$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa File: 4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa (raw, json) Hash identifier: kuCQhani8Cf7jgF5Ffl0pc3xHll5Bqjc0rLRUp6Qc+s= Subject key identifier: D6:90:89:17:BF:FA:D3:24:47:41:A3:60:66:CD:C2:FD:5A:63:DD:A5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848F81D8A7FC8F2D33CB1EAA380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa Signing time: Sat 22 Feb 2025 17:06:53 +0000 ROA not before: Sat 22 Feb 2025 17:06:53 +0000 ROA not after: Fri 23 May 2025 16:06:53 +0000 asID: 26383 IP address blocks: 166.88.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f8:1d:8a:7f:c8:f2:d3:3c:b1:ea:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 22 17:06:53 2025 GMT Not After : May 23 16:06:53 2025 GMT Subject: CN=44f0c811-f3c5-4ded-9c8e-48b5cd90b9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:8a:a9:43:1c:bc:66:16:4c:51:9a:fe:2e: b2:f7:13:68:fb:f3:f9:f4:b5:cc:82:41:5a:4a:0c: fc:f2:b2:cf:a1:9d:ec:d3:f7:60:74:63:04:09:98: 37:2a:80:be:eb:ab:2c:fa:75:53:19:a0:04:8d:98: 96:5b:64:37:ab:06:80:08:37:fb:a6:35:5c:0b:57: 6c:fb:3a:fd:d7:de:37:d7:18:8a:43:d4:84:d7:ba: 3f:86:85:43:ce:91:0f:87:8e:6c:76:02:e0:9e:0c: ed:1e:97:b5:34:2d:de:33:f9:12:3b:f5:66:c1:65: e4:09:36:35:00:fa:8e:2b:71:18:99:6a:f5:5a:03: 72:81:89:3a:58:0d:c6:df:f6:b5:1b:a8:ab:bb:64: 87:87:db:6f:cb:a9:b3:cd:65:8c:a2:6b:6d:b3:3f: 79:3e:98:2c:10:dd:cc:d7:a3:0a:6e:71:ed:d6:65: 7e:c5:6f:4c:8e:4c:29:ae:85:f1:d2:d7:6c:00:a0: ce:5c:7b:3c:11:c5:e0:31:12:05:67:49:59:c4:de: 8d:07:12:20:b7:ed:6b:4b:b5:bb:cb:df:a9:89:87: df:46:17:2d:d4:fd:34:45:0e:88:e9:20:6e:1d:20: 11:da:cf:34:a1:81:09:4a:00:fc:a8:d1:b9:f0:47: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:90:89:17:BF:FA:D3:24:47:41:A3:60:66:CD:C2:FD:5A:63:DD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ca78c3d-baa3-3fa5-a6dc-2d701ed84150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2b:65:a4:dc:a7:3c:fc:fe:61:99:89:1f:18:fa:28:e6:1e: 71:96:f1:cb:5a:0e:c5:55:54:30:35:a9:ae:e2:dd:73:28:b5: 0a:1e:70:4d:78:1f:37:92:5e:19:86:88:ba:6d:a7:a0:a1:f5: dd:51:2c:00:15:4e:fc:b6:47:ab:26:95:79:fb:7b:80:5e:95: 35:1f:80:8e:e4:e2:13:8a:7c:67:9f:e0:c6:a6:a2:4b:20:18: f1:77:02:83:a9:e2:cb:aa:d9:2c:3c:7d:81:0b:fd:be:13:53: 56:7a:4b:08:2a:cc:a0:d9:a0:81:e1:8f:1b:7a:f6:91:5c:61: 5f:05:99:37:e7:b0:af:52:19:ab:d5:e6:a3:76:75:1f:d7:cf: 64:cf:71:24:57:72:3f:99:2b:6c:ac:94:c6:da:b7:d5:5a:7e: a4:a2:4d:52:40:68:84:db:ba:dd:5a:dd:30:aa:3c:c8:d2:2c: 30:3b:f0:44:12:cf:b6:f1:00:48:8d:3a:5a:5c:cd:b1:cb:df: 82:dd:6b:a0:46:35:24:e9:58:d7:64:d3:73:be:6b:f4:5c:ff: bd:23:90:e6:f8:85:c7:e0:e0:7d:bf:73:39:b7:90:94:e8:ad: 23:4b:96:be:d7:33:db:cd:3c:46:45:5c:c6:f5:2c:c1:45:26: a6:92:ae:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj4HYp/yPLTPLHqo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyMjE3MDY1M1oXDTI1MDUyMzE2MDY1M1owLzEtMCsGA1UEAxMk NDRmMGM4MTEtZjNjNS00ZGVkLTljOGUtNDhiNWNkOTBiOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp+KqUMcvGYWTFGa/i6y9xNo+/P59LXMgkFa Sgz88rLPoZ3s0/dgdGMECZg3KoC+66ss+nVTGaAEjZiWW2Q3qwaACDf7pjVcC1ds +zr919431xiKQ9SE17o/hoVDzpEPh45sdgLgngztHpe1NC3eM/kSO/VmwWXkCTY1 APqOK3EYmWr1WgNygYk6WA3G3/a1G6iru2SHh9tvy6mzzWWMomttsz95PpgsEN3M 16MKbnHt1mV+xW9MjkwproXx0tdsAKDOXHs8EcXgMRIFZ0lZxN6NBxIgt+1rS7W7 y9+piYffRhct1P00RQ6I6SBuHSAR2s80oYEJSgD8qNG58EeSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaQiRe/+tMkR0GjYGbNwv1aY92lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGNhNzhjM2QtYmFhMy0z ZmE1LWE2ZGMtMmQ3MDFlZDg0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8rZaTcpzz8/mGZiR8Y+ijmHnGW8ctaDsVVVDA1qa7i3XMotQoecE14 HzeSXhmGiLptp6Ch9d1RLAAVTvy2R6smlXn7e4BelTUfgI7k4hOKfGef4Mamoksg GPF3AoOp4suq2Sw8fYEL/b4TU1Z6SwgqzKDZoIHhjxt69pFcYV8FmTfnsK9SGavV 5qN2dR/Xz2TPcSRXcj+ZK2yslMbat9VafqSiTVJAaITbut1a3TCqPMjSLDA78EQS z7bxAEiNOlpczbHL34Lda6BGNSTpWNdk03O+a/Rc/70jkOb4hcfg4H2/czm3kJTo rSNLlr7XM9vNPEZFXMb1LMFFJqaSruM= -----END CERTIFICATE-----Generated at Sat Apr 5 00:19:00 2025 by rpki-client