$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa File: 06b1c120-81f7-34d6-8061-d254c264df23.roa (raw, json) Hash identifier: fEgyTBMX7oQ5IawoDffq/5vJ62nvC2jb8eRdG3tJgPg= Subject key identifier: 08:31:9A:36:B3:E5:BD:45:40:98:E5:C9:86:01:6E:7E:53:4B:0B:E6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848FBF1287226A8915DFE5A4480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 134351 IP address blocks: 166.88.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:28:72:26:a8:91:5d:fe:5a:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=e3aa2547-51bc-4a51-92da-0b447dcb83dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:69:a8:f8:ad:be:ee:2a:c7:58:66:c8:0f: 30:06:04:45:7a:ff:24:8f:eb:ea:aa:17:0c:f8:fc: 9c:fd:40:aa:e2:93:d9:0a:b2:8b:e4:1f:39:f3:86: 3c:07:ea:f9:77:8d:7a:04:d7:a3:6e:3e:47:2c:0a: ac:10:cc:42:e4:a2:5d:cf:14:c2:5a:ea:ad:eb:b2: ad:78:78:18:17:61:c5:02:04:5a:e6:32:02:50:14: 59:ad:ff:a9:33:d1:ea:f7:5f:3f:d3:1d:80:da:36: fd:33:21:29:68:e8:85:c1:2d:63:0d:7d:03:aa:6b: b5:29:62:89:d4:4b:5c:03:ff:5d:9f:2e:15:3d:50: 02:aa:51:1d:56:e1:ce:82:d6:c8:4e:94:9c:94:d2: d8:42:ce:13:43:ed:ff:3f:51:d8:28:ed:89:44:0f: 8a:38:18:eb:53:de:a9:0c:6b:97:bf:da:fb:c9:3f: a6:76:00:3d:43:7b:64:bb:9c:58:b0:59:a3:e8:5c: 5c:17:aa:25:36:c5:eb:fd:a6:f6:6a:43:f0:b7:95: 00:97:b4:89:c5:ff:14:75:cb:75:c0:dc:d3:8c:94: 0f:e3:c8:49:fd:8a:93:31:1d:32:17:8a:45:d9:7c: 2f:ee:f1:bc:85:6d:11:58:81:a4:a7:1f:88:0f:23: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:31:9A:36:B3:E5:BD:45:40:98:E5:C9:86:01:6E:7E:53:4B:0B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8c:5f:36:ce:6d:0b:d8:e8:e5:91:ae:c2:91:1d:38:29:52: 35:25:d8:e9:e8:55:64:b9:c5:c1:bd:e0:ba:fd:87:6c:eb:ef: 62:bf:61:82:b1:1f:28:0f:dc:25:76:86:bb:af:74:85:c9:15: 62:fb:4b:94:a6:d9:0e:f4:ce:a1:ca:9d:e0:03:aa:c2:09:af: a7:10:13:11:79:49:ef:1d:02:81:d2:78:23:8f:64:28:bb:61: ae:08:81:58:91:7b:c3:06:f3:6c:ca:41:fc:47:33:f3:20:6c: df:01:c2:d9:67:e5:c7:c5:a5:61:d6:70:4a:5c:ad:c7:c2:32: b0:6a:9c:6b:f0:ba:f0:25:18:9c:a1:46:42:3d:07:03:48:38: ca:a1:54:6f:1f:9d:de:59:42:3e:0a:14:d1:83:42:95:0c:fd: 20:c2:1a:e6:11:a7:08:ac:ef:23:b4:64:5b:f5:ce:90:f9:71: b6:a7:71:59:0a:6e:fb:01:42:e8:4f:d0:d2:b2:c2:c2:b7:fb: 58:a1:71:84:46:b0:e3:09:2a:c4:51:39:8e:08:96:4f:bc:dc: 7c:41:78:89:c0:56:8d:16:95:ea:53:b0:8b:73:fb:4d:9f:78: be:39:9c:a6:6f:8e:c6:94:f7:5f:4d:f1:f3:30:3f:4f:b5:be: a7:75:26:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78ShyJqiRXf5aRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZTNhYTI1NDctNTFiYy00YTUxLTkyZGEtMGI0NDdkY2I4M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9hpqPitvu4qx1hmyA8wBgRFev8kj+vqqhcM +Pyc/UCq4pPZCrKL5B8584Y8B+r5d416BNejbj5HLAqsEMxC5KJdzxTCWuqt67Kt eHgYF2HFAgRa5jICUBRZrf+pM9Hq918/0x2A2jb9MyEpaOiFwS1jDX0Dqmu1KWKJ 1EtcA/9dny4VPVACqlEdVuHOgtbITpSclNLYQs4TQ+3/P1HYKO2JRA+KOBjrU96p DGuXv9r7yT+mdgA9Q3tku5xYsFmj6FxcF6olNsXr/ab2akPwt5UAl7SJxf8Udct1 wNzTjJQP48hJ/YqTMR0yF4pF2Xwv7vG8hW0RWIGkpx+IDyP/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgxmjaz5b1FQJjlyYYBbn5TSwvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDZiMWMxMjAtODFmNy0z NGQ2LTgwNjEtZDI1NGMyNjRkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuMXzbObQvY6OWRrsKRHTgpUjUl2OnoVWS5xcG94Lr9h2zr72K/YYKx HygP3CV2hruvdIXJFWL7S5Sm2Q70zqHKneADqsIJr6cQExF5Se8dAoHSeCOPZCi7 Ya4IgViRe8MG82zKQfxHM/MgbN8Bwtln5cfFpWHWcEpcrcfCMrBqnGvwuvAlGJyh RkI9BwNIOMqhVG8fnd5ZQj4KFNGDQpUM/SDCGuYRpwis7yO0ZFv1zpD5cbancVkK bvsBQuhP0NKywsK3+1ihcYRGsOMJKsRROY4Ilk+83HxBeInAVo0WlepTsItz+02f eL45nKZvjsaU919N8fMwP0+1vqd1JmM= -----END CERTIFICATE-----Generated at Wed Apr 9 11:46:23 2025 by rpki-client