$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d1947b8-cfab-3122-b994-3e57b9740454.roa File: 4d1947b8-cfab-3122-b994-3e57b9740454.roa (raw, json) Hash identifier: rrLqX0ihAoqt114w7qfiCWzX5aj+7V+vIP8sFO7GKss= Subject key identifier: 0C:ED:C4:7D:7B:60:39:40:27:E1:7C:AF:F4:E8:5A:0A:41:E8:9E:74 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8E841034A14465804F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d1947b8-cfab-3122-b994-3e57b9740454.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 212238 IP address blocks: 166.88.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8e:84:10:34:a1:44:65:80:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=2e0e8a15-8f3e-440d-bbd8-9ef130edce5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:58:c8:df:05:b5:67:7f:88:00:8f:c6:47: 9b:5f:8c:45:62:fe:a8:3d:85:f0:36:62:30:87:84: 77:8e:66:77:31:c7:c0:3b:16:48:93:27:a0:fb:0a: e5:58:34:ba:aa:aa:7a:d9:d6:4e:1b:19:85:3c:52: be:f6:36:fc:eb:ac:51:94:71:ba:54:9d:62:82:52: 61:16:1a:a4:9a:15:3f:ae:f0:b5:e6:78:7d:c4:e5: 7e:6f:3e:03:9b:f9:27:55:4c:61:5b:86:a2:fc:22: d2:3e:a1:18:20:86:a7:da:cf:1b:fa:5d:f6:f0:d2: cf:27:ca:6c:1e:22:2d:e7:c7:9d:ed:da:44:ac:16: 7f:1a:8c:da:84:3c:83:0f:bd:db:26:f7:4e:9f:ef: c1:a2:15:a1:fa:44:3d:be:4f:01:51:0b:05:0b:24: 82:d4:ee:be:5d:d2:17:c3:1c:0f:c7:e7:c9:4e:f6: 1c:53:05:04:3d:72:35:93:66:05:32:f4:02:e9:52: d5:91:2f:31:3d:f0:63:a1:92:7b:ab:ba:36:32:8a: ad:d8:da:84:80:15:48:b7:27:27:4d:ce:74:42:51: 96:f2:2c:0c:8b:dc:db:eb:79:b8:a4:1a:eb:af:45: 91:ed:8a:ea:56:62:6f:23:dc:4d:71:48:11:e9:ed: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:C4:7D:7B:60:39:40:27:E1:7C:AF:F4:E8:5A:0A:41:E8:9E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d1947b8-cfab-3122-b994-3e57b9740454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ad:78:13:6f:39:46:cc:b2:e9:eb:09:87:75:3b:f8:39:3b: 4c:9d:96:a9:d7:c5:61:b7:3a:d9:c3:1f:20:8d:ca:f3:d1:8c: 02:e2:05:21:d2:37:00:6a:42:37:54:c9:92:a6:0e:c3:86:63: 98:83:1f:99:6e:64:a0:fb:cb:40:1c:2d:71:f9:3a:fb:49:3e: 42:3a:a9:e2:16:5f:74:0f:82:d8:6f:15:e4:de:7f:b6:06:5b: c1:c3:93:fd:e0:ef:f4:ae:a8:53:28:7c:26:06:c1:14:1c:a2: b1:94:bb:ce:4b:ed:e3:17:32:54:80:9c:a4:10:6b:02:ab:df: 6e:6a:ef:dc:4f:71:b6:59:4e:5b:a1:ea:e4:a0:66:1f:25:0b: 22:bd:13:64:69:b2:f7:db:a6:b0:93:a5:66:1c:81:4b:35:9f: 15:1d:62:9f:e0:eb:37:66:c8:16:6c:67:53:83:04:51:b5:f2: e5:4e:b4:4d:83:36:9f:fa:a9:6c:35:71:52:4e:d0:d9:be:21: c6:06:43:2b:f9:03:92:2d:c7:70:46:cf:b4:ab:c5:b4:8b:da: 02:60:63:bd:02:f8:2f:80:50:08:51:aa:49:2b:3f:37:30:b1: 49:a9:14:79:58:ab:85:a4:c4:84:96:0c:92:ce:03:b8:2c:3c: 88:83:b8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i46EEDShRGWAT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk MmUwZThhMTUtOGYzZS00NDBkLWJiZDgtOWVmMTMwZWRjZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oNYyN8FtWd/iACPxkebX4xFYv6oPYXwNmIw h4R3jmZ3McfAOxZIkyeg+wrlWDS6qqp62dZOGxmFPFK+9jb866xRlHG6VJ1iglJh FhqkmhU/rvC15nh9xOV+bz4Dm/knVUxhW4ai/CLSPqEYIIan2s8b+l328NLPJ8ps HiIt58ed7dpErBZ/GozahDyDD73bJvdOn+/BohWh+kQ9vk8BUQsFCySC1O6+XdIX wxwPx+fJTvYcUwUEPXI1k2YFMvQC6VLVkS8xPfBjoZJ7q7o2Moqt2NqEgBVItycn Tc50QlGW8iwMi9zb63m4pBrrr0WR7YrqVmJvI9xNcUgR6e3LsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAztxH17YDlAJ+F8r/ToWgpB6J50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGQxOTQ3YjgtY2ZhYi0z MTIyLWI5OTQtM2U1N2I5NzQwNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2teBNvOUbMsunrCYd1O/g5O0ydlqnXxWG3OtnDHyCNyvPRjALiBSHS NwBqQjdUyZKmDsOGY5iDH5luZKD7y0AcLXH5OvtJPkI6qeIWX3QPgthvFeTef7YG W8HDk/3g7/SuqFMofCYGwRQcorGUu85L7eMXMlSAnKQQawKr325q79xPcbZZTluh 6uSgZh8lCyK9E2RpsvfbprCTpWYcgUs1nxUdYp/g6zdmyBZsZ1ODBFG18uVOtE2D Np/6qWw1cVJO0Nm+IcYGQyv5A5Itx3BGz7SrxbSL2gJgY70C+C+AUAhRqkkrPzcw sUmpFHlYq4WkxISWDJLOA7gsPIiDuHk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:22:24 2025 by rpki-client