$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a20640f8-d411-31ba-bd81-0e42ea30dbaf.roa File: a20640f8-d411-31ba-bd81-0e42ea30dbaf.roa (raw, json) Hash identifier: 5vToU8OTtLNfbw+eEpb1+l76QIUpSvCSn7eHzeiLsRo= Subject key identifier: 1E:3B:BE:4A:56:D3:05:F1:D7:DE:A5:91:84:EB:28:0D:09:46:91:98 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858488C45D09C14B228A511AD72C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a20640f8-d411-31ba-bd81-0e42ea30dbaf.roa Signing time: Wed 15 Jan 2025 02:00:39 +0000 ROA not before: Wed 15 Jan 2025 02:00:39 +0000 ROA not after: Tue 15 Apr 2025 01:00:39 +0000 asID: 205220 IP address blocks: 166.88.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8c:45:d0:9c:14:b2:28:a5:11:ad:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 15 02:00:39 2025 GMT Not After : Apr 15 01:00:39 2025 GMT Subject: CN=a14f5273-ec25-433b-a5ab-42278dec7014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:49:2b:99:44:0a:54:fb:28:0e:01:0f:96: 55:5d:7e:54:25:00:ca:58:b2:b5:86:63:23:9a:6a: 61:55:1e:3d:5a:0f:33:d5:0f:8c:9e:0f:18:02:f6: cd:b3:ee:8b:75:a5:2e:71:d4:41:74:c4:99:e3:ea: 94:2c:ca:dd:79:c6:1b:9c:72:2a:25:66:92:d5:5e: 7d:86:17:68:d1:e8:59:1b:e7:b4:41:ca:6e:1c:c1: cf:bd:92:54:65:f9:8d:75:c0:2d:b6:72:5d:31:38: 43:bb:89:16:b1:d3:aa:0a:5c:ca:aa:7e:64:58:23: 5e:2e:5a:57:6c:ea:a1:4d:99:2c:1d:7e:1f:b9:48: 99:2a:17:58:4a:3d:fd:ac:0f:ff:3a:53:61:cd:b9: 88:62:45:e2:90:98:22:40:d4:69:a5:ad:ba:e4:03: 32:fb:80:ea:16:9e:8a:96:a3:0a:13:86:45:68:dd: 96:43:95:20:f7:c5:b9:b1:ba:63:67:f3:69:16:b4: d1:c9:34:76:dd:c3:a3:43:13:d9:2b:aa:d9:73:6b: ef:ca:f3:b7:ee:3a:a1:aa:e1:13:01:75:55:43:04: 6b:77:82:72:3b:b9:5a:da:9e:cc:14:b0:a0:7e:87: 5a:99:be:af:2f:3a:3b:0d:e0:b0:30:44:c1:13:90: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:BE:4A:56:D3:05:F1:D7:DE:A5:91:84:EB:28:0D:09:46:91:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a20640f8-d411-31ba-bd81-0e42ea30dbaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:61:1d:f1:2d:63:59:b4:f2:a1:85:56:a0:04:9c:72:c4:c9: 0f:02:e1:a2:ec:a4:cd:2d:ab:f4:25:ec:f1:8a:77:a5:88:e2: 2d:29:1a:7a:f6:1d:b1:3f:2f:c5:dc:2f:0a:62:d0:bb:e7:1c: b0:d2:62:c4:14:39:05:b9:d3:f8:b6:57:ca:33:17:4d:04:f9: d7:55:77:a2:06:53:2c:3d:97:b7:a3:d7:cf:5a:38:35:53:17: 4f:94:02:2d:11:50:ca:a2:3c:00:eb:90:49:0d:7a:eb:1a:c9: 0a:b1:bc:48:13:6c:91:7a:55:bc:61:e7:6f:8e:df:39:37:18: 4d:18:d2:73:0d:54:30:cf:0f:d6:46:3c:fb:dc:82:b0:8f:96: 9f:95:86:8c:00:af:fd:4a:7c:1a:17:55:86:2a:d9:af:58:9d: 64:07:52:f5:1b:8e:5d:b0:99:bf:71:ac:e0:a9:f4:95:ac:0c: 34:29:de:fc:bf:22:6f:26:0a:45:ed:35:f5:03:b0:3a:3a:38: db:68:17:48:55:76:9e:02:00:ac:b9:63:16:06:c6:de:8b:84: 8e:63:ca:b9:f2:34:28:99:50:10:f0:4e:7f:eb:96:5a:b7:62: 01:4d:d1:c7:40:29:42:ae:29:fb:69:1e:f3:75:73:fe:04:bd: ac:98:02:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiMRdCcFLIopRGtcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExNTAyMDAzOVoXDTI1MDQxNTAxMDAzOVowLzEtMCsGA1UEAxMk YTE0ZjUyNzMtZWMyNS00MzNiLWE1YWItNDIyNzhkZWM3MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmthJK5lEClT7KA4BD5ZVXX5UJQDKWLK1hmMj mmphVR49Wg8z1Q+Mng8YAvbNs+6LdaUucdRBdMSZ4+qULMrdecYbnHIqJWaS1V59 hhdo0ehZG+e0QcpuHMHPvZJUZfmNdcAttnJdMThDu4kWsdOqClzKqn5kWCNeLlpX bOqhTZksHX4fuUiZKhdYSj39rA//OlNhzbmIYkXikJgiQNRppa265AMy+4DqFp6K lqMKE4ZFaN2WQ5Ug98W5sbpjZ/NpFrTRyTR23cOjQxPZK6rZc2vvyvO37jqhquET AXVVQwRrd4JyO7la2p7MFLCgfodamb6vLzo7DeCwMETBE5A8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB47vkpW0wXx196lkYTrKA0JRpGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTIwNjQwZjgtZDQxMS0z MWJhLWJkODEtMGU0MmVhMzBkYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlhHfEtY1m08qGFVqAEnHLEyQ8C4aLspM0tq/Ql7PGKd6WI4i0pGnr2 HbE/L8XcLwpi0LvnHLDSYsQUOQW50/i2V8ozF00E+ddVd6IGUyw9l7ej189aODVT F0+UAi0RUMqiPADrkEkNeusayQqxvEgTbJF6Vbxh52+O3zk3GE0Y0nMNVDDPD9ZG PPvcgrCPlp+VhowAr/1KfBoXVYYq2a9YnWQHUvUbjl2wmb9xrOCp9JWsDDQp3vy/ Im8mCkXtNfUDsDo6ONtoF0hVdp4CAKy5YxYGxt6LhI5jyrnyNCiZUBDwTn/rllq3 YgFN0cdAKUKuKftpHvN1c/4EvayYAvM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:02 2025 by rpki-client