$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31c1d109-165e-3f97-8fdf-6124a7043471.roa File: 31c1d109-165e-3f97-8fdf-6124a7043471.roa (raw, json) Hash identifier: wq7lFskq/itA0kv9uwupIuAz6ALohhWAiyInfMrVXb8= Subject key identifier: 14:78:F1:3A:80:E3:AB:3D:43:2A:6D:09:04:E3:71:FB:E1:06:00:0F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABBD5771F18AC078F27300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31c1d109-165e-3f97-8fdf-6124a7043471.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 166.88.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bd:57:71:f1:8a:c0:78:f2:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=1d7f818d-e5d1-47ee-8ae4-2139293842b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:b8:1f:9a:96:d7:7f:86:35:f4:b1:55:45: a8:ff:e9:13:d9:4d:f1:8b:39:81:92:c6:c2:b1:dc: 73:45:cf:f4:86:a7:19:8d:e5:1e:c2:7f:85:4d:c9: 8c:63:a9:ec:0c:f6:6f:be:cf:17:93:30:70:9e:fc: 38:dc:15:cc:c3:95:60:fb:cd:81:19:bd:cc:0c:c8: 4d:e1:28:8a:6e:b6:26:64:3f:c2:fe:ba:91:82:51: 30:12:3f:c7:b4:fe:82:a5:50:3a:d4:54:5e:e2:6c: 7c:90:8f:93:0d:99:cf:dc:54:3c:04:6b:a9:2e:8b: ee:0f:34:12:2e:0b:d2:18:21:66:b0:4b:1f:77:60: a5:c6:d6:07:d6:81:45:39:a4:1a:dc:5d:eb:50:a3: 02:e8:d2:68:a1:45:c0:63:ef:a7:63:c6:f5:4d:2e: f4:f3:d6:77:ee:4f:f3:fb:3b:1a:32:74:4e:e0:45: 4e:1d:a7:62:2a:4e:3f:ed:83:fc:d4:73:05:00:73: 7c:0e:2d:2f:01:21:3a:ec:55:56:40:a5:11:15:24: f8:7a:25:86:44:16:78:33:3f:32:77:16:f6:d0:0e: 1a:59:88:60:32:f1:41:0d:0b:83:7d:5e:56:09:f1: f2:06:19:01:1f:ba:87:10:b1:a8:05:39:d8:04:bb: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:F1:3A:80:E3:AB:3D:43:2A:6D:09:04:E3:71:FB:E1:06:00:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31c1d109-165e-3f97-8fdf-6124a7043471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:20:db:6d:d6:9c:07:a5:03:44:e2:5a:9d:87:45:39:7c:ca: 5d:9b:c9:a6:73:8a:ce:9c:e9:d0:8b:2a:3d:34:27:c6:60:c3: 74:e2:70:60:eb:7e:1e:ed:8d:6e:fd:fc:2a:b4:76:be:b9:cc: db:f1:ad:ca:af:0d:98:ba:9d:64:3c:7c:5c:62:8e:a6:bd:f5: bd:bf:10:0c:78:0d:80:3a:17:b4:3a:86:0b:4d:27:87:a6:17: 86:27:36:c7:ce:bd:4e:bc:76:30:f9:15:a7:ad:a0:e5:71:0c: ef:5f:f3:18:00:bf:e0:6e:cc:9f:90:2f:3d:fd:ab:4b:f4:88: e8:66:de:98:3b:05:14:8d:bd:18:db:04:39:0f:22:8d:db:77: 1d:4f:56:84:b9:5a:57:31:b8:be:26:3a:76:67:ac:07:36:8b: 25:20:ab:b3:fc:db:9a:bf:c7:75:fd:aa:ce:f9:9d:32:ea:a5: 68:9f:52:0e:2d:6a:15:a6:d9:7e:50:a9:07:da:66:a2:4e:9a: f7:43:04:78:e2:7f:bf:8e:1c:b6:67:0b:8c:96:3f:8e:47:66: 6c:1c:e6:a4:41:06:41:ac:a6:98:90:80:b8:d3:16:d8:09:94: 3b:dc:45:6a:1a:5e:2b:49:23:67:62:eb:43:60:26:fb:83:56: b4:87:0f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq71XcfGKwHjycwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MWQ3ZjgxOGQtZTVkMS00N2VlLThhZTQtMjEzOTI5Mzg0MmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkku4H5qW13+GNfSxVUWo/+kT2U3xizmBksbC sdxzRc/0hqcZjeUewn+FTcmMY6nsDPZvvs8XkzBwnvw43BXMw5Vg+82BGb3MDMhN 4SiKbrYmZD/C/rqRglEwEj/HtP6CpVA61FRe4mx8kI+TDZnP3FQ8BGupLovuDzQS LgvSGCFmsEsfd2ClxtYH1oFFOaQa3F3rUKMC6NJooUXAY++nY8b1TS7089Z37k/z +zsaMnRO4EVOHadiKk4/7YP81HMFAHN8Di0vASE67FVWQKURFST4eiWGRBZ4Mz8y dxb20A4aWYhgMvFBDQuDfV5WCfHyBhkBH7qHELGoBTnYBLvb1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR48TqA46s9QyptCQTjcfvhBgAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzFjMWQxMDktMTY1ZS0z Zjk3LThmZGYtNjEyNGE3MDQzNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIg223WnAelA0TiWp2HRTl8yl2byaZzis6c6dCLKj00J8Zgw3TicGDr fh7tjW79/Cq0dr65zNvxrcqvDZi6nWQ8fFxijqa99b2/EAx4DYA6F7Q6hgtNJ4em F4YnNsfOvU68djD5FaetoOVxDO9f8xgAv+BuzJ+QLz39q0v0iOhm3pg7BRSNvRjb BDkPIo3bdx1PVoS5WlcxuL4mOnZnrAc2iyUgq7P825q/x3X9qs75nTLqpWifUg4t ahWm2X5QqQfaZqJOmvdDBHjif7+OHLZnC4yWP45HZmwc5qRBBkGsppiQgLjTFtgJ lDvcRWoaXitJI2di60NgJvuDVrSHD9k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:19 2025 by rpki-client