$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa File: 8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa (raw, json) Hash identifier: mQX2pcVFCmjYNWFHb7p2Ej/LtXq34FtJSkjTpZR2o+4= Subject key identifier: F3:46:06:A8:C1:79:77:37:45:1E:02:4D:93:D0:CB:59:61:1A:DA:DC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849F5E1B32036C228F312893DE0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa Signing time: Sat 24 May 2025 14:41:38 +0000 ROA not before: Sat 24 May 2025 14:41:38 +0000 ROA not after: Fri 22 Aug 2025 14:41:38 +0000 asID: 214238 IP address blocks: 166.88.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:e1:b3:20:36:c2:28:f3:12:89:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 24 14:41:38 2025 GMT Not After : Aug 22 14:41:38 2025 GMT Subject: CN=7a2a9132-72d1-4992-96fe-93b0c1533036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:8d:aa:ea:61:b5:d7:54:a8:e1:94:72:de: 87:58:7b:1d:6e:bb:5c:b6:ea:17:8b:53:0a:78:84: 52:27:ed:9d:5b:8d:0a:f4:94:e5:8e:92:3a:70:b7: 39:3b:96:08:6b:0a:7c:40:65:04:90:55:95:76:1d: fb:4b:b1:28:d4:69:4d:7f:10:5d:4e:d0:63:91:ea: dd:36:7c:53:f5:f3:49:47:a2:a1:79:70:2a:b3:ee: 48:31:f9:55:3f:42:8d:7e:e8:bb:31:c9:1a:13:19: 00:19:47:bc:9c:a8:ec:e1:13:f8:18:fd:d7:a8:97: 63:52:aa:f2:4b:cb:76:a3:d6:c5:76:ea:a2:f8:6b: 8e:26:0e:20:47:a8:09:10:49:f5:ce:aa:a2:da:9b: c1:d4:21:d9:63:69:e1:14:16:7a:56:c4:3e:c4:32: 0d:7f:10:7a:91:cc:c9:bb:a4:c6:c0:68:b9:b8:79: 21:23:db:c4:ad:45:4f:e9:93:0f:14:4f:be:95:89: 98:28:f5:15:53:83:0e:5f:40:68:e6:bf:65:a4:e7: 25:c6:65:95:88:4d:a6:64:7c:60:8e:1e:6c:7a:2d: 6c:1a:b6:b8:eb:68:2d:d2:a8:2e:3f:48:5d:d7:b5: 08:44:cc:ef:36:87:32:9d:93:e3:2d:dd:00:39:4d: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:46:06:A8:C1:79:77:37:45:1E:02:4D:93:D0:CB:59:61:1A:DA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cf2c059-9b2d-3354-8dc1-e206c9286fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f6:2a:be:61:ae:d2:fa:c7:3a:55:af:a9:fe:d2:a8:0f:8d: 41:5e:e7:5e:1a:17:df:ab:de:e4:5d:49:e2:84:48:52:2b:fd: 2f:f4:bc:c3:fa:7d:7f:59:bd:83:c3:51:a8:6a:e6:f7:86:ec: fe:38:69:38:ba:8a:7a:f4:27:1d:7a:5c:04:26:da:3f:ec:b2: 40:05:94:24:86:97:99:e3:48:66:ba:08:a0:46:79:47:be:63: d0:74:b6:7b:8e:84:ff:9f:b8:d5:87:f4:bc:56:91:a2:88:bc: 44:1e:a2:94:02:b3:7a:1d:58:a5:2a:e8:c6:0d:ed:5f:e4:65: 9d:87:41:00:b7:83:72:5b:51:80:57:59:be:94:dd:9f:af:7e: f8:74:aa:86:84:23:bc:c1:91:49:03:e8:7e:39:1e:ad:63:37: 3e:39:ca:7d:a6:f3:36:6f:b0:51:4b:11:79:c5:9b:e4:c1:5d: c6:ae:17:0a:71:3d:f9:45:2c:e3:f6:db:b3:99:32:9a:38:89: 3c:b4:46:2d:80:06:17:dd:25:d0:7a:fe:ec:3c:e9:cb:f2:90: 38:45:e7:63:a0:5b:44:2c:fc:61:ca:3a:90:9c:bc:a3:47:6d: ec:a1:64:95:95:f3:de:6d:cc:db:01:14:ec:9d:00:f0:fe:46: 2a:c9:f9:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn14bMgNsIo8xKJPeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUyNDE0NDEzOFoXDTI1MDgyMjE0NDEzOFowLzEtMCsGA1UEAxMk N2EyYTkxMzItNzJkMS00OTkyLTk2ZmUtOTNiMGMxNTMzMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLeNquphtddUqOGUct6HWHsdbrtctuoXi1MK eIRSJ+2dW40K9JTljpI6cLc5O5YIawp8QGUEkFWVdh37S7Eo1GlNfxBdTtBjkerd NnxT9fNJR6KheXAqs+5IMflVP0KNfui7MckaExkAGUe8nKjs4RP4GP3XqJdjUqry S8t2o9bFduqi+GuOJg4gR6gJEEn1zqqi2pvB1CHZY2nhFBZ6VsQ+xDINfxB6kczJ u6TGwGi5uHkhI9vErUVP6ZMPFE++lYmYKPUVU4MOX0Bo5r9lpOclxmWViE2mZHxg jh5sei1sGra462gt0qguP0hd17UIRMzvNocynZPjLd0AOU1IvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNGBqjBeXc3RR4CTZPQy1lhGtrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGNmMmMwNTktOWIyZC0z MzU0LThkYzEtZTIwNmM5Mjg2ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj2Kr5hrtL6xzpVr6n+0qgPjUFe514aF9+r3uRdSeKESFIr/S/0vMP6 fX9ZvYPDUahq5veG7P44aTi6inr0Jx16XAQm2j/sskAFlCSGl5njSGa6CKBGeUe+ Y9B0tnuOhP+fuNWH9LxWkaKIvEQeopQCs3odWKUq6MYN7V/kZZ2HQQC3g3JbUYBX Wb6U3Z+vfvh0qoaEI7zBkUkD6H45Hq1jNz45yn2m8zZvsFFLEXnFm+TBXcauFwpx PflFLOP227OZMpo4iTy0Ri2ABhfdJdB6/uw86cvykDhF52OgW0Qs/GHKOpCcvKNH beyhZJWV895tzNsBFOydAPD+RirJ+aI= -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:28 2025 by rpki-client