$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa File: 9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa (raw, json) Hash identifier: XpVVJRg4MOvGXyxn2x4eUr0nOBqg5LVLDVT/0lYl0W4= Subject key identifier: A1:34:60:FD:3D:D4:65:91:70:CB:16:B9:FC:EE:B8:94:0B:C3:CC:F6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2BA92F19DBE866A7817820 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 166.88.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:a9:2f:19:db:e8:66:a7:81:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=4d993a8c-533e-4ee4-8424-8a5ed1653965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:44:ef:4f:9d:f9:0f:a9:9e:f8:4c:57:9d: b0:36:49:ef:b6:be:6a:dd:86:dd:52:85:a5:68:99: 0d:53:4b:14:b7:84:03:19:26:c8:a2:b0:7a:8f:be: a2:f0:7c:2e:4a:06:87:3a:e2:c6:fe:8e:ae:72:9c: cc:10:48:24:11:2c:7a:e7:1d:2a:cd:83:60:84:b5: c3:32:0f:b1:7d:33:07:9a:1e:ae:f7:2e:f0:52:00: be:06:95:f0:43:6d:d5:f4:e9:c9:d8:3e:d0:61:21: 85:b7:dd:90:9e:cc:af:d4:b9:73:3f:e1:ff:ff:f1: e1:1e:95:11:eb:1e:5a:ef:ee:ce:d1:0f:2f:34:9e: c6:ee:ec:70:9f:0a:93:ff:41:7a:f6:7c:b6:96:c2: 89:de:5e:3f:e6:cb:3d:70:e5:26:30:d3:59:3d:59: dc:00:6d:cd:9f:2e:93:5d:12:3e:85:92:0f:46:b3: 7d:1c:9d:54:2c:38:c0:3f:29:d7:a1:ec:90:55:99: 79:da:50:bb:00:39:a9:d7:8e:47:74:f5:ed:91:1e: 6f:6f:09:a6:c7:fe:15:a2:47:04:84:79:10:7a:01: 7d:bf:c9:16:9a:cd:8b:75:32:3c:5b:29:44:31:68: cc:ca:1a:c8:86:8f:7e:cf:f5:15:46:15:09:10:ee: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:34:60:FD:3D:D4:65:91:70:CB:16:B9:FC:EE:B8:94:0B:C3:CC:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e6:1c:0d:2a:b1:95:ac:85:55:ac:9a:b6:e3:c5:71:8a:c9: 53:11:58:8e:12:27:f5:dc:fd:65:ec:5f:a5:74:b2:11:cb:fe: 1e:5f:ad:b8:68:5b:0f:65:d4:40:ca:31:57:2b:12:43:84:46: 83:71:1c:a1:03:ce:e3:25:a5:18:ab:39:d5:08:35:ae:f9:e0: 05:7c:f8:33:f8:d6:ad:e6:bf:85:17:c0:e0:ae:15:a6:ff:c5: 5e:06:d0:87:3f:00:cb:63:8c:b7:6d:30:91:69:bb:4b:35:4f: bb:c5:58:9f:7a:9d:2c:9b:0f:fb:f6:57:21:76:78:7c:1b:c4: 04:a5:45:68:c1:6f:50:20:78:cb:2f:64:03:ac:5a:66:34:a5: ef:eb:5f:9b:37:59:c2:81:b1:b3:c6:8b:0a:8f:3f:d1:d1:ff: 4d:9f:5e:24:d0:17:99:aa:7b:dc:9f:c4:44:9e:3b:e0:df:cc: 15:6b:93:e5:01:c0:08:59:0f:54:c7:df:9a:98:19:1f:69:fe: 7d:48:69:8c:e2:50:b1:e9:28:be:0c:ba:20:47:8b:2e:14:16: dc:91:cc:61:a0:81:f8:f5:89:f5:90:62:fd:f2:79:d3:81:00: 3e:4a:20:cd:da:de:f4:4d:93:df:8e:96:94:af:00:d5:81:02: 98:38:cf:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6kvGdvoZqeBeCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NGQ5OTNhOGMtNTMzZS00ZWU0LTg0MjQtOGE1ZWQxNjUzOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXpE70+d+Q+pnvhMV52wNknvtr5q3YbdUoWl aJkNU0sUt4QDGSbIorB6j76i8HwuSgaHOuLG/o6ucpzMEEgkESx65x0qzYNghLXD Mg+xfTMHmh6u9y7wUgC+BpXwQ23V9OnJ2D7QYSGFt92Qnsyv1LlzP+H///HhHpUR 6x5a7+7O0Q8vNJ7G7uxwnwqT/0F69ny2lsKJ3l4/5ss9cOUmMNNZPVncAG3Nny6T XRI+hZIPRrN9HJ1ULDjAPynXoeyQVZl52lC7ADmp145HdPXtkR5vbwmmx/4VokcE hHkQegF9v8kWms2LdTI8WylEMWjMyhrIho9+z/UVRhUJEO5X+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE0YP091GWRcMsWufzuuJQLw8z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTkzMTQwNGEtMWVjNi0z OWE1LTg2MGItNGFiNWNlZDdjMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLmHA0qsZWshVWsmrbjxXGKyVMRWI4SJ/Xc/WXsX6V0shHL/h5frbho Ww9l1EDKMVcrEkOERoNxHKEDzuMlpRirOdUINa754AV8+DP41q3mv4UXwOCuFab/ xV4G0Ic/AMtjjLdtMJFpu0s1T7vFWJ96nSybD/v2VyF2eHwbxASlRWjBb1AgeMsv ZAOsWmY0pe/rX5s3WcKBsbPGiwqPP9HR/02fXiTQF5mqe9yfxESeO+DfzBVrk+UB wAhZD1TH35qYGR9p/n1IaYziULHpKL4MuiBHiy4UFtyRzGGggfj1ifWQYv3yedOB AD5KIM3a3vRNk9+OlpSvANWBApg4z1Y= -----END CERTIFICATE-----Generated at Sat Apr 5 08:42:36 2025 by rpki-client