$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa File: a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa (raw, json) Hash identifier: T7wkfzf2+VWAKMKua8HtAVajnl3o1TB5tSa2ye4nIgI= Subject key identifier: 72:02:40:CF:2E:C0:E7:04:AA:6E:92:C9:97:18:3E:1D:2E:35:29:FA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8E61E18BAFB4D9C174C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 212238 IP address blocks: 166.88.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8e:61:e1:8b:af:b4:d9:c1:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=9b22fd1d-834e-4480-88ac-8cc2890548e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:6e:57:01:fa:a1:59:ff:3f:98:6e:83:26: 93:e2:a3:2d:e1:bd:df:ba:b4:c6:e7:2d:6a:09:38: 7b:47:49:df:70:43:56:0e:c5:cf:78:73:b9:2b:6c: 2f:60:95:ad:de:b2:2f:5f:9d:7e:98:7d:9e:c8:47: ff:71:f7:03:e3:ac:72:6a:23:3d:21:dc:4b:c5:b0: 60:40:37:1d:61:5f:66:de:f6:59:0c:ea:49:5c:bf: 28:51:a3:15:e2:25:c4:a4:35:5a:3f:51:59:ab:f8: 53:8f:f9:4d:e9:82:f3:b9:1a:97:bb:d1:5f:7a:08: 95:d9:74:85:b4:76:ba:76:e2:cb:23:53:c1:8c:1f: f1:24:76:8c:38:89:af:63:74:58:87:40:18:ca:a2: ba:7c:38:4a:cd:d5:59:4c:4e:95:e3:01:03:20:37: 13:3f:d6:b5:32:bc:e7:12:db:cf:0f:af:6c:52:67: 63:db:3c:d9:c2:38:56:36:98:b8:83:6d:a8:17:36: 68:bf:0d:26:e5:e3:52:ca:69:93:91:36:57:bb:0f: 29:b1:53:1c:cd:0f:a5:32:92:3e:4f:69:88:16:28: 1a:c0:55:d7:1a:f9:e7:33:65:80:d0:c2:75:b0:88: 6d:15:b6:2e:7e:6f:a2:2c:80:76:0e:a3:58:55:7e: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:02:40:CF:2E:C0:E7:04:AA:6E:92:C9:97:18:3E:1D:2E:35:29:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2a:07:94:02:47:6f:c0:71:ac:d4:58:81:c9:53:f4:97:a7: 7b:0c:3a:f5:10:8e:15:c9:a7:22:4f:3a:97:39:e5:10:99:80: d0:35:c5:8e:0d:83:4d:09:f0:d0:89:4d:3b:74:bf:da:31:8f: 7d:6b:70:e6:f4:ef:e8:f9:aa:b6:94:9f:86:7a:64:78:bf:7d: be:b9:da:e7:50:a9:c2:df:2b:01:ab:33:3c:57:53:28:56:93: 43:e5:2c:5d:52:02:76:cd:32:7f:c1:13:c3:f2:5a:33:53:c0: d2:f0:8d:4a:a4:97:d3:eb:1d:47:3f:13:a2:d4:e2:e6:12:45: 73:eb:ae:f8:d8:65:53:dd:27:58:24:42:37:12:1d:45:a5:94: 80:e3:6e:4c:95:3e:4e:2e:fe:7e:1f:f9:32:2e:39:28:43:53: 3f:d9:cf:e1:d1:03:a2:dd:0b:4d:b8:fd:47:9f:fb:d6:28:8e: 59:17:9a:b6:b0:d9:de:7f:a8:f7:64:87:06:2e:eb:08:81:42: 69:20:56:35:03:bb:87:ee:2d:bc:10:93:bb:fc:2c:dd:47:11: f8:f0:34:a1:01:9c:f1:3e:3b:e6:6d:3d:71:10:2a:83:93:60: ae:f7:58:dc:47:d7:29:00:bb:c8:d7:45:a8:34:14:bf:77:18: b8:37:5b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i45h4YuvtNnBdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk OWIyMmZkMWQtODM0ZS00NDgwLTg4YWMtOGNjMjg5MDU0OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU1uVwH6oVn/P5hugyaT4qMt4b3furTG5y1q CTh7R0nfcENWDsXPeHO5K2wvYJWt3rIvX51+mH2eyEf/cfcD46xyaiM9IdxLxbBg QDcdYV9m3vZZDOpJXL8oUaMV4iXEpDVaP1FZq/hTj/lN6YLzuRqXu9FfegiV2XSF tHa6duLLI1PBjB/xJHaMOImvY3RYh0AYyqK6fDhKzdVZTE6V4wEDIDcTP9a1Mrzn EtvPD69sUmdj2zzZwjhWNpi4g22oFzZovw0m5eNSymmTkTZXuw8psVMczQ+lMpI+ T2mIFigawFXXGvnnM2WA0MJ1sIhtFbYufm+iLIB2DqNYVX56OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHICQM8uwOcEqm6SyZcYPh0uNSn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTc5NmQ5ZTgtM2UzNC0z MWU1LWE4ZDAtYTVjOGJmOWFiZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcqB5QCR2/AcazUWIHJU/SXp3sMOvUQjhXJpyJPOpc55RCZgNA1xY4N g00J8NCJTTt0v9oxj31rcOb07+j5qraUn4Z6ZHi/fb652udQqcLfKwGrMzxXUyhW k0PlLF1SAnbNMn/BE8PyWjNTwNLwjUqkl9PrHUc/E6LU4uYSRXPrrvjYZVPdJ1gk QjcSHUWllIDjbkyVPk4u/n4f+TIuOShDUz/Zz+HRA6LdC024/Uef+9YojlkXmraw 2d5/qPdkhwYu6wiBQmkgVjUDu4fuLbwQk7v8LN1HEfjwNKEBnPE+O+ZtPXEQKoOT YK73WNxH1ykAu8jXRag0FL93GLg3W+M= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:40 2025 by rpki-client