$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa File: 79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa (raw, json) Hash identifier: T+peRscAvI3SW4S/wYU8Byr84DK+0Yt7SCHHMb1kBrQ= Subject key identifier: 48:40:A9:8F:2D:24:13:95:75:AC:EF:AC:80:10:14:A4:51:47:D8:03 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8E95F50ECFB6387F3900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 10557 IP address blocks: 166.88.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8e:95:f5:0e:cf:b6:38:7f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=ca0e2901-d4c3-4149-bc08-ca9d900f320d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:b7:bd:ec:96:87:30:b7:f3:d5:17:38:c1: e4:7f:28:2e:ba:0e:a8:44:5d:43:ba:2e:cf:b5:69: 4f:a8:d7:a9:ea:af:a6:7f:2e:7a:10:27:af:8a:77: d0:0a:13:93:81:06:5b:ca:1d:36:11:9a:dc:fa:81: b5:2f:18:1c:1b:e8:31:c4:b2:e4:3f:10:53:81:5c: 42:67:55:2a:0d:85:7c:c1:69:e1:29:3d:ba:6c:d5: 5d:d2:f2:3a:9e:e3:a6:39:cb:f1:98:bb:a0:94:d3: 39:fd:db:27:f6:66:80:40:b0:c2:84:b2:02:b9:11: e2:15:1e:72:74:37:61:a0:99:fc:34:7e:8c:9e:6d: 89:cd:51:95:4a:b0:34:d4:21:21:b9:71:0f:9a:10: f5:06:ea:ba:17:ed:3d:11:38:4f:dd:aa:08:31:8d: e1:18:d8:df:ec:59:9e:92:de:43:bb:ef:d1:c1:8d: dc:6d:d2:ba:ad:05:6b:ca:07:c9:c3:48:14:26:d4: bf:b8:a4:f1:8c:b1:d0:f1:de:7e:9d:6b:ea:f9:7c: 9f:63:16:bb:56:e3:ae:ed:35:4a:4f:b8:67:de:75: 98:47:82:5f:28:65:52:2e:28:b1:a6:b2:31:20:0b: 3f:f5:70:4c:3e:0d:6b:fd:33:2f:d6:98:86:4e:a8: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:A9:8F:2D:24:13:95:75:AC:EF:AC:80:10:14:A4:51:47:D8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f8:8b:4e:31:64:4a:83:40:a4:13:c5:c5:cf:e0:2f:01:27: 5d:e4:66:80:9c:98:91:3a:d1:b9:de:fc:3a:6c:b9:40:e1:eb: a0:95:36:5c:22:b0:14:fa:64:a4:80:ed:35:fb:31:88:23:2d: bf:65:f1:47:85:07:9a:8d:8b:7f:b3:14:ed:d2:57:d4:17:00: 0b:4c:fc:23:c9:35:2b:15:98:85:d6:82:ca:36:66:d3:bf:d2: db:e5:06:24:89:f0:9d:34:a0:f6:29:2a:6a:6c:e8:a3:db:39: 03:01:9d:58:95:dd:2a:c9:c6:06:68:12:c9:0f:ed:d3:8b:43: 8f:93:91:90:61:e8:46:a0:18:eb:58:2e:4e:af:e8:c2:2a:0a: 9c:5e:1b:0a:4b:70:71:2b:8e:bb:ec:a7:5a:9a:d6:1e:51:d6: 57:0f:1b:74:05:13:52:2b:91:94:76:54:5a:ba:db:3c:e0:3f: 08:5a:4b:90:d0:f8:a7:64:a6:bc:2e:4f:1b:4c:fa:00:78:a5: 3f:c4:47:7e:de:f5:75:5d:37:85:ff:7f:be:88:26:d9:16:36: dd:0d:cc:16:f7:f0:c2:95:fc:3e:9e:c8:c1:b6:fa:3e:79:e0: c4:49:dc:2f:a9:1b:12:a5:c4:f9:c4:53:50:45:32:49:76:0d: a1:07:45:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i46V9Q7Ptjh/OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk Y2EwZTI5MDEtZDRjMy00MTQ5LWJjMDgtY2E5ZDkwMGYzMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzS3veyWhzC389UXOMHkfyguug6oRF1Dui7P tWlPqNep6q+mfy56ECevinfQChOTgQZbyh02EZrc+oG1LxgcG+gxxLLkPxBTgVxC Z1UqDYV8wWnhKT26bNVd0vI6nuOmOcvxmLuglNM5/dsn9maAQLDChLICuRHiFR5y dDdhoJn8NH6Mnm2JzVGVSrA01CEhuXEPmhD1Buq6F+09EThP3aoIMY3hGNjf7Fme kt5Du+/RwY3cbdK6rQVrygfJw0gUJtS/uKTxjLHQ8d5+nWvq+XyfYxa7VuOu7TVK T7hn3nWYR4JfKGVSLiixprIxIAs/9XBMPg1r/TMv1piGTqhzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhAqY8tJBOVdazvrIAQFKRRR9gDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzljZDRiZDgtMTdmNi0z MWZkLWI1YmUtZTNiNjRmOWQ5ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP4i04xZEqDQKQTxcXP4C8BJ13kZoCcmJE60bne/DpsuUDh66CVNlwi sBT6ZKSA7TX7MYgjLb9l8UeFB5qNi3+zFO3SV9QXAAtM/CPJNSsVmIXWgso2ZtO/ 0tvlBiSJ8J00oPYpKmps6KPbOQMBnViV3SrJxgZoEskP7dOLQ4+TkZBh6EagGOtY Lk6v6MIqCpxeGwpLcHErjrvsp1qa1h5R1lcPG3QFE1IrkZR2VFq62zzgPwhaS5DQ +KdkprwuTxtM+gB4pT/ER37e9XVdN4X/f76IJtkWNt0NzBb38MKV/D6eyMG2+j55 4MRJ3C+pGxKlxPnEU1BFMkl2DaEHRV8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:13 2025 by rpki-client