$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa File: b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa (raw, json) Hash identifier: YZ8voOlN/rNKYyGjXTBR3WmfZQZiLhmnNjHN+C0/ZrY= Subject key identifier: 39:E4:AC:AD:99:CC:BD:28:AD:02:73:BD:83:74:CF:AB:C2:4B:95:15 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584777CDB0C7B5C297385AE7DA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa Signing time: Tue 08 Oct 2024 01:15:35 +0000 ROA not before: Tue 08 Oct 2024 01:15:35 +0000 ROA not after: Mon 06 Jan 2025 02:15:35 +0000 asID: 5650 IP address blocks: 166.88.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:cd:b0:c7:b5:c2:97:38:5a:e7:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 8 01:15:35 2024 GMT Not After : Jan 6 02:15:35 2025 GMT Subject: CN=25c5c50a-60c8-4b37-9f8c-8d6c31a3d530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:2d:16:f8:18:1d:fa:eb:73:cb:b5:0a:f9: db:9b:11:7f:c5:9d:98:58:09:f7:86:12:ed:eb:ab: ae:af:b2:b2:52:37:dd:b6:79:27:03:4f:3d:66:27: 52:fc:c8:00:86:f8:31:56:d3:5e:86:f4:5a:65:5d: 95:d2:ea:58:c2:61:e2:8e:a5:7b:03:1b:ec:d3:80: fd:c3:01:80:fa:b5:cd:c5:34:ab:c7:77:a0:49:4d: 0d:b3:f1:33:f9:3c:da:17:bf:ef:7d:f2:c4:ef:25: c8:d0:7a:b0:dd:68:02:5b:50:de:67:a3:59:ea:c7: 84:1e:d7:21:12:0d:ab:24:20:db:57:ee:62:20:c2: 45:1b:8d:a8:05:61:36:2f:0b:71:b5:20:bd:94:5d: 7f:2c:fa:7d:45:e0:c1:42:86:5b:15:50:34:a6:e3: 92:96:c7:6e:05:7d:95:3c:c1:7f:cc:d6:1c:0b:52: 64:90:33:e4:ac:6e:fa:0e:3a:21:d4:88:10:2e:7e: 0b:78:76:b5:b2:8e:81:38:5e:cc:3b:79:17:9d:95: 01:d8:00:82:ca:ef:f1:19:48:2f:d5:54:35:fd:68: eb:1a:60:3d:1f:f7:20:37:db:6a:83:65:b7:8c:3c: 43:66:58:11:e8:08:1c:30:62:6d:2f:81:5e:c7:43: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E4:AC:AD:99:CC:BD:28:AD:02:73:BD:83:74:CF:AB:C2:4B:95:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b7:a9:72:e7:83:cc:2e:d1:33:b5:d9:1e:53:21:51:9d:f8: 93:1e:89:1f:d1:3a:be:fc:8b:f9:cd:50:74:75:9b:89:0b:34: 42:d7:b4:50:68:ba:8e:75:14:0d:cd:8a:9f:88:10:12:14:ed: 8d:e4:8d:98:73:a8:bc:b8:fa:bf:fc:0a:98:ac:4e:ff:ef:eb: c1:aa:e5:d5:01:53:a5:d9:62:f7:9c:7e:3b:68:d5:61:cd:89: b2:77:ea:c1:68:cd:bd:56:61:91:61:96:5f:89:86:64:55:c7: f3:d8:42:24:d7:b6:28:a8:79:da:ba:15:54:c7:81:78:6e:ef: c6:65:47:de:19:70:ee:43:1d:4f:18:9f:c3:eb:8b:ba:a4:d7: 9b:0b:04:ef:87:74:c6:b9:7d:ef:b9:ad:1d:75:1d:35:b4:8a: 40:6d:1e:8a:47:bf:31:a6:b6:e5:c4:d4:43:8e:80:eb:90:f0: 10:d4:84:93:10:5e:d8:af:c4:fc:89:c2:e4:6c:7d:da:c1:86: 99:84:ae:bc:f5:3a:af:9d:31:ef:cc:bf:7f:23:55:2e:73:30: a3:ed:19:bc:9e:8d:5c:6a:f7:bb:67:24:62:34:86:89:23:75: 02:f7:25:68:19:70:cf:a2:88:0a:4e:6d:64:08:7e:9d:7f:bf: cb:d0:0d:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3zbDHtcKXOFrn2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAwODAxMTUzNVoXDTI1MDEwNjAyMTUzNVowLzEtMCsGA1UEAxMk MjVjNWM1MGEtNjBjOC00YjM3LTlmOGMtOGQ2YzMxYTNkNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaktFvgYHfrrc8u1CvnbmxF/xZ2YWAn3hhLt 66uur7KyUjfdtnknA089ZidS/MgAhvgxVtNehvRaZV2V0upYwmHijqV7Axvs04D9 wwGA+rXNxTSrx3egSU0Ns/Ez+TzaF7/vffLE7yXI0Hqw3WgCW1DeZ6NZ6seEHtch Eg2rJCDbV+5iIMJFG42oBWE2LwtxtSC9lF1/LPp9ReDBQoZbFVA0puOSlsduBX2V PMF/zNYcC1JkkDPkrG76Djoh1IgQLn4LeHa1so6BOF7MO3kXnZUB2ACCyu/xGUgv 1VQ1/WjrGmA9H/cgN9tqg2W3jDxDZlgR6AgcMGJtL4Fex0M/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnkrK2ZzL0orQJzvYN0z6vCS5UVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjQ4ZTU0ZjItNjNhYS0z NDExLWE2NjgtYTJlNjkyYTZmNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApli/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa3qXLng8wu0TO12R5TIVGd+JMeiR/ROr78i/nNUHR1m4kLNELXtFBo uo51FA3Nip+IEBIU7Y3kjZhzqLy4+r/8CpisTv/v68Gq5dUBU6XZYvecfjto1WHN ibJ36sFozb1WYZFhll+JhmRVx/PYQiTXtiioedq6FVTHgXhu78ZlR94ZcO5DHU8Y n8Pri7qk15sLBO+HdMa5fe+5rR11HTW0ikBtHopHvzGmtuXE1EOOgOuQ8BDUhJMQ XtivxPyJwuRsfdrBhpmErrz1Oq+dMe/Mv38jVS5zMKPtGbyejVxq97tnJGI0hokj dQL3JWgZcM+iiApObWQIfp1/v8vQDT4= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:56 2024 by rpki-client on console-fra.rpki-client.org