$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d23c4fa-8881-3757-874e-a5c9212614c8.roa File: 8d23c4fa-8881-3757-874e-a5c9212614c8.roa (raw, json) Hash identifier: ykEenk7J9IPPY3WZgAk+2/wEuQbrhxDC+/BPiqqkIv8= Subject key identifier: DA:3A:1E:26:0F:17:84:81:E8:C2:33:B0:1D:06:13:35:C1:ED:AD:63 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2BA06C739DD5BE80054880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d23c4fa-8881-3757-874e-a5c9212614c8.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 166.88.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:a0:6c:73:9d:d5:be:80:05:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=a4924c62-886a-447f-a878-80449fb8965b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:51:8c:ea:ef:a8:be:08:d9:2c:86:cb:05: 22:fa:47:59:3a:56:69:b7:67:6d:f0:9d:b7:09:6f: 30:9d:8a:42:50:56:29:83:9b:ac:25:98:4e:1c:90: 67:39:5f:70:bd:a9:70:18:67:b7:1b:5d:c6:bb:f9: 09:61:17:f6:c5:c0:b8:71:b2:ea:17:1a:2a:42:ea: 7d:7d:48:ea:fe:33:1d:5b:c1:28:1b:fd:f2:c6:c8: 7f:e7:0c:c7:f7:d7:fd:48:2e:a8:19:50:54:25:d9: 85:11:4b:57:aa:6d:e4:9e:0a:bc:d9:fb:f6:01:22: 67:b7:2d:66:46:d3:4c:98:e6:21:1c:7c:4a:59:5f: ca:e5:e1:69:9c:98:a2:af:c8:56:e2:26:32:f8:89: 48:24:fd:73:da:70:7d:97:bd:1f:22:dd:7a:9e:a8: 6c:e0:9a:ee:db:6a:19:91:89:2a:e3:e7:51:86:1a: 36:bd:6f:08:8a:06:93:ea:1e:7a:12:fa:d9:cd:5c: da:93:97:c0:4b:7d:77:a5:47:ed:26:1f:62:a9:ef: b1:7e:d4:be:62:8d:83:a5:c0:d2:c0:3e:07:78:b3: 3c:2a:ed:ca:24:97:1a:e2:37:b6:25:85:7e:ee:19: 4b:73:ae:d3:ea:cf:e3:cc:37:57:20:99:77:fd:f2: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:1E:26:0F:17:84:81:E8:C2:33:B0:1D:06:13:35:C1:ED:AD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d23c4fa-8881-3757-874e-a5c9212614c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:85:a3:be:9c:9c:b4:b6:8f:6f:a1:6e:f4:c6:92:e7:5f:3e: 94:11:1d:55:1f:8c:fb:45:7d:78:8a:97:04:da:cf:11:c2:ef: 1e:07:42:99:87:fe:da:0e:65:90:73:23:a3:39:e7:56:a7:fd: 6f:b0:af:37:25:6e:9b:fb:2c:14:6d:47:53:67:6f:69:f4:4e: ab:21:43:9f:77:93:0e:02:ff:2e:48:1c:11:ff:8c:12:00:50: 55:39:ed:9a:0a:85:8d:4c:ac:83:9f:c7:d9:84:c9:d1:a1:3a: 46:72:ad:23:74:49:4a:ea:ce:ae:87:84:86:72:21:2c:06:a7: 6d:76:84:24:80:79:a3:4f:09:6f:04:34:80:80:b0:ef:d5:b0: 39:d1:44:07:5b:c1:59:79:56:ce:09:e2:ae:6b:8e:0f:10:0e: a4:0a:45:f6:df:46:3f:8e:0f:1c:38:f1:47:6f:14:3c:18:2c: c1:36:fb:37:37:36:63:4a:c5:35:35:2c:ad:98:6c:be:2b:d6: da:b6:d4:ca:2b:2c:e6:9f:72:2c:63:b3:fe:8c:21:a4:91:6e: 65:4d:62:5b:d3:65:b3:9c:ef:0a:b5:50:ab:06:ab:4a:26:82: f0:61:5a:ba:46:df:5e:7d:d0:30:0d:c5:b2:e8:6e:0b:e9:6a: 37:3b:2c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6Bsc53VvoAFSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YTQ5MjRjNjItODg2YS00NDdmLWE4NzgtODA0NDlmYjg5NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9NRjOrvqL4I2SyGywUi+kdZOlZpt2dt8J23 CW8wnYpCUFYpg5usJZhOHJBnOV9wvalwGGe3G13Gu/kJYRf2xcC4cbLqFxoqQup9 fUjq/jMdW8EoG/3yxsh/5wzH99f9SC6oGVBUJdmFEUtXqm3kngq82fv2ASJnty1m RtNMmOYhHHxKWV/K5eFpnJiir8hW4iYy+IlIJP1z2nB9l70fIt16nqhs4Jru22oZ kYkq4+dRhho2vW8IigaT6h56EvrZzVzak5fAS313pUftJh9iqe+xftS+Yo2DpcDS wD4HeLM8Ku3KJJca4je2JYV+7hlLc67T6s/jzDdXIJl3/fLFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo6HiYPF4SB6MIzsB0GEzXB7a1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGQyM2M0ZmEtODg4MS0z NzU3LTg3NGUtYTVjOTIxMjYxNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOFo76cnLS2j2+hbvTGkudfPpQRHVUfjPtFfXiKlwTazxHC7x4HQpmH /toOZZBzI6M551an/W+wrzclbpv7LBRtR1Nnb2n0TqshQ593kw4C/y5IHBH/jBIA UFU57ZoKhY1MrIOfx9mEydGhOkZyrSN0SUrqzq6HhIZyISwGp212hCSAeaNPCW8E NICAsO/VsDnRRAdbwVl5Vs4J4q5rjg8QDqQKRfbfRj+ODxw48UdvFDwYLME2+zc3 NmNKxTU1LK2YbL4r1tq21MorLOafcixjs/6MIaSRbmVNYlvTZbOc7wq1UKsGq0om gvBhWrpG31590DANxbLobgvpajc7LCw= -----END CERTIFICATE-----Generated at Wed Apr 9 22:06:32 2025 by rpki-client