$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/42897673-c89a-3582-ad98-160e3a570366.roa File: 42897673-c89a-3582-ad98-160e3a570366.roa (raw, json) Hash identifier: 7oVBUQUvMSH+6vNLXZ1Wd2CYf4kdpMZqJ9YhBBQWzu0= Subject key identifier: 00:9D:23:A3:C7:6E:F3:45:E3:00:00:16:FE:AB:38:CD:8E:83:71:2A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848C6E63C89DAE1CF1905DAED00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/42897673-c89a-3582-ad98-160e3a570366.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 149440 IP address blocks: 166.88.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:3c:89:da:e1:cf:19:05:da:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=2e667e22-b221-4677-97d6-f74cc2b8c018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:1c:95:91:61:e9:ce:2a:a0:70:7d:72:61: c6:11:59:ed:18:af:0b:42:fe:a6:e6:1d:d7:f4:53: 9c:4a:64:d9:a4:48:92:4f:61:f7:4c:a6:d9:a2:73: 76:67:d9:af:fc:d1:bb:fb:e0:05:7b:81:a5:96:1a: f8:cf:d2:a6:00:6f:b5:65:71:51:1a:30:2e:8e:80: ec:3d:de:df:c8:1e:7b:80:15:f7:a3:b2:a9:f5:23: 6d:30:ae:3b:0f:42:d1:9b:14:5a:bb:02:8f:c2:e3: 49:f4:54:70:e4:6a:e4:af:2f:85:2f:b7:da:33:bb: 21:5c:54:77:6b:02:f6:d1:a4:f8:b6:0d:b5:f8:f8: bd:33:be:fd:9e:94:80:f9:f6:92:84:bd:bb:8b:b3: 0f:f6:32:bb:2f:c2:9a:0f:c3:be:43:72:9b:39:1f: 2e:82:e0:7f:0f:85:50:12:6e:dc:eb:20:47:73:18: cb:fc:d3:11:18:42:de:7b:b4:16:2b:41:bb:53:79: 6d:75:07:f5:dd:95:53:b5:8c:ae:88:1e:c2:c4:4f: 6a:00:dc:0a:c1:1f:c1:83:81:3d:c2:6d:55:30:3a: 33:52:38:c2:2b:17:46:05:bc:5a:05:11:d0:49:d5: fa:2e:ff:35:3e:34:ec:7d:e4:ed:0d:b6:ac:24:88: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9D:23:A3:C7:6E:F3:45:E3:00:00:16:FE:AB:38:CD:8E:83:71:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/42897673-c89a-3582-ad98-160e3a570366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4f:63:e7:b3:c4:ff:e2:67:fa:ba:2f:82:8c:41:73:c3:3c: 29:f2:85:db:0c:69:cc:35:87:a2:3d:8e:17:18:e6:e8:7a:8b: 55:4c:fb:ee:cd:e2:c7:c9:2d:98:fe:54:23:94:74:df:30:5c: bf:f4:f1:21:41:61:a3:93:92:fa:0a:b6:ec:fe:e0:3e:ec:b0: 75:ad:ed:f1:43:b5:0e:4a:65:96:2b:ef:cf:90:28:84:e5:59: 23:b7:80:2c:7c:f6:8c:36:f4:3e:70:c4:21:ab:67:6b:22:e4: 5a:73:7b:2c:e9:10:45:f5:d9:95:47:a4:49:ff:b1:87:38:f4: 74:16:5f:85:ef:16:fa:bd:83:15:52:27:9f:33:fc:ea:b2:cf: 13:6a:26:05:98:c6:d5:2a:34:8f:48:99:28:81:8d:71:94:38: 54:c2:42:67:f1:c7:14:a7:45:ec:da:46:7a:2b:5d:c6:9b:57: cd:c1:57:03:dc:72:02:7c:01:29:8d:32:61:e8:19:5c:1c:fa: f8:33:59:c0:92:f4:d6:bb:62:ac:9c:0d:fb:16:ce:af:5d:ed: 8f:2a:4c:bc:23:c4:21:15:ac:22:da:d5:0f:9f:7e:f6:43:f8: 8d:35:f9:e6:a1:78:ab:c4:ad:07:1c:c1:db:1c:a0:c0:3b:4d: 36:95:06:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jyJ2uHPGQXa7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk MmU2NjdlMjItYjIyMS00Njc3LTk3ZDYtZjc0Y2MyYjhjMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIUclZFh6c4qoHB9cmHGEVntGK8LQv6m5h3X 9FOcSmTZpEiST2H3TKbZonN2Z9mv/NG7++AFe4Gllhr4z9KmAG+1ZXFRGjAujoDs Pd7fyB57gBX3o7Kp9SNtMK47D0LRmxRauwKPwuNJ9FRw5Grkry+FL7faM7shXFR3 awL20aT4tg21+Pi9M779npSA+faShL27i7MP9jK7L8KaD8O+Q3KbOR8uguB/D4VQ Em7c6yBHcxjL/NMRGELee7QWK0G7U3ltdQf13ZVTtYyuiB7CxE9qANwKwR/Bg4E9 wm1VMDozUjjCKxdGBbxaBRHQSdX6Lv81PjTsfeTtDbasJIjYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACdI6PHbvNF4wAAFv6rOM2Og3EqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI4OTc2NzMtYzg5YS0z NTgyLWFkOTgtMTYwZTNhNTcwMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1PY+ezxP/iZ/q6L4KMQXPDPCnyhdsMacw1h6I9jhcY5uh6i1VM++7N 4sfJLZj+VCOUdN8wXL/08SFBYaOTkvoKtuz+4D7ssHWt7fFDtQ5KZZYr78+QKITl WSO3gCx89ow29D5wxCGrZ2si5FpzeyzpEEX12ZVHpEn/sYc49HQWX4XvFvq9gxVS J58z/OqyzxNqJgWYxtUqNI9ImSiBjXGUOFTCQmfxxxSnRezaRnorXcabV83BVwPc cgJ8ASmNMmHoGVwc+vgzWcCS9Na7YqycDfsWzq9d7Y8qTLwjxCEVrCLa1Q+ffvZD +I01+eaheKvErQccwdscoMA7TTaVBow= -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:51 2025 by rpki-client