$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3504d12f-489d-3a9a-abf3-943397f43995.roa File: 3504d12f-489d-3a9a-abf3-943397f43995.roa (raw, json) Hash identifier: 2reUaTyMtAsFkY4vliXDo3FyoaOwXanVxh14HQ96opQ= Subject key identifier: 72:E7:28:20:BF:0F:E8:52:3A:5A:31:A7:03:39:CF:31:19:DF:4D:7E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABBE000C15360C3E7AEE00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3504d12f-489d-3a9a-abf3-943397f43995.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 166.88.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:be:00:0c:15:36:0c:3e:7a:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=b9a35004-71a0-408d-9cb0-374d0e9820a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:65:06:d6:0d:b6:cf:e0:fb:ef:af:f1:82: 31:c7:4a:29:8f:82:e2:b6:c1:9f:71:de:49:96:bd: 72:0c:78:d5:a9:62:ac:96:9d:b3:20:5c:f4:76:17: 0e:1d:62:f1:e2:91:08:d1:1c:ee:84:84:a9:a6:0e: bd:4e:fc:5f:12:84:5e:1c:c8:33:b8:fe:72:c8:58: 4d:2b:e9:b1:02:1b:b3:8a:73:ba:6d:e8:8b:ce:62: c2:b0:41:6e:a7:0e:58:5f:10:49:6f:15:69:3f:99: db:a3:d9:03:a9:89:28:83:ba:09:4d:aa:ca:43:9c: b9:b6:78:1b:5e:61:dd:86:7b:0b:3e:aa:bb:94:99: ed:b1:ef:19:c0:c4:97:39:46:cd:8f:5d:62:a1:1a: 6c:83:78:57:39:df:6a:01:05:a6:53:92:1c:92:da: cf:da:88:ba:10:a9:05:41:d1:dd:85:53:35:c3:93: 9a:bd:14:ff:73:1f:0f:66:b9:7b:e6:fe:ca:a2:9d: 62:e4:30:37:47:8a:25:4d:f8:1b:92:3e:8a:b3:1a: 54:1d:b1:70:4e:4e:d8:b0:dc:59:d0:8b:10:d6:e4: 79:71:99:59:77:bd:f1:d7:fb:2d:d5:91:10:32:fc: df:65:2b:62:b5:28:91:43:ff:8e:7d:b2:ec:54:6d: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:28:20:BF:0F:E8:52:3A:5A:31:A7:03:39:CF:31:19:DF:4D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3504d12f-489d-3a9a-abf3-943397f43995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:89:91:41:96:c3:1f:8b:74:a2:50:84:33:ef:56:19:23:13: a9:d9:ed:f5:69:3c:ef:80:ce:d1:41:a8:e5:0f:5f:cf:f2:a9: 36:86:d0:2f:9a:fd:f3:97:c7:f5:2a:7b:01:d2:23:a5:56:4f: ad:91:a3:b5:6c:0e:ad:d3:8f:82:16:9f:67:4a:e1:51:83:29: f2:c6:db:13:fd:4b:10:f0:fa:42:8e:63:1e:d6:d5:8d:b3:7c: ae:2e:c0:6f:85:32:37:6d:63:be:63:65:51:63:9d:72:53:de: b8:7c:e5:c5:85:63:b6:58:89:e1:37:b4:57:ea:1d:b8:48:9d: e6:10:4c:60:dc:47:cc:71:0a:ee:7d:bf:b1:fc:91:1f:35:6d: d1:f5:2b:9f:76:dc:8e:c6:f0:ef:4c:9e:ee:74:9e:cc:84:2a: f9:c2:f7:ab:67:13:ee:92:82:fd:19:b1:8f:dc:3a:5e:49:72: 5d:66:ef:21:0b:9e:da:7a:d0:19:ba:6f:51:11:43:b2:78:61: 44:60:e8:43:65:cd:68:a7:4f:d2:8c:72:32:42:46:37:9b:26: b5:fe:b9:7b:da:8a:af:dc:f0:a3:10:4c:ad:b4:42:b7:57:9e: 3b:7f:49:47:29:90:29:b8:3b:ea:a3:1e:4e:96:10:be:7b:11: cd:c5:eb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq74ADBU2DD567gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YjlhMzUwMDQtNzFhMC00MDhkLTljYjAtMzc0ZDBlOTgyMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PJlBtYNts/g+++v8YIxx0opj4LitsGfcd5J lr1yDHjVqWKslp2zIFz0dhcOHWLx4pEI0RzuhISppg69TvxfEoReHMgzuP5yyFhN K+mxAhuzinO6beiLzmLCsEFupw5YXxBJbxVpP5nbo9kDqYkog7oJTarKQ5y5tngb XmHdhnsLPqq7lJntse8ZwMSXOUbNj11ioRpsg3hXOd9qAQWmU5IcktrP2oi6EKkF QdHdhVM1w5OavRT/cx8PZrl75v7Kop1i5DA3R4olTfgbkj6KsxpUHbFwTk7YsNxZ 0IsQ1uR5cZlZd73x1/st1ZEQMvzfZStitSiRQ/+OfbLsVG1SIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLnKCC/D+hSOloxpwM5zzEZ301+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzUwNGQxMmYtNDg5ZC0z YTlhLWFiZjMtOTQzMzk3ZjQzOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmJkUGWwx+LdKJQhDPvVhkjE6nZ7fVpPO+AztFBqOUPX8/yqTaG0C+a /fOXx/UqewHSI6VWT62Ro7VsDq3Tj4IWn2dK4VGDKfLG2xP9SxDw+kKOYx7W1Y2z fK4uwG+FMjdtY75jZVFjnXJT3rh85cWFY7ZYieE3tFfqHbhIneYQTGDcR8xxCu59 v7H8kR81bdH1K5923I7G8O9Mnu50nsyEKvnC96tnE+6Sgv0ZsY/cOl5Jcl1m7yEL ntp60Bm6b1ERQ7J4YURg6ENlzWinT9KMcjJCRjebJrX+uXvaiq/c8KMQTK20QrdX njt/SUcpkCm4O+qjHk6WEL57Ec3F60k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:52 2025 by rpki-client