$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4338e3bb-3217-3180-94e4-0802856e4b01.roa File: 4338e3bb-3217-3180-94e4-0802856e4b01.roa (raw, json) Hash identifier: UjOv9gYLm5MPOqqMS6uQlA2eQOgwQqH0xDBE/uzEuDA= Subject key identifier: 7B:AE:BD:C2:AD:20:92:64:9B:C1:82:21:D9:A6:E6:19:35:D5:46:F6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B769981F3CD30B9108A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4338e3bb-3217-3180-94e4-0802856e4b01.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 166.88.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:76:99:81:f3:cd:30:b9:10:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=5337f406-86a4-4bbe-a2fb-c8b72c13078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:3b:93:2a:1e:5c:b9:da:9b:30:13:9c:fe: f7:23:ff:c7:3d:bd:de:80:00:ad:64:2e:e2:06:9d: c9:65:75:fd:03:1a:e8:a2:7b:42:1d:b7:8a:2f:88: 24:88:36:ab:51:9d:1d:2b:ea:32:fe:f1:59:3e:4f: 50:b1:d1:4a:68:e0:55:a6:60:9a:ce:42:53:e2:6b: 62:28:c8:b9:ad:d0:03:66:8d:e8:b4:ad:50:c6:69: 58:e3:f7:30:7f:ed:2a:35:7d:30:05:cf:8f:d4:ec: 7a:78:de:43:d8:61:a7:e1:f3:01:56:1f:a4:a5:a1: ba:fd:67:31:43:65:3e:f1:c5:5e:c4:44:56:99:e0: f4:f1:e7:d9:af:05:41:c3:40:89:42:d0:bf:f8:6d: a0:75:2f:c0:cd:d3:e1:38:42:d0:3c:84:cf:f5:72: 63:e8:5b:4a:9f:a3:ac:ee:b9:3c:5c:19:d4:1b:b7: ef:82:eb:c2:0c:78:b5:6a:00:b0:5a:f3:3f:bb:82: 55:17:fb:07:17:4f:bc:6f:19:b2:5a:d3:f7:86:ac: 0a:86:45:85:7c:77:8a:47:3a:c8:e0:f9:45:9e:65: d5:e9:6a:5c:9d:98:c7:3a:43:21:0d:37:fe:f5:73: dd:2e:d0:45:0f:80:4f:a9:81:79:74:0f:9f:68:ea: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AE:BD:C2:AD:20:92:64:9B:C1:82:21:D9:A6:E6:19:35:D5:46:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4338e3bb-3217-3180-94e4-0802856e4b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:81:a1:b2:7e:83:f4:1a:f9:b9:be:b7:fa:14:a5:8c:56:d7: f4:bf:8a:22:b4:ad:aa:2d:bd:c7:12:3d:05:50:9f:42:08:3b: 7f:69:a1:5d:69:12:06:70:55:59:87:a2:92:72:06:86:c7:fd: 98:68:9a:a8:56:b9:48:75:bd:c4:4b:e7:13:82:3b:d2:de:d2: 25:c7:9f:66:9d:94:14:6d:e8:f7:51:79:e8:2f:c3:25:0b:90: 85:f3:ae:b7:16:a5:a5:ee:c0:f4:ea:6a:6d:18:33:69:b9:c1: 75:67:b6:50:6a:e2:09:4f:6c:86:05:e9:21:c1:a6:f8:e3:a9: 31:a4:b9:0b:44:38:2c:70:d6:63:9b:0b:e8:30:6e:2a:80:be: 54:e2:24:ec:af:dc:58:91:9c:92:b9:98:22:23:1b:7d:4e:0c: 51:26:5c:1c:99:00:b2:e9:47:19:32:0c:7f:a0:b0:ab:c7:24: a1:fa:fa:5d:bd:c5:52:a6:0b:97:0d:6f:f3:bf:b7:54:04:85: 9e:c8:aa:66:85:1b:75:af:c1:70:32:45:c1:43:83:4b:6f:7a: 3e:fc:65:51:b9:6f:e2:b4:d2:f4:05:11:f7:ce:68:58:a5:5f: bb:b6:da:d9:48:be:53:e2:2a:f5:f1:82:7c:88:b4:3f:a6:24: 4a:c2:39:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3aZgfPNMLkQigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk NTMzN2Y0MDYtODZhNC00YmJlLWEyZmItYzhiNzJjMTMwNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHQ7kyoeXLnamzATnP73I//HPb3egACtZC7i Bp3JZXX9AxroontCHbeKL4gkiDarUZ0dK+oy/vFZPk9QsdFKaOBVpmCazkJT4mti KMi5rdADZo3otK1QxmlY4/cwf+0qNX0wBc+P1Ox6eN5D2GGn4fMBVh+kpaG6/Wcx Q2U+8cVexERWmeD08efZrwVBw0CJQtC/+G2gdS/AzdPhOELQPITP9XJj6FtKn6Os 7rk8XBnUG7fvguvCDHi1agCwWvM/u4JVF/sHF0+8bxmyWtP3hqwKhkWFfHeKRzrI 4PlFnmXV6WpcnZjHOkMhDTf+9XPdLtBFD4BPqYF5dA+faOo9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuuvcKtIJJkm8GCIdmm5hk11Ub2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDMzOGUzYmItMzIxNy0z MTgwLTk0ZTQtMDgwMjg1NmU0YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuBobJ+g/Qa+bm+t/oUpYxW1/S/iiK0raotvccSPQVQn0IIO39poV1p EgZwVVmHopJyBobH/ZhomqhWuUh1vcRL5xOCO9Le0iXHn2adlBRt6PdReegvwyUL kIXzrrcWpaXuwPTqam0YM2m5wXVntlBq4glPbIYF6SHBpvjjqTGkuQtEOCxw1mOb C+gwbiqAvlTiJOyv3FiRnJK5mCIjG31ODFEmXByZALLpRxkyDH+gsKvHJKH6+l29 xVKmC5cNb/O/t1QEhZ7IqmaFG3WvwXAyRcFDg0tvej78ZVG5b+K00vQFEffOaFil X7u22tlIvlPiKvXxgnyItD+mJErCOV8= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:44 2025 by rpki-client