$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa File: 97323aa4-4c62-3939-8fc0-39273a9a2b71.roa (raw, json) Hash identifier: jb+oos6Ttpbmi9z4p81Y82xRGwKmQ+esYJCd7IrkAgA= Subject key identifier: 16:54:0E:A8:83:82:BA:04:2F:1C:55:23:82:13:F6:05:2D:A9:F4:FE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848A99660F60565BA4E8A894880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 149440 IP address blocks: 166.88.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:60:f6:05:65:ba:4e:8a:89:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=58f4a2fd-f881-4de9-848c-6835bddbf1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:97:97:05:77:d6:46:c7:6e:f7:0c:42:03: 88:42:89:71:18:9a:3e:b4:1e:07:8a:11:3c:e9:6c: 2b:85:53:5b:92:6f:93:0f:b1:37:25:10:9d:4b:ca: 48:af:f5:60:81:3a:5e:26:aa:d0:56:4b:73:6e:ba: d6:8d:1e:92:4c:d9:1c:25:8c:8f:8c:3c:7a:fc:f2: cb:0a:a6:09:f6:89:ec:ae:11:fe:99:56:e5:e3:b9: dc:6d:c8:61:a8:ff:91:3a:bf:af:ed:c3:28:f9:81: 44:6a:bb:b7:72:a6:3b:40:25:f0:df:d3:5f:4b:55: 8e:ef:f7:7e:e6:0d:35:79:be:28:d0:9b:57:bb:b8: 54:2c:86:ad:ef:c0:14:2f:d7:11:4b:ba:0c:63:a4: 43:ad:ec:4b:33:f3:c2:43:8b:6d:19:ec:89:f2:c9: bd:5e:09:02:52:e6:ba:7b:41:3c:d8:f5:a2:d0:5d: e4:2d:a9:cc:3f:ee:ea:90:58:75:e3:b0:d2:74:9e: 72:d0:b7:48:9f:c8:15:e4:92:15:03:14:b2:2d:92: a5:3b:ce:3a:38:b6:3b:ed:2c:e1:d6:6c:eb:e1:2d: 7c:5e:d5:85:4e:da:36:53:12:d7:ff:e5:8b:81:2c: c6:97:36:9c:dc:85:2c:ac:24:78:51:ec:bb:7c:cc: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:54:0E:A8:83:82:BA:04:2F:1C:55:23:82:13:F6:05:2D:A9:F4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ba:1e:53:38:37:70:7b:b2:8a:a3:e6:56:61:ce:dc:d3:eb: ec:c1:05:73:39:c9:e1:49:c6:b1:33:8e:c0:be:95:c4:c9:8e: cc:61:9c:ed:03:a2:74:dc:94:07:c0:c1:aa:cf:bb:5a:f2:c3: 2e:74:75:24:b1:62:d1:0c:43:f9:44:95:18:b3:ab:e0:b2:5a: ec:b9:57:05:26:dd:cd:5c:4c:de:a8:e3:56:69:cf:88:03:ac: 2e:8e:05:ea:24:70:d3:2e:c5:82:59:15:44:5b:88:38:c7:5c: ce:9e:41:93:4e:6c:be:ec:d9:d6:d7:26:d7:88:f7:02:95:4f: ae:28:a2:25:8d:40:2e:ab:a1:5c:28:b8:4d:c7:f6:de:c6:63: a2:79:ed:26:67:55:4b:cb:35:84:75:6c:a2:a3:f2:1f:90:70: 3c:3a:7a:00:89:aa:73:47:38:65:2d:ee:53:5c:ef:07:17:17: fc:7d:53:06:b9:61:f1:ed:80:ab:69:25:4d:37:ad:50:10:d6: 6b:45:e9:85:e7:e5:62:68:c9:84:80:86:74:d9:ef:06:0a:17: 0e:60:78:aa:a5:e8:5e:8b:64:61:88:df:40:fa:b7:11:15:cd: 5f:ff:52:e1:b5:46:c8:26:a6:fe:15:29:cc:ac:3c:0c:de:0c: ed:35:91:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmD2BWW6ToqJSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NThmNGEyZmQtZjg4MS00ZGU5LTg0OGMtNjgzNWJkZGJmMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijqXlwV31kbHbvcMQgOIQolxGJo+tB4HihE8 6WwrhVNbkm+TD7E3JRCdS8pIr/VggTpeJqrQVktzbrrWjR6STNkcJYyPjDx6/PLL CqYJ9onsrhH+mVbl47ncbchhqP+ROr+v7cMo+YFEaru3cqY7QCXw39NfS1WO7/d+ 5g01eb4o0JtXu7hULIat78AUL9cRS7oMY6RDrexLM/PCQ4ttGeyJ8sm9XgkCUua6 e0E82PWi0F3kLanMP+7qkFh147DSdJ5y0LdIn8gV5JIVAxSyLZKlO846OLY77Szh 1mzr4S18XtWFTto2UxLX/+WLgSzGlzac3IUsrCR4Uey7fMw+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZUDqiDgroELxxVI4IT9gUtqfT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTczMjNhYTQtNGM2Mi0z OTM5LThmYzAtMzkyNzNhOWEyYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq6HlM4N3B7soqj5lZhztzT6+zBBXM5yeFJxrEzjsC+lcTJjsxhnO0D onTclAfAwarPu1rywy50dSSxYtEMQ/lElRizq+CyWuy5VwUm3c1cTN6o41Zpz4gD rC6OBeokcNMuxYJZFURbiDjHXM6eQZNObL7s2dbXJteI9wKVT64ooiWNQC6roVwo uE3H9t7GY6J57SZnVUvLNYR1bKKj8h+QcDw6egCJqnNHOGUt7lNc7wcXF/x9Uwa5 YfHtgKtpJU03rVAQ1mtF6YXn5WJoyYSAhnTZ7wYKFw5geKql6F6LZGGI30D6txEV zV//UuG1Rsgmpv4VKcysPAzeDO01kYc= -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:56 2025 by rpki-client