$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e40770-c123-37dd-bdc1-5fdabd4dc421.roa File: 17e40770-c123-37dd-bdc1-5fdabd4dc421.roa (raw, json) Hash identifier: 3Fbdz0ZvgQzucJDgfhhEMfoVUWiJtIEkaJAWjFRahcM= Subject key identifier: D8:9B:B8:47:04:6B:8C:12:3E:A0:C6:74:42:27:19:5B:24:B0:4F:3C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8D6203840BEB4395F880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e40770-c123-37dd-bdc1-5fdabd4dc421.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 149440 IP address blocks: 166.88.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8d:62:03:84:0b:eb:43:95:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=b331e413-7013-4f80-a650-4183b304a283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:81:8b:98:c4:ea:d8:5e:9a:39:52:59:e5: 33:12:0d:32:db:27:75:97:5a:68:cd:72:dd:bc:fb: f2:82:f9:1b:87:b1:b6:f4:74:7f:c8:76:b4:84:17: 4d:37:7c:42:86:00:00:4a:28:ef:48:ed:bb:7d:43: 33:51:93:c4:f1:c3:7d:5a:27:6e:1f:92:37:c1:3a: e5:0b:81:6c:0f:24:09:e6:ab:8a:36:0d:69:7f:fe: 37:2a:da:7b:86:41:b1:7b:fb:79:29:9e:0b:50:37: 1b:51:a9:83:b3:94:3c:70:7f:f2:30:f9:0d:8a:48: 30:b5:e8:ff:f8:67:fb:7b:af:38:87:3a:7e:ee:fa: 13:fc:c6:a2:c8:cf:c0:21:45:46:39:81:8d:72:6e: b0:f9:b7:1f:ff:92:e4:96:5b:0f:34:73:3d:db:40: 76:67:aa:d6:6b:4d:c0:1b:f9:2d:37:f3:65:09:06: dc:9d:9d:b7:34:d5:0f:0e:fe:9b:a4:f3:e4:3d:81: 05:41:ff:6d:77:f9:e4:39:c1:3b:8e:ae:26:6c:f8: de:12:dd:df:28:2e:c8:d3:02:59:f7:40:8c:7c:0f: c4:1d:83:69:9e:2d:aa:2d:5c:05:f3:4c:bc:82:02: ac:65:40:b8:c0:16:d8:8e:96:52:26:74:8e:20:1b: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9B:B8:47:04:6B:8C:12:3E:A0:C6:74:42:27:19:5B:24:B0:4F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17e40770-c123-37dd-bdc1-5fdabd4dc421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:08:68:e8:e4:40:7e:50:34:81:5b:a5:55:f5:05:bc:84:88: 4f:d9:4e:ad:49:4d:eb:3f:f8:46:7c:0b:0d:11:78:36:a6:59: 55:c6:3f:f1:77:27:63:0c:d7:a1:7c:d2:fb:d0:02:2f:91:62: a2:e1:f1:f4:92:bf:ea:61:b6:22:6c:33:2e:2b:4c:1f:75:5b: c0:83:cc:b1:68:32:3e:bf:22:a7:6f:2b:e4:06:0c:16:1f:70: e6:a2:bc:01:0e:2e:0b:da:85:31:83:63:c0:68:48:dc:da:db: 57:60:5d:af:41:00:88:6e:aa:45:d2:39:d6:41:ab:48:f1:93: 1d:1e:b4:3d:ba:ab:80:8f:5d:2c:fd:cf:14:ad:50:24:56:f3: 89:52:3f:2d:11:93:7a:28:2d:4d:1c:7d:90:4a:81:25:a0:9f: 73:9e:c2:e2:a4:a1:d2:08:21:c9:82:d7:b2:cf:93:4d:d7:4e: 33:a4:00:d3:50:b9:27:1b:f5:79:79:6e:7f:4c:d7:f5:d4:56: 9f:92:82:56:46:f8:30:6f:f3:87:d5:7b:34:49:3f:c0:a5:63: 93:74:b0:24:14:0e:64:6a:e8:63:cb:e5:ff:8d:c3:2a:ba:5c: 3e:a8:31:91:d7:98:57:7b:fb:50:80:a5:91:74:3e:0f:5d:f5: 77:bf:a7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i41iA4QL60OV+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YjMzMWU0MTMtNzAxMy00ZjgwLWE2NTAtNDE4M2IzMDRhMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApviBi5jE6themjlSWeUzEg0y2yd1l1pozXLd vPvygvkbh7G29HR/yHa0hBdNN3xChgAASijvSO27fUMzUZPE8cN9WiduH5I3wTrl C4FsDyQJ5quKNg1pf/43Ktp7hkGxe/t5KZ4LUDcbUamDs5Q8cH/yMPkNikgwtej/ +Gf7e684hzp+7voT/MaiyM/AIUVGOYGNcm6w+bcf/5LkllsPNHM920B2Z6rWa03A G/ktN/NlCQbcnZ23NNUPDv6bpPPkPYEFQf9td/nkOcE7jq4mbPjeEt3fKC7I0wJZ 90CMfA/EHYNpni2qLVwF80y8ggKsZUC4wBbYjpZSJnSOIBtKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNibuEcEa4wSPqDGdEInGVsksE88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTdlNDA3NzAtYzEyMy0z N2RkLWJkYzEtNWZkYWJkNGRjNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplg5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEIaOjkQH5QNIFbpVX1BbyEiE/ZTq1JTes/+EZ8Cw0ReDamWVXGP/F3 J2MM16F80vvQAi+RYqLh8fSSv+phtiJsMy4rTB91W8CDzLFoMj6/IqdvK+QGDBYf cOaivAEOLgvahTGDY8BoSNza21dgXa9BAIhuqkXSOdZBq0jxkx0etD26q4CPXSz9 zxStUCRW84lSPy0Rk3ooLU0cfZBKgSWgn3OewuKkodIIIcmC17LPk03XTjOkANNQ uScb9Xl5bn9M1/XUVp+SglZG+DBv84fVezRJP8ClY5N0sCQUDmRq6GPL5f+Nwyq6 XD6oMZHXmFd7+1CApZF0Pg9d9Xe/p+Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:41 2025 by rpki-client