$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f2f3d98-7e18-38d9-a0c6-393a0fcd2355.roa File: 3f2f3d98-7e18-38d9-a0c6-393a0fcd2355.roa (raw, json) Hash identifier: qojiQ7ifO+F080kZMTfs0WDG2JspI6xfOMXiVzWISJg= Subject key identifier: 95:5B:82:9C:50:EB:8D:89:A9:FF:47:C7:A9:B0:76:EF:F3:7D:40:27 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584898D61DE78B8F7D3F10438880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f2f3d98-7e18-38d9-a0c6-393a0fcd2355.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 57043 IP address blocks: 166.88.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1d:e7:8b:8f:7d:3f:10:43:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=0f3358e5-9f8d-410c-930a-062ac06f60e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:0e:33:f5:9b:09:56:d6:74:2b:cc:1c:48: 97:5c:1d:4c:21:72:e9:8a:77:ed:33:ed:29:44:f0: 4d:1b:41:a7:7c:be:c0:06:00:8f:70:34:8b:38:de: 3d:63:78:df:9a:26:dd:e4:a7:45:ba:7a:fb:14:dc: c5:35:be:c0:50:56:fa:ed:04:b4:70:c3:c3:e2:f6: e8:69:d5:36:76:52:46:18:d5:ee:a4:8b:e8:7c:e8: e6:a7:45:e8:f6:67:b8:78:d6:39:1b:95:e8:ba:f7: 2d:aa:de:19:90:73:10:71:9d:da:36:11:c7:0f:6a: 1f:1b:be:92:6d:6b:8b:bc:9b:f6:cd:24:04:e4:39: 5e:66:9d:2f:da:ec:ea:27:54:f9:1d:9b:3e:92:05: 0d:d6:6f:0a:4f:95:ab:a4:ae:49:71:f3:18:48:d6: c7:07:a1:f7:0d:ca:71:f0:39:73:5f:20:de:11:b6: ea:e1:56:1e:0d:1a:fe:33:31:33:74:0a:d7:9d:5c: 8b:2a:9f:ac:05:aa:e6:b3:8b:ac:e7:85:6c:3c:6b: 64:9e:66:96:3b:cf:eb:48:d6:b5:2d:e8:fb:39:1b: 29:43:ef:ef:79:73:a9:6c:87:bf:a9:4b:fe:e2:e3: e9:11:a7:d3:52:94:0b:5a:d3:b1:f1:28:a8:47:26: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:82:9C:50:EB:8D:89:A9:FF:47:C7:A9:B0:76:EF:F3:7D:40:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f2f3d98-7e18-38d9-a0c6-393a0fcd2355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:57:51:0a:90:39:f7:89:17:61:af:5c:e8:58:45:9b:c8:02: 00:b7:75:6b:e2:8e:29:4e:d6:2f:87:87:31:f5:02:b2:12:c1: 25:9e:2f:1d:de:d0:aa:44:84:6a:b6:d1:d1:f0:55:c5:84:dc: 32:bc:5c:c8:b7:56:24:77:34:99:d3:6e:62:c5:fe:4b:ce:50: 91:42:51:05:a2:01:a9:55:cb:5f:a2:91:94:aa:c1:60:fc:08: 61:20:70:67:fe:b6:2a:d7:f4:4b:d2:ea:75:05:38:d9:9c:59: 9b:1b:a0:3d:73:1a:4e:38:a3:e8:0f:b4:e5:70:85:83:29:77: dc:4a:86:b1:53:7c:3c:e9:b6:30:c8:fa:1a:5a:61:09:54:6b: 11:7d:06:b0:b9:10:6b:41:33:fb:2f:cc:46:00:e6:1e:a1:b5: f4:70:be:3d:13:b3:f3:0a:4f:f3:51:9d:54:bf:7f:2b:40:6b: 54:8f:51:5b:4c:dd:f5:60:bc:db:6d:94:e4:c3:86:ae:ea:e7: 38:ba:5d:f5:c1:bb:ac:bd:bc:2a:55:32:a4:60:29:47:d5:6e: d3:ec:1b:1b:16:04:75:b0:d8:0f:74:e6:70:a0:65:87:74:aa: 9e:7e:ae:82:47:70:cf:76:e6:bf:bb:23:6e:0d:15:12:01:56: e7:dd:04:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h3ni499PxBDiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MGYzMzU4ZTUtOWY4ZC00MTBjLTkzMGEtMDYyYWMwNmY2MGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNwOM/WbCVbWdCvMHEiXXB1MIXLpinftM+0p RPBNG0GnfL7ABgCPcDSLON49Y3jfmibd5KdFunr7FNzFNb7AUFb67QS0cMPD4vbo adU2dlJGGNXupIvofOjmp0Xo9me4eNY5G5Xouvctqt4ZkHMQcZ3aNhHHD2ofG76S bWuLvJv2zSQE5DleZp0v2uzqJ1T5HZs+kgUN1m8KT5WrpK5JcfMYSNbHB6H3Dcpx 8DlzXyDeEbbq4VYeDRr+MzEzdArXnVyLKp+sBarms4us54VsPGtknmaWO8/rSNa1 Lej7ORspQ+/veXOpbIe/qUv+4uPpEafTUpQLWtOx8SioRybo6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVbgpxQ642Jqf9Hx6mwdu/zfUAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2YyZjNkOTgtN2UxOC0z OGQ5LWEwYzYtMzkzYTBmY2QyMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApli6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFXUQqQOfeJF2GvXOhYRZvIAgC3dWvijilO1i+HhzH1ArISwSWeLx3e 0KpEhGq20dHwVcWE3DK8XMi3ViR3NJnTbmLF/kvOUJFCUQWiAalVy1+ikZSqwWD8 CGEgcGf+tirX9EvS6nUFONmcWZsboD1zGk44o+gPtOVwhYMpd9xKhrFTfDzptjDI +hpaYQlUaxF9BrC5EGtBM/svzEYA5h6htfRwvj0Ts/MKT/NRnVS/fytAa1SPUVtM 3fVgvNttlOTDhq7q5zi6XfXBu6y9vCpVMqRgKUfVbtPsGxsWBHWw2A905nCgZYd0 qp5+roJHcM925r+7I24NFRIBVufdBJs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:37 2025 by rpki-client