$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a8a86c5a-7445-3f6e-b270-97fcc95d3168.roa File: a8a86c5a-7445-3f6e-b270-97fcc95d3168.roa (raw, json) Hash identifier: vRiVja3PkkEgvOfnMLYGOcDOXZExkoyM3MQw4wMkXgU= Subject key identifier: E4:7F:B5:C5:8C:76:0C:E9:BA:14:AD:98:4A:29:32:E3:C1:DB:8C:AE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584898D61E4C5DC7BE6BB19DC840 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a8a86c5a-7445-3f6e-b270-97fcc95d3168.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 57043 IP address blocks: 166.88.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1e:4c:5d:c7:be:6b:b1:9d:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=de81892b-fbd4-4822-a2cd-e0f71f7d30c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:11:ce:c7:2d:a3:4b:02:2e:4a:76:44:ac: a4:6d:a3:7d:f5:b0:3a:f8:e4:bc:d0:2d:90:82:b1: dd:5b:9c:bc:df:e0:26:21:d6:52:78:bd:46:f3:17: 61:27:38:57:25:e6:5e:23:23:4c:53:2a:6d:ef:5d: 37:7b:8c:42:6c:36:d3:a9:72:19:12:23:fd:b0:54: e2:a2:a1:bc:49:fc:d1:86:f7:ae:6d:e2:10:aa:06: e3:42:4a:4b:59:28:a5:ad:d6:59:11:02:f9:20:cc: 4c:3f:cc:56:9b:1b:32:47:09:88:ae:59:8b:56:51: 9a:28:d4:20:61:6c:c7:1a:b7:70:56:74:6c:88:2c: 3f:96:1e:a7:82:65:6a:5e:18:83:7e:ff:08:95:27: 11:22:13:48:97:f1:08:22:c0:dc:a8:44:c9:5c:f6: e2:b3:c0:30:1e:71:11:82:f8:43:d6:88:48:64:2d: d1:f5:26:48:71:03:f9:6a:86:ce:cd:e7:ed:56:fa: 0f:7e:55:d4:14:b9:83:ba:1b:2d:52:46:57:0d:cc: 46:84:f9:aa:df:27:29:de:69:37:36:56:2e:02:3a: 5b:f6:f1:f6:6f:18:f0:3d:1e:f7:08:f2:47:b0:01: 97:49:37:7f:42:45:f8:7b:22:07:2c:75:ab:4d:3c: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7F:B5:C5:8C:76:0C:E9:BA:14:AD:98:4A:29:32:E3:C1:DB:8C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a8a86c5a-7445-3f6e-b270-97fcc95d3168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f9:c9:c5:00:fd:63:46:6a:21:f2:38:c5:64:1a:c9:f8:4f: 19:ab:b6:a3:75:5a:34:02:5c:27:74:74:88:c1:29:ab:8f:91: 5c:67:0e:aa:91:c9:5c:8f:5b:b3:b1:03:d1:a3:55:8d:d7:54: f2:b9:c4:75:3e:05:27:1a:9c:11:20:45:c2:92:4c:b6:3e:7b: 44:68:5c:a1:d0:34:33:c3:a7:20:fc:c3:09:0e:a6:34:54:27: 9d:70:b1:66:ab:b4:77:54:5c:35:bf:c1:13:fc:f6:8d:e1:ff: cc:9e:fb:44:dd:7e:c7:eb:04:91:14:d3:7d:11:a6:27:4a:71: f4:2e:15:c5:b0:0d:69:db:10:78:5e:c4:6d:90:62:92:d7:45: b1:1b:e3:22:27:98:bb:61:58:3f:b0:00:06:28:2f:b3:1a:31: 23:99:15:70:a2:fb:fc:64:24:48:8f:1b:ca:1f:82:fc:eb:7a: 2e:06:1f:5e:9c:8b:f3:4e:dc:4e:b0:a8:1e:12:11:ae:56:54: 8a:64:42:07:fd:65:86:6f:be:0c:4d:f8:42:9b:da:40:10:1b: c6:ff:f8:18:7b:7c:72:96:ba:89:dd:59:d3:3b:e9:b4:b0:dd: b3:db:c8:dc:41:f2:fd:20:6f:f7:57:43:32:62:ae:2b:f2:68: 71:80:b0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h5MXce+a7GdyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGU4MTg5MmItZmJkNC00ODIyLWEyY2QtZTBmNzFmN2QzMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRgRzscto0sCLkp2RKykbaN99bA6+OS80C2Q grHdW5y83+AmIdZSeL1G8xdhJzhXJeZeIyNMUypt7103e4xCbDbTqXIZEiP9sFTi oqG8SfzRhveubeIQqgbjQkpLWSilrdZZEQL5IMxMP8xWmxsyRwmIrlmLVlGaKNQg YWzHGrdwVnRsiCw/lh6ngmVqXhiDfv8IlScRIhNIl/EIIsDcqETJXPbis8AwHnER gvhD1ohIZC3R9SZIcQP5aobOzeftVvoPflXUFLmDuhstUkZXDcxGhPmq3ycp3mk3 NlYuAjpb9vH2bxjwPR73CPJHsAGXSTd/QkX4eyIHLHWrTTxOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR/tcWMdgzpuhStmEopMuPB24yuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYThhODZjNWEtNzQ0NS0z ZjZlLWIyNzAtOTdmY2M5NWQzMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP5ycUA/WNGaiHyOMVkGsn4TxmrtqN1WjQCXCd0dIjBKauPkVxnDqqR yVyPW7OxA9GjVY3XVPK5xHU+BScanBEgRcKSTLY+e0RoXKHQNDPDpyD8wwkOpjRU J51wsWartHdUXDW/wRP89o3h/8ye+0TdfsfrBJEU030RpidKcfQuFcWwDWnbEHhe xG2QYpLXRbEb4yInmLthWD+wAAYoL7MaMSOZFXCi+/xkJEiPG8ofgvzrei4GH16c i/NO3E6wqB4SEa5WVIpkQgf9ZYZvvgxN+EKb2kAQG8b/+Bh7fHKWuondWdM76bSw 3bPbyNxB8v0gb/dXQzJirivyaHGAsAs= -----END CERTIFICATE-----Generated at Fri Apr 4 19:51:47 2025 by rpki-client