$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8668632b-dde9-3b7c-81f5-3775066524b4.roa File: 8668632b-dde9-3b7c-81f5-3775066524b4.roa (raw, json) Hash identifier: 4mEh/lSZbooq5mKGFZXqXSvtC2ZYx+hz1/kVbR/tCJA= Subject key identifier: F1:E1:75:A1:4B:E9:BB:CE:76:49:23:B7:15:47:D1:B2:AA:0F:5C:5B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B767499E67D024945F500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8668632b-dde9-3b7c-81f5-3775066524b4.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 166.88.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:76:74:99:e6:7d:02:49:45:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=2955d572-38b9-42b7-b705-27b86837f349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:1f:9b:1d:78:0b:68:0c:97:07:c6:61:28: 2a:3a:60:fb:ec:b4:6a:73:06:c8:45:fd:7d:de:c8: 7d:38:ce:e9:4f:ec:c3:19:a2:fe:23:e1:d0:1c:6b: 5a:dd:9f:e0:30:51:33:5b:71:bf:d1:13:b3:74:0d: 1b:e5:49:cc:68:97:f1:a9:16:e7:80:2a:c3:ac:eb: 1a:96:de:70:7e:bf:ab:25:87:3f:64:a9:f4:fb:a9: 97:87:a9:45:a4:9b:6b:df:24:0a:8e:49:5f:6b:19: c9:1e:65:55:20:37:0b:46:23:d2:e2:d4:ef:8b:6c: ab:9a:df:d5:1e:c2:88:56:01:55:44:24:e7:0e:cd: 48:6c:99:50:10:8a:40:ab:1b:b6:af:13:c5:9e:1c: 61:3f:f9:df:bd:8f:4a:2a:ab:6e:86:e4:7c:f0:95: 35:db:5b:52:dc:6a:78:ab:4c:0c:58:b0:4e:7f:89: 5d:37:16:83:23:ce:96:52:80:56:b8:36:31:6e:a2: 19:d4:81:e6:c1:78:69:c2:0a:b6:2a:63:19:15:c4: a9:4c:cd:8a:9a:d6:94:81:18:27:d4:5a:26:74:09: 49:69:47:72:54:e2:e4:04:10:db:ec:17:af:5c:e3: 04:2d:12:14:17:30:f8:05:d4:32:4c:99:8f:0f:6a: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E1:75:A1:4B:E9:BB:CE:76:49:23:B7:15:47:D1:B2:AA:0F:5C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8668632b-dde9-3b7c-81f5-3775066524b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:73:8d:1f:af:cf:f5:b4:69:90:34:7d:bd:0f:54:ab:a0:8b: 9c:1a:74:fd:7c:01:04:c0:f6:14:05:f2:40:0a:d1:2a:34:04: 66:de:1b:d4:18:1c:b5:32:a7:59:9d:b7:f8:5e:4b:38:cf:fb: 67:bf:39:3f:7d:61:a0:4b:19:f1:36:b9:5f:8f:84:03:36:44: d8:78:d7:08:31:80:51:7e:56:2b:54:56:c5:b9:42:36:ec:3d: 34:57:8f:1b:7d:8c:d9:a8:b1:ad:1c:4b:18:b0:55:0a:74:2d: 43:16:76:58:5b:df:b0:c7:87:50:08:57:f0:50:99:43:ec:6e: 5e:98:39:43:fe:b9:71:28:16:66:99:1f:13:11:55:28:a1:c7: 54:82:34:b3:bf:7f:14:0a:ba:3b:6b:8d:ad:8d:35:e4:c1:45: ba:d1:7c:bd:c8:84:10:53:49:0b:c0:a0:32:72:e6:d9:45:81: 20:01:1d:32:94:54:f0:0b:75:e6:d8:16:bb:b0:c5:89:6c:4e: b5:76:60:3b:68:b1:8d:e1:1b:a7:a3:ca:8a:e4:3f:82:74:10: 38:94:12:8c:f0:e7:11:13:9f:b5:0b:a3:22:9e:12:b6:78:b8: 14:bd:60:6e:0f:ce:1a:a4:02:35:62:07:95:2a:45:21:9f:a8: b6:db:19:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3Z0meZ9AklF9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk Mjk1NWQ1NzItMzhiOS00MmI3LWI3MDUtMjdiODY4MzdmMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAfmx14C2gMlwfGYSgqOmD77LRqcwbIRf19 3sh9OM7pT+zDGaL+I+HQHGta3Z/gMFEzW3G/0ROzdA0b5UnMaJfxqRbngCrDrOsa lt5wfr+rJYc/ZKn0+6mXh6lFpJtr3yQKjklfaxnJHmVVIDcLRiPS4tTvi2yrmt/V HsKIVgFVRCTnDs1IbJlQEIpAqxu2rxPFnhxhP/nfvY9KKqtuhuR88JU121tS3Gp4 q0wMWLBOf4ldNxaDI86WUoBWuDYxbqIZ1IHmwXhpwgq2KmMZFcSpTM2KmtaUgRgn 1FomdAlJaUdyVOLkBBDb7BevXOMELRIUFzD4BdQyTJmPD2q53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHhdaFL6bvOdkkjtxVH0bKqD1xbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODY2ODYzMmItZGRlOS0z YjdjLTgxZjUtMzc3NTA2NjUyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRzjR+vz/W0aZA0fb0PVKugi5wadP18AQTA9hQF8kAK0So0BGbeG9QY HLUyp1mdt/heSzjP+2e/OT99YaBLGfE2uV+PhAM2RNh41wgxgFF+VitUVsW5Qjbs PTRXjxt9jNmosa0cSxiwVQp0LUMWdlhb37DHh1AIV/BQmUPsbl6YOUP+uXEoFmaZ HxMRVSihx1SCNLO/fxQKujtrja2NNeTBRbrRfL3IhBBTSQvAoDJy5tlFgSABHTKU VPALdebYFruwxYlsTrV2YDtosY3hG6ejyorkP4J0EDiUEozw5xETn7ULoyKeErZ4 uBS9YG4PzhqkAjViB5UqRSGfqLbbGQ0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:38 2025 by rpki-client