$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa File: 95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa (raw, json) Hash identifier: kG+3Pay2xlmiaMEv0KkyygWkXmN2MftOTND6dsygxu8= Subject key identifier: 75:8E:77:75:9E:97:6F:E5:F5:CE:45:B9:2C:87:E9:60:5C:1B:7E:37 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858492CAF28C2867761CE2869A6C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 26383 IP address blocks: 166.88.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:28:c2:86:77:61:ce:28:69:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=7de8c320-ec79-4e78-9fa0-c1df056f9137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:8a:cb:b4:2f:ab:70:68:37:d6:8f:a1:f6: 0c:c5:50:fd:4f:e0:78:85:ae:44:aa:6b:0c:f2:e4: 3f:75:64:b5:58:8a:50:22:01:08:0f:ac:b4:59:6c: bd:bc:70:20:12:cb:4d:d1:c6:47:c5:ea:97:bb:3d: 9e:23:d0:50:1f:b8:35:1b:c5:58:cb:b5:8b:b4:42: dd:aa:f6:20:54:f9:87:e9:0d:29:97:87:f4:42:bb: 63:fd:d2:4a:4b:eb:2a:d6:9a:66:b4:6e:24:8d:8c: 5a:c8:ea:9f:5d:59:fd:46:a6:07:e0:28:83:17:ad: 8c:0a:46:5d:46:f0:21:25:bf:95:a0:23:86:8c:a5: b1:61:21:85:f6:ee:4c:76:5a:6e:02:25:51:4e:59: de:8e:16:e7:f1:c9:37:30:ea:4e:16:03:23:8a:04: 0d:fe:7c:91:14:61:79:e9:11:88:5d:ee:64:c6:87: d0:ad:1e:f5:21:0e:1f:57:27:43:31:21:11:60:c9: 06:c9:e7:3d:d6:00:16:4a:b8:3e:ef:e6:22:7f:e9: 58:60:60:10:20:65:9a:d1:79:e0:3d:e1:23:86:f1: 83:8a:42:05:7b:c2:c8:62:f2:34:1e:4c:28:3a:54: 0f:bb:4e:13:55:e4:01:15:b8:cc:e6:e5:70:f0:21: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8E:77:75:9E:97:6F:E5:F5:CE:45:B9:2C:87:E9:60:5C:1B:7E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95fe41af-5c2a-35c9-b3da-10d61b9b57da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:07:34:b3:2e:3d:27:89:e8:29:ec:ce:45:1c:1e:06:55:10: 46:fd:21:10:e9:4c:d7:19:b7:df:bd:89:fb:5f:c5:52:62:94: d0:03:35:e8:a0:60:d8:73:b3:6b:46:12:e8:47:68:04:65:47: 4e:45:63:2c:4b:d0:e0:8e:2d:88:36:cc:7b:82:0d:c0:35:6d: 46:d2:5b:47:52:ef:ea:68:bc:e1:21:b5:e4:f4:6d:bd:e3:80: 46:a3:ba:37:5a:8c:3b:42:1f:6a:af:5a:d7:64:23:3c:24:da: 1a:20:f6:8b:18:4b:b6:14:75:75:d2:c7:5c:69:4e:6c:35:5e: a6:b1:87:e3:da:b5:bc:21:53:37:91:60:d9:58:b6:af:29:a0: b5:43:d6:29:f8:1d:7a:1d:d5:3b:cb:34:ef:07:71:6a:85:09: 48:24:37:0d:44:ff:9c:5e:01:a7:bc:f6:ff:62:7b:ab:12:b8: 81:3e:fa:ba:44:03:36:f2:87:cb:a4:93:b2:76:3a:99:23:cf: b2:bc:76:22:03:b1:11:f3:b6:65:84:cc:77:a7:d6:45:53:e6: 18:88:af:dc:bc:8c:89:8a:a9:e7:fc:80:f5:7b:06:e9:68:ef: b1:32:c7:32:c0:b5:7c:56:e2:1a:9b:22:3f:b9:91:9d:5c:2e: b2:48:64:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksryjChndhzihppsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2RlOGMzMjAtZWM3OS00ZTc4LTlmYTAtYzFkZjA1NmY5MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl6Ky7Qvq3BoN9aPofYMxVD9T+B4ha5EqmsM 8uQ/dWS1WIpQIgEID6y0WWy9vHAgEstN0cZHxeqXuz2eI9BQH7g1G8VYy7WLtELd qvYgVPmH6Q0pl4f0Qrtj/dJKS+sq1ppmtG4kjYxayOqfXVn9RqYH4CiDF62MCkZd RvAhJb+VoCOGjKWxYSGF9u5MdlpuAiVRTlnejhbn8ck3MOpOFgMjigQN/nyRFGF5 6RGIXe5kxofQrR71IQ4fVydDMSERYMkGyec91gAWSrg+7+Yif+lYYGAQIGWa0Xng PeEjhvGDikIFe8LIYvI0HkwoOlQPu04TVeQBFbjM5uVw8CF2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWOd3Wel2/l9c5FuSyH6WBcG343MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTVmZTQxYWYtNWMyYS0z NWM5LWIzZGEtMTBkNjFiOWI1N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwHNLMuPSeJ6CnszkUcHgZVEEb9IRDpTNcZt9+9iftfxVJilNADNeig YNhzs2tGEuhHaARlR05FYyxL0OCOLYg2zHuCDcA1bUbSW0dS7+povOEhteT0bb3j gEajujdajDtCH2qvWtdkIzwk2hog9osYS7YUdXXSx1xpTmw1Xqaxh+PatbwhUzeR YNlYtq8poLVD1in4HXod1TvLNO8HcWqFCUgkNw1E/5xeAae89v9ie6sSuIE++rpE Azbyh8ukk7J2Opkjz7K8diIDsRHztmWEzHen1kVT5hiIr9y8jImKqef8gPV7Bulo 77EyxzLAtXxW4hqbIj+5kZ1cLrJIZGU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:57 2025 by rpki-client