$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa File: 8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa (raw, json) Hash identifier: x+ihWzvRI1Q8MIZD0V9aWt0svdecd0vWcReO0VpDYhM= Subject key identifier: B3:37:DD:59:49:9C:F9:05:8F:3C:3A:4B:DE:56:3D:8E:A3:DB:54:CC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858482D5AA76310F048E9692EB080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 216093 IP address blocks: 166.88.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:a7:63:10:f0:48:e9:69:2e:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=18a2421f-acf8-49dd-955a-3e6fd8f0541f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:76:3a:94:f0:80:e3:71:b3:a6:69:8b:f9: 76:6b:3d:e2:e9:58:f3:30:a6:c8:fd:d5:53:e9:4b: dc:63:51:30:70:69:e2:6f:63:6d:58:b0:62:74:4f: 28:78:fa:b1:18:37:db:76:5b:db:9c:8e:9c:b0:a4: 50:de:64:2f:e4:a7:ba:6c:4e:59:cf:db:5c:83:d2: b1:fc:a3:ef:41:42:6e:32:a8:7e:16:18:96:c8:7c: e9:f2:77:5d:e7:73:82:d2:12:a7:7e:83:01:1b:ca: 1b:ad:8d:29:a7:5e:f1:3c:f2:7d:6a:cc:ee:82:ba: 33:2f:3f:7f:34:3f:7e:db:1b:79:ec:57:86:bd:d9: 81:87:50:55:3b:98:e6:04:4e:99:ff:e3:34:6e:ed: 53:8a:a7:70:63:ad:ab:cf:c7:58:dd:c3:6b:c9:14: 81:12:66:de:76:99:01:26:38:e2:dc:cd:c6:f3:ac: cd:30:fe:41:6a:28:47:dd:36:b8:1d:59:c3:95:b3: e2:9c:88:7b:f8:70:bb:fe:72:89:a8:9f:d6:be:28: 4d:f6:81:1d:a2:e9:f6:7f:7e:24:f7:a7:9d:1e:1f: e9:42:1a:68:d5:49:02:cf:50:9d:70:08:f3:71:e7: b7:5c:78:45:d7:b3:6d:16:45:1d:59:f0:bd:b6:43: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:DD:59:49:9C:F9:05:8F:3C:3A:4B:DE:56:3D:8E:A3:DB:54:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:55:1e:eb:1d:36:f6:4b:fb:49:c0:31:de:8e:4e:f7:72:7f: 29:36:04:90:87:24:48:26:c1:2b:f4:c8:81:f0:30:0d:da:dd: b9:1f:f3:0a:ea:08:ca:3e:90:8f:90:94:5b:55:d5:e2:0c:82: 49:00:b5:bd:60:7d:f6:65:3d:63:06:7e:f1:90:da:d6:c0:bd: 92:a9:cf:be:9d:c6:e8:40:a9:72:d2:f2:42:c0:8e:8e:89:54: ac:9d:e4:07:79:f9:b6:eb:f6:e4:66:e6:24:f6:3c:32:e5:69: 9b:10:eb:55:23:d6:b9:0d:30:fb:95:17:7f:05:c6:ee:1f:b5: 1d:c1:25:3d:51:85:f4:b0:8e:80:c1:55:69:98:3a:ce:2c:82: 17:ed:d0:b9:39:b4:ab:60:46:07:8d:32:78:e6:e8:3c:a1:f1: 10:31:86:b0:f3:75:60:59:c0:71:c1:17:9b:49:33:b7:b0:5b: 15:ac:08:4c:c1:e7:5a:ec:e8:62:2e:ea:85:be:6f:3e:25:ef: 46:eb:49:83:e1:30:f2:2c:a8:b6:71:a4:de:c9:a7:0a:a7:95: 00:29:7e:b0:9f:ee:5a:1a:2d:4d:d4:76:f8:98:f4:9c:d5:ed: ba:02:ca:94:79:f7:35:7a:0c:33:9d:ea:74:cc:b9:e3:e2:8e: 3e:73:6c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWqdjEPBI6WkusIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk MThhMjQyMWYtYWNmOC00OWRkLTk1NWEtM2U2ZmQ4ZjA1NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZh2OpTwgONxs6Zpi/l2az3i6VjzMKbI/dVT 6UvcY1EwcGnib2NtWLBidE8oePqxGDfbdlvbnI6csKRQ3mQv5Ke6bE5Zz9tcg9Kx /KPvQUJuMqh+FhiWyHzp8ndd53OC0hKnfoMBG8obrY0pp17xPPJ9aszugrozLz9/ ND9+2xt57FeGvdmBh1BVO5jmBE6Z/+M0bu1TiqdwY62rz8dY3cNryRSBEmbedpkB Jjji3M3G86zNMP5BaihH3Ta4HVnDlbPinIh7+HC7/nKJqJ/WvihN9oEdoun2f34k 96edHh/pQhpo1UkCz1CdcAjzcee3XHhF17NtFkUdWfC9tkNT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM33VlJnPkFjzw6S95WPY6j21TMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGMyYmQyMDQtMTkwMC0z Yjg3LWI5MTQtZWFkYzNiZjRjZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBVHusdNvZL+0nAMd6OTvdyfyk2BJCHJEgmwSv0yIHwMA3a3bkf8wrq CMo+kI+QlFtV1eIMgkkAtb1gffZlPWMGfvGQ2tbAvZKpz76dxuhAqXLS8kLAjo6J VKyd5Ad5+bbr9uRm5iT2PDLlaZsQ61Uj1rkNMPuVF38Fxu4ftR3BJT1RhfSwjoDB VWmYOs4sghft0Lk5tKtgRgeNMnjm6Dyh8RAxhrDzdWBZwHHBF5tJM7ewWxWsCEzB 51rs6GIu6oW+bz4l70brSYPhMPIsqLZxpN7JpwqnlQApfrCf7loaLU3UdviY9JzV 7boCypR59zV6DDOd6nTMuePijj5zbKE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:18 2025 by rpki-client