$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa File: 424f8058-950b-3da7-9d49-5b107b6ab80b.roa (raw, json) Hash identifier: bNIkkB4mw+M1KadCXS3tHnSZbsbxBjcOIvG9q+HQ9dE= Subject key identifier: 81:6E:D7:9F:06:83:2D:8D:E3:2D:91:C5:34:C8:71:17:E3:CD:AB:27 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2BA9761B72E9094F06FCA8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 166.88.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:a9:76:1b:72:e9:09:4f:06:fc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=0c6db765-a21b-47fb-a576-0b92ef7a38e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:96:43:1f:53:3c:d7:62:27:c2:25:75:7e: 64:b6:40:bc:38:b5:17:4c:bf:be:ba:16:e6:08:6d: ee:4f:11:06:4f:61:67:12:13:24:40:97:38:41:a4: a0:78:94:a9:88:4f:38:e8:42:5c:75:13:85:76:5b: f8:fd:f3:d2:fa:fa:b8:d2:4b:85:58:0f:93:fd:d2: 94:2c:70:5f:be:94:c5:05:15:07:f9:bb:6d:9d:f1: 3c:c2:45:79:a2:b7:71:0f:3c:29:b7:dd:77:55:3b: 5b:40:0c:1a:06:10:d1:17:9e:af:65:0b:6e:a7:6c: da:19:78:f6:56:22:83:c5:dc:8e:0e:66:51:91:b6: 70:2a:7c:27:83:ee:a7:ec:82:b3:14:d8:7e:09:86: 2e:47:7e:3e:f3:4d:ca:d2:bd:ad:c2:63:27:0e:b5: 83:48:fe:c0:a4:89:0d:ba:e9:37:1d:b5:7b:e6:7e: 91:ad:d8:55:fb:a6:44:80:66:1a:89:b6:b1:b6:ac: 8e:3d:07:92:2e:0b:d1:87:cb:b4:28:45:6c:c8:2f: de:13:cb:e7:cc:0b:1c:d6:ef:70:b4:a2:ac:d1:ca: 8d:c0:fc:8f:6e:92:78:b9:e4:fe:ea:bd:7b:bd:dc: dd:b3:46:2b:05:ea:cc:00:42:33:e6:6d:84:ab:28: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6E:D7:9F:06:83:2D:8D:E3:2D:91:C5:34:C8:71:17:E3:CD:AB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/424f8058-950b-3da7-9d49-5b107b6ab80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3f:fd:7e:7c:36:35:d4:53:7e:ac:4f:a9:a7:de:86:d5:51: 22:89:ad:20:d2:90:5d:9e:8f:a0:42:2a:09:08:df:93:ce:9a: 73:2d:b1:40:42:c9:12:28:77:d0:1a:27:4b:0d:25:48:1c:96: 3a:71:f9:0f:de:62:21:a2:1f:74:61:bb:c6:5e:4e:6a:d8:2b: ed:f0:a0:66:80:18:f7:b9:38:0f:33:2b:1f:77:e1:a0:7e:90: 19:05:98:ab:6f:28:98:0e:4d:a0:0b:9d:7b:9f:d1:7c:5e:6a: ea:5e:92:e5:7c:86:c5:66:f8:61:b8:48:15:f9:a4:f3:05:84: c5:eb:27:7a:57:c9:56:58:b6:ca:14:05:46:02:08:46:9a:16: 38:7a:0b:c8:20:3e:9b:6b:ae:19:a7:a4:83:5f:1a:c1:fc:88: 37:44:bd:bb:6d:83:27:ea:76:da:45:09:ef:61:16:f5:1a:f8: d1:8c:54:a7:f7:02:c9:83:3c:6b:c3:3f:21:b3:c7:0b:8b:bb: c2:c9:1f:7d:55:44:e7:6a:ba:91:c0:8b:30:e3:cb:81:c3:fd: cb:b9:80:d7:ea:c6:88:86:0c:c1:cb:f9:01:b0:4e:3f:82:c1: 9e:64:c9:ba:e8:a5:0f:8b:5d:ff:b8:89:f1:13:1b:40:59:5e: 7d:81:bd:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6l2G3LpCU8G/KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MGM2ZGI3NjUtYTIxYi00N2ZiLWE1NzYtMGI5MmVmN2EzOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz2WQx9TPNdiJ8IldX5ktkC8OLUXTL++uhbm CG3uTxEGT2FnEhMkQJc4QaSgeJSpiE846EJcdROFdlv4/fPS+vq40kuFWA+T/dKU LHBfvpTFBRUH+bttnfE8wkV5ordxDzwpt913VTtbQAwaBhDRF56vZQtup2zaGXj2 ViKDxdyODmZRkbZwKnwng+6n7IKzFNh+CYYuR34+803K0r2twmMnDrWDSP7ApIkN uuk3HbV75n6RrdhV+6ZEgGYaibaxtqyOPQeSLgvRh8u0KEVsyC/eE8vnzAsc1u9w tKKs0cqNwPyPbpJ4ueT+6r17vdzds0YrBerMAEIz5m2EqyjYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFu158Ggy2N4y2RxTTIcRfjzasnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI0ZjgwNTgtOTUwYi0z ZGE3LTlkNDktNWIxMDdiNmFiODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw//X58NjXUU36sT6mn3obVUSKJrSDSkF2ej6BCKgkI35POmnMtsUBC yRIod9AaJ0sNJUgcljpx+Q/eYiGiH3Rhu8ZeTmrYK+3woGaAGPe5OA8zKx934aB+ kBkFmKtvKJgOTaALnXuf0XxeaupekuV8hsVm+GG4SBX5pPMFhMXrJ3pXyVZYtsoU BUYCCEaaFjh6C8ggPptrrhmnpINfGsH8iDdEvbttgyfqdtpFCe9hFvUa+NGMVKf3 AsmDPGvDPyGzxwuLu8LJH31VROdqupHAizDjy4HD/cu5gNfqxoiGDMHL+QGwTj+C wZ5kybropQ+LXf+4ifETG0BZXn2Bvag= -----END CERTIFICATE-----Generated at Sat Apr 5 02:54:12 2025 by rpki-client