$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d7b98a8-0ac6-3f7f-b07f-3c0ea9702383.roa File: 4d7b98a8-0ac6-3f7f-b07f-3c0ea9702383.roa (raw, json) Hash identifier: SB2HMTqQYIA0ZYCAXOZ9wFIXWUVpKvDQY4WAA9LL1rs= Subject key identifier: 41:78:EB:38:A3:EF:01:AF:4F:3B:98:B1:D6:F1:E6:6F:C3:CD:05:27 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584898D61E3D2FDB837DC3968340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d7b98a8-0ac6-3f7f-b07f-3c0ea9702383.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 57043 IP address blocks: 166.88.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1e:3d:2f:db:83:7d:c3:96:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=48bccbc8-b5ca-422d-a099-41a3a054613c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3c:dd:07:e9:5c:cd:1c:84:fb:cd:6d:5d:cb: a2:dd:90:3b:d8:a0:77:75:cd:d8:22:90:c4:43:d0: 28:21:ea:5c:36:c5:87:a3:f6:0b:d2:10:7b:ff:3f: fd:9f:a3:4e:94:0a:3e:db:87:fd:99:40:57:1d:35: 8c:4c:72:1f:f1:77:ce:30:36:18:dc:8d:09:e7:17: af:8a:35:0a:e4:66:34:9f:da:ed:ba:f1:9e:f9:34: 40:79:f0:1b:7e:7f:c6:ac:c5:eb:c5:f7:dd:15:1a: 89:73:ea:28:e7:08:ca:c6:d1:c2:08:c5:97:47:b8: 87:ba:7d:b3:1f:59:0b:26:65:24:39:e7:00:51:09: fd:7f:c1:c6:59:50:f0:0f:1c:04:8e:77:f7:49:23: 21:f9:cd:ed:e4:4b:c1:53:36:e0:d2:c3:56:17:ed: 1b:e2:ed:c4:86:cd:d4:0a:76:59:32:ab:ba:20:4e: fe:63:6b:e0:21:b1:4b:7b:c7:36:4b:c6:2f:0b:81: 6c:db:d2:0e:e8:e8:8d:3b:8f:97:68:d7:07:b0:35: 39:69:64:74:d3:26:6a:ac:5d:76:4e:c8:97:03:8f: b7:3e:79:34:40:26:10:40:a9:84:0b:fe:56:eb:d3: b5:23:cd:81:85:e5:fb:78:69:c3:09:42:99:4b:88: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:EB:38:A3:EF:01:AF:4F:3B:98:B1:D6:F1:E6:6F:C3:CD:05:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d7b98a8-0ac6-3f7f-b07f-3c0ea9702383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0e:42:62:44:f0:52:41:1b:71:95:cc:be:fa:da:a8:13:d8: d6:0b:76:70:60:cb:2a:7b:fd:e6:ad:f9:bc:bd:a3:3e:cb:e0: a5:b7:69:39:05:82:f7:38:5c:81:a2:62:4c:5c:d7:f1:58:08: 96:b0:bd:76:1c:a6:a8:8b:ac:26:ca:ea:42:20:bc:89:a8:93: 70:46:75:79:ce:ec:f8:84:89:05:e9:8e:1a:1f:ef:d5:e3:13: b9:5b:8e:33:a6:a7:14:c9:14:54:02:ea:3c:11:96:2c:ee:d8: 34:6b:d3:e7:10:8b:0e:e2:bd:d6:7c:71:ff:df:93:23:11:e7: 07:d3:a6:fc:bc:5c:1d:42:36:c4:d1:3c:3a:95:1f:93:b4:af: bb:f4:fa:2e:8f:f2:b7:95:cf:6e:cd:22:e2:b3:cb:44:f0:ea: 58:56:41:18:31:66:54:e8:d7:dc:60:65:27:95:57:de:87:25: 04:1c:62:6c:ee:09:db:6b:9c:ba:4c:85:3a:69:0f:00:f6:56: 62:b9:68:58:5b:6a:61:96:7d:7f:c3:b3:95:28:f1:1e:72:70: 3e:87:bd:d0:9c:6d:81:dd:fe:ca:e6:f4:1b:52:3f:04:9f:b2: a9:a5:b9:d7:57:2f:69:d3:76:77:31:1d:4c:ee:89:5a:48:d9: 88:5b:3c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h49L9uDfcOWg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDhiY2NiYzgtYjVjYS00MjJkLWEwOTktNDFhM2EwNTQ2MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDzdB+lczRyE+81tXcui3ZA72KB3dc3YIpDE Q9AoIepcNsWHo/YL0hB7/z/9n6NOlAo+24f9mUBXHTWMTHIf8XfOMDYY3I0J5xev ijUK5GY0n9rtuvGe+TRAefAbfn/GrMXrxffdFRqJc+oo5wjKxtHCCMWXR7iHun2z H1kLJmUkOecAUQn9f8HGWVDwDxwEjnf3SSMh+c3t5EvBUzbg0sNWF+0b4u3Ehs3U CnZZMqu6IE7+Y2vgIbFLe8c2S8YvC4Fs29IO6OiNO4+XaNcHsDU5aWR00yZqrF12 TsiXA4+3Pnk0QCYQQKmEC/5W69O1I82BheX7eGnDCUKZS4h+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF46zij7wGvTzuYsdbx5m/DzQUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGQ3Yjk4YTgtMGFjNi0z ZjdmLWIwN2YtM2MwZWE5NzAyMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoOQmJE8FJBG3GVzL762qgT2NYLdnBgyyp7/eat+by9oz7L4KW3aTkF gvc4XIGiYkxc1/FYCJawvXYcpqiLrCbK6kIgvImok3BGdXnO7PiEiQXpjhof79Xj E7lbjjOmpxTJFFQC6jwRlizu2DRr0+cQiw7ivdZ8cf/fkyMR5wfTpvy8XB1CNsTR PDqVH5O0r7v0+i6P8reVz27NIuKzy0Tw6lhWQRgxZlTo19xgZSeVV96HJQQcYmzu CdtrnLpMhTppDwD2VmK5aFhbamGWfX/Ds5Uo8R5ycD6HvdCcbYHd/srm9BtSPwSf sqmluddXL2nTdncxHUzuiVpI2YhbPO0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:02 2025 by rpki-client