$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b408a0fb-3986-3250-b86f-1c1043d3716c.roa File: b408a0fb-3986-3250-b86f-1c1043d3716c.roa (raw, json) Hash identifier: gsr2kRD0kTWOVzubOIqXxHBD51+yUBJ7pOPnUij91xQ= Subject key identifier: 7D:AB:B7:EB:11:92:21:79:C9:75:F9:B7:21:6C:0E:A7:03:8A:0A:10 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849F5E1B285BB720AB77229AB80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b408a0fb-3986-3250-b86f-1c1043d3716c.roa Signing time: Sat 24 May 2025 14:41:37 +0000 ROA not before: Sat 24 May 2025 14:41:37 +0000 ROA not after: Fri 22 Aug 2025 14:41:37 +0000 asID: 214238 IP address blocks: 166.88.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:e1:b2:85:bb:72:0a:b7:72:29:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 24 14:41:37 2025 GMT Not After : Aug 22 14:41:37 2025 GMT Subject: CN=c91da5c1-e8d7-4fe3-bbed-85ee64879587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:6f:10:ef:a3:41:88:c8:be:b0:bf:cc:2c: 68:20:2d:71:c5:c7:ed:4c:97:b2:93:35:43:db:d7: ed:b2:09:96:57:c8:17:f0:b3:5e:a0:43:17:b8:82: 26:d1:da:9e:30:d0:94:b7:8e:22:ad:50:82:d7:6f: 5d:c9:47:de:9a:21:42:ed:70:b7:71:0e:f8:b6:aa: 1d:53:12:52:31:8b:17:8f:d4:07:8a:1e:cb:a4:f7: a4:e3:6b:fd:47:97:81:89:51:f2:0d:57:e8:4d:13: aa:9d:6b:0d:74:7a:a7:fe:86:26:b8:8a:42:f7:25: 3f:3f:b9:bf:a1:21:91:b7:fc:9c:31:68:b8:f6:88: 01:13:18:82:6b:4e:3c:c8:bb:04:ba:9b:d0:88:da: f0:b8:20:0d:2a:6c:cd:2a:07:b2:46:d5:ab:3e:9d: 9e:da:0f:23:a2:0b:b6:22:da:a6:f9:34:85:f8:05: d7:ae:ec:aa:a7:8a:a0:19:03:d2:a1:da:29:d6:31: 5e:ec:47:bc:d3:e9:41:e5:2d:8a:9b:b8:ce:45:7a: b1:fd:16:83:89:87:28:46:47:e0:82:8a:e9:92:f0: 62:2c:76:21:e4:65:8c:78:a4:3e:ad:54:f0:b9:15: 9f:af:4e:88:c6:4b:2e:00:32:0e:ca:23:5e:78:c9: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AB:B7:EB:11:92:21:79:C9:75:F9:B7:21:6C:0E:A7:03:8A:0A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b408a0fb-3986-3250-b86f-1c1043d3716c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:84:8b:82:5f:30:81:33:8a:0a:7d:91:ce:d2:c5:79:01:1b: ae:da:6c:70:b7:c9:89:39:6e:13:f6:31:df:a5:2a:30:8c:85: ab:e2:30:26:94:3d:e3:27:93:c9:b3:ab:be:45:50:1e:52:99: 94:f2:a0:59:17:fb:d7:69:21:3e:5f:dc:c6:f7:d2:85:eb:98: 78:9c:da:c5:e7:e4:0e:a4:90:a3:82:89:9d:6b:72:88:7b:fa: 2b:cd:bc:b5:1d:a2:61:29:52:9d:dc:78:04:81:4c:81:1d:38: 37:78:46:31:86:08:d4:d0:30:ea:de:60:f3:0e:be:28:8d:74: 2f:40:61:d7:74:94:b4:58:70:61:14:3c:42:2d:12:ae:46:ca: ff:2f:9b:f2:8f:b8:c4:a9:71:63:a3:53:51:33:36:d9:75:f2: 93:25:b9:a3:f3:b0:79:95:bc:01:a1:10:8f:99:6b:e2:e5:63: 51:d8:1f:8b:9d:67:cb:6b:d8:fb:b9:5d:c1:60:b3:57:f4:72: 0a:fc:f2:c8:26:d3:e6:18:b7:53:ac:48:44:28:80:56:2d:31: e2:2b:54:7e:de:17:22:d6:9d:77:01:26:1e:71:6b:36:72:d2: 61:bf:57:0b:cc:12:ec:5c:15:e6:e7:c4:2b:40:cc:2f:fa:ec: 29:db:9a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn14bKFu3IKt3Ipq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUyNDE0NDEzN1oXDTI1MDgyMjE0NDEzN1owLzEtMCsGA1UEAxMk YzkxZGE1YzEtZThkNy00ZmUzLWJiZWQtODVlZTY0ODc5NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4NvEO+jQYjIvrC/zCxoIC1xxcftTJeykzVD 29ftsgmWV8gX8LNeoEMXuIIm0dqeMNCUt44irVCC129dyUfemiFC7XC3cQ74tqod UxJSMYsXj9QHih7LpPek42v9R5eBiVHyDVfoTROqnWsNdHqn/oYmuIpC9yU/P7m/ oSGRt/ycMWi49ogBExiCa048yLsEupvQiNrwuCANKmzNKgeyRtWrPp2e2g8jogu2 Itqm+TSF+AXXruyqp4qgGQPSodop1jFe7Ee80+lB5S2Km7jORXqx/RaDiYcoRkfg gorpkvBiLHYh5GWMeKQ+rVTwuRWfr06IxksuADIOyiNeeMkbUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2rt+sRkiF5yXX5tyFsDqcDigoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjQwOGEwZmItMzk4Ni0z MjUwLWI4NmYtMWMxMDQzZDM3MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKEi4JfMIEzigp9kc7SxXkBG67abHC3yYk5bhP2Md+lKjCMhaviMCaU PeMnk8mzq75FUB5SmZTyoFkX+9dpIT5f3Mb30oXrmHic2sXn5A6kkKOCiZ1rcoh7 +ivNvLUdomEpUp3ceASBTIEdODd4RjGGCNTQMOreYPMOviiNdC9AYdd0lLRYcGEU PEItEq5Gyv8vm/KPuMSpcWOjU1EzNtl18pMluaPzsHmVvAGhEI+Za+LlY1HYH4ud Z8tr2Pu5XcFgs1f0cgr88sgm0+YYt1OsSEQogFYtMeIrVH7eFyLWnXcBJh5xazZy 0mG/VwvMEuxcFebnxCtAzC/67CnbmmA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:19:30 2025 by rpki-client