:94:98:24:b4:02:1c:64:96:48:d7:dc:57: 2f:41:09:6d:2b:fe:01:ed:4d:fb:af:c8:bd:9f:08: 95:8b:c9:ff:b8:f4:26:b4:58:f5:e3:c4:d1:0f:fd: ef:a7:ea:cf:b1:d8:bf:4e:fc:6a:65:48:88:30:af: 9d:04:c1:19:77:1a:58:f1:e6:24:e0:5b:a2:00:a7: 3e:ef:16:54:0e:8c:59:a1:c7:87:d5:9f:0b:4b:09: 7c:84:b4:94:d4:95:a2:a6:69:d6:ba:46:4b:63:9c: 6a:ad:55:a7:2f:42:bd:45:82:e0:7d:87:5e:ec:f2: 00:8c:1b:06:02:17:02:fe:b6:0c:e8:1f:10:32:e9: 3e:98:27:3b:1c:99:17:ce:ff:0b:f1:12:6b:48:87: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:95:96:3E:51:88:9C:B5:7C:B2:3E:20:8D:5E:EC:5A:8C:52:EB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df39308a-2713-353f-a7de-45db5e2c316b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:22:1d:61:8e:1b:fa:4f:a6:22:b2:e5:c5:a8:2f:66:35:ef: a4:62:db:81:4b:c2:01:39:7c:80:86:aa:ae:45:dc:60:4e:e2: 67:c8:52:42:0a:73:34:c0:f4:f5:37:51:4c:fc:b2:ab:b3:d9: ef:85:a7:da:24:c1:03:3a:d2:a8:9b:1e:a3:c3:c2:fa:91:fb: 9a:b1:37:b5:ad:80:58:5d:6b:93:f7:d1:88:bf:81:44:ac:ab: d9:56:e1:d5:5c:3d:9d:e8:02:42:c6:4e:71:97:48:e7:40:21: 07:90:d4:d2:dc:6a:e7:78:53:9c:c8:36:cc:45:64:6e:b0:19: cd:3d:7a:17:54:12:30:81:ee:19:b8:4d:10:d2:ca:57:25:20: d8:70:73:de:cf:a8:ca:9b:28:e5:fa:1d:0e:82:e2:c0:44:fb: 66:fb:63:8a:3b:bc:20:66:5b:72:4b:94:74:85:85:ac:d4:a4: 9f:0f:79:eb:69:e6:a7:0e:24:ff:b3:db:76:34:76:06:83:ce: 3c:68:ec:3a:de:f7:da:7e:f1:2c:98:68:a2:63:9d:4a:31:44: c2:9e:52:71:78:da:1c:a3:e7:b0:ee:54:bf:20:da:41:77:61: 43:be:44:52:3e:8a:16:43:35:9f:aa:c5:94:f8:be:b9:cc:92: a3:1b:d4:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJ3FG8pYZVI/l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjU2ZmRiZmYtOGU3ZS00MDhkLWEzMmQtOWRiNDhiY2ZlOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj8mBTWhy6IWTbhq3TCKWYnbahg8B/IoOrbB iF4wBWup2dMlGqSh8l4FVwbHRNQ9mBnUd1LcQE9TQ40v38aGbvM+kYzgQuuohaze 5Jmg6crt1VWNT/RHrTDZ/XMIYeO8QRAgJ+zI3hRUM/qUmCS0AhxklkjX3FcvQQlt K/4B7U37r8i9nwiVi8n/uPQmtFj148TRD/3vp+rPsdi/TvxqZUiIMK+dBMEZdxpY 8eYk4FuiAKc+7xZUDoxZoceH1Z8LSwl8hLSU1JWipmnWukZLY5xqrVWnL0K9RYLg fYde7PIAjBsGAhcC/rYM6B8QMuk+mCc7HJkXzv8L8RJrSIf9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeVlj5RiJy1fLI+II1e7FqMUuuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGYzOTMwOGEtMjcxMy0z NTNmLWE3ZGUtNDVkYjVlMmMzMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQiHWGOG/pPpiKy5cWoL2Y176Ri24FLwgE5fICGqq5F3GBO4mfIUkIK czTA9PU3UUz8squz2e+Fp9okwQM60qibHqPDwvqR+5qxN7WtgFhda5P30Yi/gUSs q9lW4dVcPZ3oAkLGTnGXSOdAIQeQ1NLcaud4U5zINsxFZG6wGc09ehdUEjCB7hm4 TRDSylclINhwc97PqMqbKOX6HQ6C4sBE+2b7Y4o7vCBmW3JLlHSFhazUpJ8Peetp 5qcOJP+z23Y0dgaDzjxo7Dre99p+8SyYaKJjnUoxRMKeUnF42hyj57DuVL8g2kF3 YUO+RFI+ihZDNZ+qxZT4vrnMkqMb1Os= -----END CERTIFICATE-----Generated at Sat May 10 18:41:21 2025 by rpki-client