$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa File: 29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa (raw, json) Hash identifier: kXriSRPvd4VF6H+FBdpkFEYrKAA0tjJ3ZSHtij6hJhg= Subject key identifier: 12:65:62:80:32:2F:DF:4C:1B:F3:8A:CF:01:F1:E1:A0:74:AA:02:E5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848A6CB6FB314F9B4F3863BE140 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 10557 IP address blocks: 166.88.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6f:b3:14:f9:b4:f3:86:3b:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=b9d3a9f0-ea50-4a2c-b200-3742141c81f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:3a:54:b1:45:27:12:48:14:45:99:89:5b: 0a:3e:e8:bf:89:6f:af:be:7e:78:66:6c:25:6d:f8: f0:2b:65:e2:8f:2b:ad:dd:ad:eb:41:aa:48:c8:4e: 85:8d:1b:fd:c7:e5:5d:1a:40:33:f2:6d:ff:58:12: 8d:24:07:0c:3f:2e:95:3e:37:1d:31:58:82:fb:08: 27:d1:d2:19:06:f9:3a:fe:08:67:33:aa:7d:7e:44: 40:55:ee:99:e9:ae:14:85:cb:42:c0:fb:34:92:48: c8:9f:3b:a0:f2:f1:72:7c:9a:dc:d2:82:78:1b:94: 3c:7d:68:55:5e:28:af:98:b8:e1:ad:dd:ab:50:b5: 4b:0c:c0:11:67:12:51:1e:15:1d:27:ce:f5:1c:77: 5e:1d:24:c2:78:ab:b7:32:bc:97:03:1d:ab:94:e9: 97:b8:b8:74:be:23:3f:f1:cc:30:1f:20:80:74:d5: 98:78:92:a9:09:8c:18:a1:78:2e:89:83:b3:ae:04: d6:32:c7:87:d9:ba:d6:7b:d8:15:d9:31:f2:cd:e3: d6:2a:f4:3e:93:2d:8c:e8:f0:5f:53:75:6c:2a:db: f9:da:2a:bb:f4:9d:5a:15:ee:05:36:be:e9:33:74: 14:22:bf:92:21:f7:23:75:ad:44:64:ef:8d:19:84: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:62:80:32:2F:DF:4C:1B:F3:8A:CF:01:F1:E1:A0:74:AA:02:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29239b6a-e7d8-3a0b-9730-970c9681e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bc:0a:ca:63:74:3d:c4:52:84:4d:4b:26:35:63:49:aa:77: b9:9b:92:dc:5b:de:93:be:00:bd:bf:59:d2:ab:f4:0f:06:19: 20:25:4a:5b:30:8e:62:e1:4f:5f:18:5e:90:10:15:81:43:97: 0d:bc:62:8c:d6:aa:ab:04:db:11:4f:84:74:54:40:43:ca:32: 92:5a:89:37:7c:76:99:d7:95:eb:cf:85:de:a1:72:95:f7:1b: d4:65:74:e0:0c:15:e6:8c:c0:75:ef:34:1b:58:03:d7:f2:bf: d0:8a:e5:ad:f8:dd:62:bc:34:bc:f1:07:78:5f:18:ce:82:d9: c3:44:09:77:a3:36:83:83:f3:80:5d:3b:27:f4:b6:d3:49:0d: a1:a9:35:71:0c:7a:02:7b:80:b9:0e:25:c5:af:43:3e:35:b7: fc:a8:60:4f:5c:58:2a:eb:21:19:e1:1e:c6:77:7a:40:17:4e: f5:9a:c9:24:ba:25:68:fa:15:bd:3e:48:da:c3:16:68:b6:ec: 45:3a:5c:85:d6:64:59:ad:d2:2d:8a:cc:2d:37:7c:2f:48:79: cd:75:a9:18:54:6c:a2:11:0d:25:2a:e7:a8:0b:65:49:be:5f: 4c:1e:7f:dd:ee:c7:e0:d2:10:f2:95:20:a6:0b:32:d8:2d:79: f6:ed:04:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2+zFPm084Y74UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk YjlkM2E5ZjAtZWE1MC00YTJjLWIyMDAtMzc0MjE0MWM4MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthQ6VLFFJxJIFEWZiVsKPui/iW+vvn54Zmwl bfjwK2Xijyut3a3rQapIyE6FjRv9x+VdGkAz8m3/WBKNJAcMPy6VPjcdMViC+wgn 0dIZBvk6/ghnM6p9fkRAVe6Z6a4UhctCwPs0kkjInzug8vFyfJrc0oJ4G5Q8fWhV XiivmLjhrd2rULVLDMARZxJRHhUdJ871HHdeHSTCeKu3MryXAx2rlOmXuLh0viM/ 8cwwHyCAdNWYeJKpCYwYoXguiYOzrgTWMseH2brWe9gV2THyzePWKvQ+ky2M6PBf U3VsKtv52iq79J1aFe4FNr7pM3QUIr+SIfcjda1EZO+NGYS2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJlYoAyL99MG/OKzwHx4aB0qgLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjkyMzliNmEtZTdkOC0z YTBiLTk3MzAtOTcwYzk2ODFlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO8CspjdD3EUoRNSyY1Y0mqd7mbktxb3pO+AL2/WdKr9A8GGSAlSlsw jmLhT18YXpAQFYFDlw28YozWqqsE2xFPhHRUQEPKMpJaiTd8dpnXlevPhd6hcpX3 G9RldOAMFeaMwHXvNBtYA9fyv9CK5a343WK8NLzxB3hfGM6C2cNECXejNoOD84Bd Oyf0ttNJDaGpNXEMegJ7gLkOJcWvQz41t/yoYE9cWCrrIRnhHsZ3ekAXTvWaySS6 JWj6Fb0+SNrDFmi27EU6XIXWZFmt0i2KzC03fC9Iec11qRhUbKIRDSUq56gLZUm+ X0wef93ux+DSEPKVIKYLMtgtefbtBFI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:55 2025 by rpki-client