$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4476fd11-9e29-3191-bbab-2cd5a65c2c2e.roa File: 4476fd11-9e29-3191-bbab-2cd5a65c2c2e.roa (raw, json) Hash identifier: LD0uepa2Om6QEtxOw+/NaosZSl5Y351WSNhpcaMFwOM= Subject key identifier: 70:5A:C4:A3:72:79:92:80:B0:EB:CC:07:D7:DA:41:94:A4:7F:78:D2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847DDCA3D68B3F8B56AD365B738 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4476fd11-9e29-3191-bbab-2cd5a65c2c2e.roa Signing time: Wed 13 Nov 2024 14:00:39 +0000 ROA not before: Wed 13 Nov 2024 14:00:39 +0000 ROA not after: Tue 11 Feb 2025 14:00:39 +0000 asID: 149440 IP address blocks: 166.88.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:ca:3d:68:b3:f8:b5:6a:d3:65:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 13 14:00:39 2024 GMT Not After : Feb 11 14:00:39 2025 GMT Subject: CN=7c0abf62-b237-4d65-9e11-7e362820d0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:44:28:57:1f:8a:00:d4:28:26:ba:67:89: d2:4e:d5:cf:17:a0:95:db:89:67:3b:50:17:37:30: 38:10:ed:f7:e4:3e:93:cf:5b:cc:1d:78:35:4a:26: ee:9e:33:35:30:42:85:bc:34:29:a6:1e:5c:74:5e: 4c:9c:d0:3f:15:33:6d:d3:e4:53:3c:bb:b9:82:01: 03:10:26:04:15:d0:42:3f:f5:4c:8c:c1:9d:a6:23: 40:f9:05:7e:34:c0:a0:1b:65:89:3a:b6:39:24:24: c1:5a:42:fc:3c:a0:a0:aa:a6:bc:84:1f:ff:28:ca: 86:bb:a1:3b:05:b1:86:33:19:62:0e:05:32:50:b4: 53:a3:56:03:27:cb:8d:c9:97:a3:4a:a8:00:83:8e: 29:7e:5e:cc:3a:25:e1:d6:35:4c:88:0d:fe:ff:5e: f7:7b:95:e0:a1:44:3e:ac:9c:d4:f8:0a:e3:ed:fc: 02:3f:fc:04:81:d2:ca:d4:08:63:5a:dd:ee:db:7e: 26:d8:bf:73:d7:b0:29:3b:cc:f6:79:3d:bb:03:91: 51:61:a6:94:ce:b5:6d:85:1c:d3:db:87:9a:dd:7b: cc:ce:7a:b1:1c:4a:94:0d:74:41:b9:6d:27:96:20: e2:88:f6:79:68:73:c6:b4:c8:58:39:ef:5c:86:d6: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5A:C4:A3:72:79:92:80:B0:EB:CC:07:D7:DA:41:94:A4:7F:78:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4476fd11-9e29-3191-bbab-2cd5a65c2c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:85:e1:be:1f:17:78:35:47:77:dc:63:fa:d6:f5:23:13:88: a9:fa:25:61:9c:4e:ab:84:e1:a6:b2:a0:9e:cc:9a:d9:75:39: 55:61:84:57:8a:2e:f7:45:d8:90:62:65:97:1a:db:7d:30:c7: fd:d1:a5:b7:ec:13:59:3e:bf:71:dc:02:d4:7f:72:d2:81:44: 1c:78:65:2c:76:01:b2:dc:74:83:1c:69:dc:3f:d1:4a:01:2b: 55:30:0f:ca:2e:65:25:55:b4:d2:6d:d1:48:f4:dc:4b:78:dd: b1:7b:78:ad:69:4e:1e:c3:6f:6f:e3:5c:df:15:a5:a4:70:36: f9:26:94:37:6b:dd:1d:ba:fb:59:43:da:41:53:c7:1d:4a:03: 03:c1:94:99:3a:69:7d:e6:46:9a:d0:9e:d6:ec:37:7e:51:9d: 95:0e:90:4b:4f:44:63:a2:16:36:51:cd:c4:a1:57:29:c1:95: f3:69:77:15:b4:46:91:98:73:c9:af:98:48:f2:cc:42:4f:28: 80:06:1d:72:e3:3e:bc:92:c1:27:6d:82:0d:f1:45:1f:f6:11: 17:c0:17:f6:3d:fd:39:1f:8f:3b:a0:ff:43:ee:d6:88:cd:3f: 5a:55:17:c3:9e:89:00:09:64:6f:cd:5f:4c:9f:4b:54:37:8d: d8:54:bb:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyj1os/i1atNltzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk N2MwYWJmNjItYjIzNy00ZDY1LTllMTEtN2UzNjI4MjBkMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZEKFcfigDUKCa6Z4nSTtXPF6CV24lnO1AX NzA4EO335D6Tz1vMHXg1SibunjM1MEKFvDQpph5cdF5MnNA/FTNt0+RTPLu5ggED ECYEFdBCP/VMjMGdpiNA+QV+NMCgG2WJOrY5JCTBWkL8PKCgqqa8hB//KMqGu6E7 BbGGMxliDgUyULRTo1YDJ8uNyZejSqgAg44pfl7MOiXh1jVMiA3+/173e5XgoUQ+ rJzU+Arj7fwCP/wEgdLK1AhjWt3u234m2L9z17ApO8z2eT27A5FRYaaUzrVthRzT 24ea3XvMznqxHEqUDXRBuW0nliDiiPZ5aHPGtMhYOe9chtYt0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBaxKNyeZKAsOvMB9faQZSkf3jSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDQ3NmZkMTEtOWUyOS0z MTkxLWJiYWItMmNkNWE2NWMyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmF4b4fF3g1R3fcY/rW9SMTiKn6JWGcTquE4aayoJ7Mmtl1OVVhhFeK LvdF2JBiZZca230wx/3RpbfsE1k+v3HcAtR/ctKBRBx4ZSx2AbLcdIMcadw/0UoB K1UwD8ouZSVVtNJt0Uj03Et43bF7eK1pTh7Db2/jXN8VpaRwNvkmlDdr3R26+1lD 2kFTxx1KAwPBlJk6aX3mRprQntbsN35RnZUOkEtPRGOiFjZRzcShVynBlfNpdxW0 RpGYc8mvmEjyzEJPKIAGHXLjPrySwSdtgg3xRR/2ERfAF/Y9/Tkfjzug/0Pu1ojN P1pVF8OeiQAJZG/NX0yfS1Q3jdhUuzg= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:42 2024 by rpki-client on console-fra.rpki-client.org