$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/164e3a50-b5dc-328d-94f7-2ff10ef36346.roa File: 164e3a50-b5dc-328d-94f7-2ff10ef36346.roa (raw, json) Hash identifier: nzOSr7c0YTDzFNzdYEZ4JC/DLIWt3iBTxPi0u5enoeg= Subject key identifier: DB:5D:CB:D7:15:4A:C8:06:20:AF:C8:D4:1F:5E:54:70:86:75:6F:B7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B76AB5DA4F611119D1B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/164e3a50-b5dc-328d-94f7-2ff10ef36346.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 166.88.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:76:ab:5d:a4:f6:11:11:9d:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=36e1dc28-42be-4efb-9da5-0db9a4adbf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:c4:47:68:7b:96:8a:be:1d:7d:51:68:bd: 2f:94:52:ac:9c:94:e6:bd:ea:e8:28:eb:db:fa:d1: 11:90:1f:52:6b:20:aa:24:5e:a0:16:56:f2:ac:46: f6:7f:b4:33:a8:b4:1d:e4:46:5c:1b:93:b2:7d:4e: aa:f7:57:35:21:63:b9:41:95:36:9c:6f:9f:6f:fc: 8e:0e:09:18:49:0a:7f:3f:bf:b8:31:f6:17:a6:23: a7:eb:da:35:54:e2:30:a1:b0:64:62:e5:0a:3e:f0: 9a:01:f3:c8:15:00:fd:29:60:29:2c:37:5c:b9:8f: ff:db:c7:b7:4f:d8:72:91:a3:4a:52:f8:4a:8d:ff: e8:46:9a:3c:fb:82:3c:e9:0d:da:f5:9b:99:b8:e1: 77:71:29:f2:37:ec:b6:80:05:cc:f0:aa:af:b5:00: a6:b5:1d:d2:2a:eb:82:3c:c5:a9:06:c7:ee:a3:b9: 56:b2:b4:6e:73:9e:d3:c5:66:95:51:d0:7e:5d:b9: 2c:42:5b:5b:8b:17:ae:44:c1:85:92:51:55:df:0c: bf:07:f2:9e:b7:3a:01:81:6e:63:06:c2:7f:c8:52: 6b:01:ab:f1:e3:1b:72:d4:c4:e1:a5:1f:37:cb:64: c5:45:c2:14:89:bf:78:0a:e9:00:2a:58:b5:71:04: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5D:CB:D7:15:4A:C8:06:20:AF:C8:D4:1F:5E:54:70:86:75:6F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/164e3a50-b5dc-328d-94f7-2ff10ef36346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e4:0e:d2:57:4d:bc:3e:ce:6e:a0:85:9c:c6:47:b8:a5:de: ed:99:74:e5:11:31:c2:f9:7a:df:0e:6c:24:09:38:04:48:a9: 14:60:d4:aa:7c:47:67:d9:ac:d9:51:1d:7d:41:a4:f7:3b:83: 28:d8:22:18:99:9c:0a:c4:2a:96:be:0e:10:2e:a5:77:ef:f2: 4a:9a:5a:55:6f:17:a6:27:a8:be:d5:6b:e3:90:22:6c:8b:29: ef:e0:67:aa:ea:13:49:0a:46:c7:c5:af:48:3e:7d:c6:85:0a: 21:08:0b:0c:e0:c1:f4:f3:8e:b7:c9:75:de:b1:81:73:98:20: 3a:39:32:00:17:ac:c6:96:59:85:72:93:12:6d:3c:3d:9b:df: 54:f8:82:90:06:ee:ab:74:9e:00:65:cb:13:b4:cc:22:9b:f6: 28:92:2d:14:dd:81:34:db:29:60:ea:52:9c:32:3c:5b:1b:76: 79:ff:ca:c6:ea:51:d5:30:8d:30:da:4d:5c:7f:4c:2f:d1:66: ad:64:96:3c:0e:ba:01:1a:35:45:0d:72:9a:e7:98:e1:22:47: 4e:3b:bc:91:fe:ce:91:87:84:48:d0:23:45:1d:3b:f2:9d:d1: 33:11:84:ec:3f:9b:9c:bd:4f:b1:bd:ce:e7:97:2b:98:b6:e7: ef:d2:9a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3arXaT2ERGdGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MzZlMWRjMjgtNDJiZS00ZWZiLTlkYTUtMGRiOWE0YWRiZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXzER2h7loq+HX1RaL0vlFKsnJTmveroKOvb +tERkB9SayCqJF6gFlbyrEb2f7QzqLQd5EZcG5OyfU6q91c1IWO5QZU2nG+fb/yO DgkYSQp/P7+4MfYXpiOn69o1VOIwobBkYuUKPvCaAfPIFQD9KWApLDdcuY//28e3 T9hykaNKUvhKjf/oRpo8+4I86Q3a9ZuZuOF3cSnyN+y2gAXM8KqvtQCmtR3SKuuC PMWpBsfuo7lWsrRuc57TxWaVUdB+XbksQltbixeuRMGFklFV3wy/B/KetzoBgW5j BsJ/yFJrAavx4xty1MThpR83y2TFRcIUib94CukAKli1cQRvXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtdy9cVSsgGIK/I1B9eVHCGdW+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTY0ZTNhNTAtYjVkYy0z MjhkLTk0ZjctMmZmMTBlZjM2MzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrkDtJXTbw+zm6ghZzGR7il3u2ZdOURMcL5et8ObCQJOARIqRRg1Kp8 R2fZrNlRHX1BpPc7gyjYIhiZnArEKpa+DhAupXfv8kqaWlVvF6YnqL7Va+OQImyL Ke/gZ6rqE0kKRsfFr0g+fcaFCiEICwzgwfTzjrfJdd6xgXOYIDo5MgAXrMaWWYVy kxJtPD2b31T4gpAG7qt0ngBlyxO0zCKb9iiSLRTdgTTbKWDqUpwyPFsbdnn/ysbq UdUwjTDaTVx/TC/RZq1kljwOugEaNUUNcprnmOEiR047vJH+zpGHhEjQI0UdO/Kd 0TMRhOw/m5y9T7G9zueXK5i25+/SmnA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:27 2025 by rpki-client