$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa File: 4120909a-da13-31c9-9ac4-d02ace972a6b.roa (raw, json) Hash identifier: 1KmdBMAf/MYJfiIQ51Jx+LEe8rw6Cj1Ig/QCBEMghgg= Subject key identifier: CD:1E:2C:75:32:D3:C6:FB:38:D2:1A:06:B5:A8:CE:C0:A1:8F:E9:62 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848653045BF87F1B2A9AC681840 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 26548 IP address blocks: 166.88.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:45:bf:87:f1:b2:a9:ac:68:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=737e60b4-ba0a-421e-925d-daaaed60435b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c1:56:b0:19:9a:6e:66:a0:c1:21:58:1d:51: 17:0c:76:6f:13:3c:0e:2b:89:02:48:54:f3:2b:be: 94:dc:ec:cb:b0:53:84:4c:a7:fd:4f:b0:b6:f7:63: 20:53:66:00:ca:da:05:31:f6:c3:f7:21:52:48:b3: 3c:e3:4a:2d:d9:75:77:40:f8:eb:39:84:ad:a4:67: c0:80:0e:ac:a3:23:2c:0f:63:b3:1c:66:b5:fd:35: 31:a1:b3:7c:45:96:16:f4:99:a7:34:48:eb:ca:d0: a9:30:e2:62:fb:06:d5:c2:64:a3:f1:f6:71:a9:52: 50:5d:f7:c8:ac:20:cc:8e:7b:5e:46:06:da:62:a0: e2:4b:8a:bc:11:c9:3b:e6:eb:c2:bf:be:79:40:94: c0:d4:1b:92:81:0e:9e:29:b7:2e:95:39:35:db:66: b4:ec:bf:71:e3:5e:b5:b7:23:85:8a:49:7c:d2:11: 42:2b:48:57:1c:23:32:11:b1:76:25:ce:50:31:0e: 9d:be:e4:5b:fd:c0:be:9f:45:5a:05:4d:71:e2:c8: 76:1b:0b:ae:42:3a:fe:42:61:46:44:cf:7e:bb:fb: d4:bf:86:39:aa:06:f0:7d:ac:39:1f:ad:4b:ef:70: a1:08:03:18:06:3c:55:ed:d1:a4:c9:b9:d7:77:2d: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1E:2C:75:32:D3:C6:FB:38:D2:1A:06:B5:A8:CE:C0:A1:8F:E9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4120909a-da13-31c9-9ac4-d02ace972a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e9:81:97:7e:62:63:07:b8:1a:a4:02:0e:9f:62:ea:96:6d: bb:ca:7a:73:15:e5:1f:a5:21:da:60:bb:52:dc:4e:97:b6:58: 52:c4:38:ef:1b:3f:49:ee:cc:cf:70:9e:b8:2a:e2:7b:6b:a8: da:c7:b2:05:be:14:0a:a3:71:96:dd:c0:5c:cd:04:96:20:f8: e8:e3:5c:0b:58:6b:c7:3e:3d:ae:bb:76:e9:d5:fc:fa:c2:33: ec:9d:24:44:32:d1:48:1a:e8:6c:76:3b:96:b3:ba:f1:db:9a: d6:f1:27:f9:f2:22:1d:ef:6b:b3:92:4c:7d:6b:39:36:30:26: 2f:45:39:31:1f:89:5c:4b:66:51:ff:cc:17:29:86:90:7c:c0: a8:e0:a2:ac:df:01:16:da:e0:4e:e1:a6:ef:19:68:7f:2e:54: ce:6e:9d:f0:19:a3:8c:5f:37:b2:ea:92:c3:32:6e:fd:9d:ff: e9:7f:83:2b:e9:d6:4b:49:7c:d6:31:4f:a9:1d:7d:59:07:23: 52:95:7d:da:4f:b2:70:08:de:59:8d:a2:7c:9c:99:6b:50:af: b1:6b:b3:eb:e2:fd:e0:01:dc:b2:bb:57:10:63:f8:73:fe:b4: c7:7b:a8:eb:64:ca:cb:52:f8:17:d5:cb:00:77:6d:53:61:1c: c0:5c:08:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEW/h/GyqaxoGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk NzM3ZTYwYjQtYmEwYS00MjFlLTkyNWQtZGFhYWVkNjA0MzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8FWsBmabmagwSFYHVEXDHZvEzwOK4kCSFTz K76U3OzLsFOETKf9T7C292MgU2YAytoFMfbD9yFSSLM840ot2XV3QPjrOYStpGfA gA6soyMsD2OzHGa1/TUxobN8RZYW9JmnNEjrytCpMOJi+wbVwmSj8fZxqVJQXffI rCDMjnteRgbaYqDiS4q8Eck75uvCv755QJTA1BuSgQ6eKbculTk122a07L9x4161 tyOFikl80hFCK0hXHCMyEbF2Jc5QMQ6dvuRb/cC+n0VaBU1x4sh2GwuuQjr+QmFG RM9+u/vUv4Y5qgbwfaw5H61L73ChCAMYBjxV7dGkybnXdy30OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0eLHUy08b7ONIaBrWozsChj+liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDEyMDkwOWEtZGExMy0z MWM5LTlhYzQtZDAyYWNlOTcyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvpgZd+YmMHuBqkAg6fYuqWbbvKenMV5R+lIdpgu1LcTpe2WFLEOO8b P0nuzM9wnrgq4ntrqNrHsgW+FAqjcZbdwFzNBJYg+OjjXAtYa8c+Pa67dunV/PrC M+ydJEQy0Uga6Gx2O5azuvHbmtbxJ/nyIh3va7OSTH1rOTYwJi9FOTEfiVxLZlH/ zBcphpB8wKjgoqzfARba4E7hpu8ZaH8uVM5unfAZo4xfN7LqksMybv2d/+l/gyvp 1ktJfNYxT6kdfVkHI1KVfdpPsnAI3lmNonycmWtQr7Frs+vi/eAB3LK7VxBj+HP+ tMd7qOtkystS+BfVywB3bVNhHMBcCBI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:13 2025 by rpki-client