$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32ff52ab-1296-38d3-806c-a92c03920adf.roa File: 32ff52ab-1296-38d3-806c-a92c03920adf.roa (raw, json) Hash identifier: TYHoEPAcVPUNtcWZOyXWXlunqU8e2uTOV65TsY/xs88= Subject key identifier: CA:E8:4F:70:09:E6:D9:C5:BB:17:0F:4E:A5:9C:47:76:BE:09:FB:05 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABBBD579EE8546E6B12800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32ff52ab-1296-38d3-806c-a92c03920adf.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 62240 IP address blocks: 166.88.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bb:d5:79:ee:85:46:e6:b1:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=09d5ab17-8142-4d21-8500-d8ff251bd6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:ad:e2:84:4c:9c:91:14:b4:91:05:1e:00: af:bc:32:51:d7:68:c3:1d:cd:fb:5c:e5:df:4d:90: 09:87:a5:85:bd:3c:e2:a4:af:04:11:3e:4e:2d:75: bf:ec:95:83:55:82:47:30:a0:45:78:66:18:55:0a: 15:16:1b:f1:63:90:cc:4d:f0:f0:cf:85:73:90:f3: 5e:72:17:ec:a4:b7:ce:08:ee:b7:19:ce:57:44:ca: 8f:9a:56:1f:8e:01:5b:2c:f9:bb:90:16:88:c5:5b: 97:be:d9:44:10:19:09:18:2c:b7:f4:84:68:4d:e6: f2:b5:04:28:97:85:b8:46:4b:07:31:22:3a:28:1e: b1:95:25:17:45:57:2b:10:06:5b:ee:36:a6:d4:a7: 7e:1e:af:c3:9f:ff:07:70:f8:58:47:e2:1c:f0:7e: 25:76:c3:0b:36:f0:91:37:3f:f5:24:9a:93:5c:71: f7:45:e0:1c:10:2d:5a:c3:a1:f9:19:3d:65:cc:77: 58:cf:ac:03:ec:85:ba:ec:cc:31:09:d6:a3:ad:54: 06:68:3e:94:07:a5:38:b1:4a:a7:ba:df:71:e5:47: 8d:61:5b:0a:55:15:4c:35:20:61:d0:bd:8e:d0:aa: a8:8f:65:cd:74:55:73:d8:ad:da:52:10:d8:77:75: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E8:4F:70:09:E6:D9:C5:BB:17:0F:4E:A5:9C:47:76:BE:09:FB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32ff52ab-1296-38d3-806c-a92c03920adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:42:aa:71:8a:27:97:30:2b:fa:72:52:e3:52:83:0f:0b:fc: cb:19:81:a2:09:6e:90:37:7f:8c:a5:d8:9c:58:d3:bb:ec:0b: a9:1e:0d:cc:fa:88:a1:3f:f9:46:b8:a4:36:48:5e:17:dc:51: ea:5a:27:ea:d0:2b:19:57:9d:7a:50:28:df:e0:a1:e0:13:6e: 07:c3:c7:6d:88:bc:04:8a:24:ac:03:7f:85:b5:41:d5:43:a1: 00:2c:e8:6f:a4:47:42:ee:97:d3:ea:31:87:f1:42:0f:ab:55: ea:85:44:a8:a1:45:d1:de:a0:38:2a:eb:2e:ea:0b:5e:ee:12: e0:19:cc:cb:26:5f:d0:c3:6e:ed:68:43:db:f2:f2:72:93:34: eb:03:86:10:77:18:63:d8:39:f6:aa:31:16:7b:29:a0:72:3e: a2:09:da:8e:b9:f4:dc:84:81:9d:95:1a:43:1d:76:21:7f:b7: 6c:3b:57:85:76:d1:2e:58:68:89:72:64:96:d9:b6:37:e4:6c: 71:5e:29:19:14:7b:2b:b5:84:7a:59:f0:dd:61:d6:99:cb:d2: db:7a:da:f0:79:65:36:c7:b0:10:a3:86:0a:e8:e1:5f:3d:52: ce:07:25:38:c0:7d:0b:5c:89:69:6b:3b:0d:ad:2e:04:d7:db: 4d:e8:92:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7vVee6FRuaxKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MDlkNWFiMTctODE0Mi00ZDIxLTg1MDAtZDhmZjI1MWJkNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV2t4oRMnJEUtJEFHgCvvDJR12jDHc37XOXf TZAJh6WFvTzipK8EET5OLXW/7JWDVYJHMKBFeGYYVQoVFhvxY5DMTfDwz4VzkPNe chfspLfOCO63Gc5XRMqPmlYfjgFbLPm7kBaIxVuXvtlEEBkJGCy39IRoTebytQQo l4W4RksHMSI6KB6xlSUXRVcrEAZb7jam1Kd+Hq/Dn/8HcPhYR+Ic8H4ldsMLNvCR Nz/1JJqTXHH3ReAcEC1aw6H5GT1lzHdYz6wD7IW67MwxCdajrVQGaD6UB6U4sUqn ut9x5UeNYVsKVRVMNSBh0L2O0Kqoj2XNdFVz2K3aUhDYd3XsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMroT3AJ5tnFuxcPTqWcR3a+CfsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzJmZjUyYWItMTI5Ni0z OGQzLTgwNmMtYTkyYzAzOTIwYWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9CqnGKJ5cwK/pyUuNSgw8L/MsZgaIJbpA3f4yl2JxY07vsC6keDcz6 iKE/+Ua4pDZIXhfcUepaJ+rQKxlXnXpQKN/goeATbgfDx22IvASKJKwDf4W1QdVD oQAs6G+kR0Lul9PqMYfxQg+rVeqFRKihRdHeoDgq6y7qC17uEuAZzMsmX9DDbu1o Q9vy8nKTNOsDhhB3GGPYOfaqMRZ7KaByPqIJ2o659NyEgZ2VGkMddiF/t2w7V4V2 0S5YaIlyZJbZtjfkbHFeKRkUeyu1hHpZ8N1h1pnL0tt62vB5ZTbHsBCjhgro4V89 Us4HJTjAfQtciWlrOw2tLgTX203okqk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:58 2025 by rpki-client