$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8eec10f7-e7ed-3e00-8e27-944894619518.roa File: 8eec10f7-e7ed-3e00-8e27-944894619518.roa (raw, json) Hash identifier: TzIuS8t3n2KhjuaMs5Xi4cU5NWMX9EKuA4QWMZZju08= Subject key identifier: A2:DF:E9:B5:3A:BA:FC:D3:28:30:46:10:75:F3:46:14:EA:BC:B3:B6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858484EDAC171A5B58F7FF76FFF80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8eec10f7-e7ed-3e00-8e27-944894619518.roa Signing time: Tue 24 Dec 2024 02:00:38 +0000 ROA not before: Tue 24 Dec 2024 02:00:38 +0000 ROA not after: Mon 24 Mar 2025 01:00:38 +0000 asID: 27411 IP address blocks: 166.88.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:da:c1:71:a5:b5:8f:7f:f7:6f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 24 02:00:38 2024 GMT Not After : Mar 24 01:00:38 2025 GMT Subject: CN=50dd095d-f4e1-4916-884e-6ee94576cc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:e0:1e:8c:c9:56:aa:83:f5:8d:88:85:c9: c6:d9:9b:d3:9c:42:08:69:66:50:e6:58:7b:2b:96: 7e:77:da:79:25:dc:a5:06:2a:da:da:43:94:1c:40: ce:37:6b:d8:89:f0:58:5e:c4:21:b6:0d:b7:be:8d: b8:65:42:e3:9c:43:da:a6:28:62:2e:96:0c:bc:b8: 64:3f:4b:70:5e:d9:6d:22:4c:a8:46:f2:01:98:16: 79:e8:7f:ea:bf:b2:69:48:c4:6a:7e:66:6d:86:f9: 51:0f:c6:b2:70:8d:9e:8b:65:d3:0c:18:96:12:25: a7:d2:3d:65:93:e1:99:67:68:11:2e:23:2c:1a:8f: ba:2a:62:5d:c7:1f:57:cb:8b:25:55:16:73:03:ce: 17:0f:80:51:c6:48:d9:02:e2:b8:3c:cd:bd:88:3f: cf:43:75:8b:c3:0e:50:41:aa:9c:1b:fd:cf:2e:0c: c5:6e:c8:8d:31:c4:2d:67:f3:e4:aa:96:f7:cb:61: ec:6a:26:4b:b8:4a:99:00:91:7f:96:f0:03:9d:35: 4d:1f:e5:d6:09:21:cc:5c:20:07:4c:2a:bd:00:b5: be:0d:20:e4:d7:5d:4c:e8:42:59:6d:81:80:37:f3: e8:c7:0e:ed:83:11:71:fc:c3:cd:27:76:94:8d:ad: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DF:E9:B5:3A:BA:FC:D3:28:30:46:10:75:F3:46:14:EA:BC:B3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8eec10f7-e7ed-3e00-8e27-944894619518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d5:7e:e6:d8:ee:d3:ea:2a:4a:83:f6:19:4b:e9:f7:99:64: 9a:26:07:c1:68:62:b0:49:25:9f:8b:ef:f4:eb:0f:82:24:41: 1e:7c:ca:86:5d:0c:26:5e:9f:da:b5:ad:99:a8:ad:24:e6:e0: 28:c0:12:f2:0a:ea:34:a5:ac:eb:5c:73:4b:0e:1c:e7:14:ad: 08:9e:8a:04:2d:24:9a:c8:6a:07:c6:2a:a4:b6:98:94:2b:eb: 16:fc:6e:51:dc:39:e8:41:8e:1c:52:c9:a8:1d:43:9e:cd:b9: bd:0a:7c:3f:95:e0:60:fc:3d:2e:f8:3b:28:c1:34:f1:6d:95: a1:f6:ca:09:cb:c1:c9:46:b3:cf:7f:22:c2:a1:c9:f6:1d:c8: 1b:1f:66:37:36:74:13:c1:9c:3b:a5:c7:93:55:0e:94:71:3b: 8c:46:9c:f2:34:f1:44:51:ff:99:dc:eb:57:71:d6:6c:a0:47: 4b:51:94:d1:b2:28:1d:7e:ad:1a:c4:73:82:a8:5b:b5:ac:27: 85:fc:c6:e0:19:69:e5:ef:cb:67:5b:c1:28:00:6a:bd:8e:1f: 3c:14:1a:a5:1c:a5:8e:9f:d0:ae:1c:2d:4f:76:fd:2c:9b:65: 64:2d:45:29:9b:f4:88:6b:a6:27:b1:93:03:17:5a:10:f5:73: a6:8e:1d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sFxpbWPf/dv/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk NTBkZDA5NWQtZjRlMS00OTE2LTg4NGUtNmVlOTQ1NzZjYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzgHozJVqqD9Y2IhcnG2ZvTnEIIaWZQ5lh7 K5Z+d9p5JdylBira2kOUHEDON2vYifBYXsQhtg23vo24ZULjnEPapihiLpYMvLhk P0twXtltIkyoRvIBmBZ56H/qv7JpSMRqfmZthvlRD8aycI2ei2XTDBiWEiWn0j1l k+GZZ2gRLiMsGo+6KmJdxx9Xy4slVRZzA84XD4BRxkjZAuK4PM29iD/PQ3WLww5Q QaqcG/3PLgzFbsiNMcQtZ/Pkqpb3y2HsaiZLuEqZAJF/lvADnTVNH+XWCSHMXCAH TCq9ALW+DSDk111M6EJZbYGAN/Poxw7tgxFx/MPNJ3aUja0UQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLf6bU6uvzTKDBGEHXzRhTqvLO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGVlYzEwZjctZTdlZC0z ZTAwLThlMjctOTQ0ODk0NjE5NTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3VfubY7tPqKkqD9hlL6feZZJomB8FoYrBJJZ+L7/TrD4IkQR58yoZd DCZen9q1rZmorSTm4CjAEvIK6jSlrOtcc0sOHOcUrQieigQtJJrIagfGKqS2mJQr 6xb8blHcOehBjhxSyagdQ57Nub0KfD+V4GD8PS74OyjBNPFtlaH2ygnLwclGs89/ IsKhyfYdyBsfZjc2dBPBnDulx5NVDpRxO4xGnPI08URR/5nc61dx1mygR0tRlNGy KB1+rRrEc4KoW7WsJ4X8xuAZaeXvy2dbwSgAar2OHzwUGqUcpY6f0K4cLU92/Syb ZWQtRSmb9IhrpiexkwMXWhD1c6aOHSU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:37 2025 by rpki-client