$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b574a872-1206-37a7-a15d-e486565689e2.roa File: b574a872-1206-37a7-a15d-e486565689e2.roa (raw, json) Hash identifier: CmZlmgQwGC1BfEfaEysaZ0PrxHXpqpPTFlcwOZ2cprA= Subject key identifier: 39:D9:CF:2C:25:AA:9D:6E:4B:D0:73:C7:57:CD:6D:64:B5:53:D0:5D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D6411DA3B155FB4A8EA1E880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b574a872-1206-37a7-a15d-e486565689e2.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 15083 IP address blocks: 166.88.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:1d:a3:b1:55:fb:4a:8e:a1:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=e819b222-1e92-440b-a146-090b5bca6c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:86:7e:52:72:79:1d:47:49:df:0d:e8:15: f9:af:18:9d:f6:2d:b9:b4:c6:ca:5c:51:7a:4a:d0: f3:c2:55:9c:35:f2:a3:70:5d:e7:38:b1:1b:ef:1f: c3:19:cc:f3:70:89:5c:e6:c3:4a:89:fd:0f:9c:41: fc:42:a6:29:f1:ff:15:87:10:aa:38:07:d1:70:08: ba:41:90:40:ee:87:2b:19:6e:fb:63:66:8b:bb:52: 07:ca:8b:77:2e:f8:7b:61:ad:d7:70:b6:e7:d3:8b: 9f:d9:b9:51:cd:84:b3:a5:8f:4d:c4:f0:45:34:ab: ae:e2:e2:60:79:78:1a:f2:8d:17:55:ad:9d:8a:1b: 17:28:fd:74:2e:2c:98:f0:2c:33:eb:ee:40:98:a8: c1:48:69:b9:c8:b4:5e:a4:57:43:69:1b:18:26:1d: 23:ac:82:02:f4:f2:19:d9:f8:13:f2:82:eb:dd:b4: 99:6a:f5:6e:3d:4d:2a:b6:5d:9f:ff:4a:f6:6b:38: b8:77:72:f1:77:6e:42:74:72:ec:92:4d:32:83:c0: 64:77:bc:a8:0b:6d:72:1c:8d:91:51:01:28:0e:22: b7:1b:fb:c3:76:af:b7:cb:eb:f9:4a:56:3e:e0:67: 91:7e:b8:a1:74:89:87:a5:4e:77:81:50:44:cf:be: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D9:CF:2C:25:AA:9D:6E:4B:D0:73:C7:57:CD:6D:64:B5:53:D0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b574a872-1206-37a7-a15d-e486565689e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:25:bc:c1:6b:b8:53:b1:81:08:bb:d9:9d:76:79:d2:d9:07: 38:1f:5c:ef:33:21:0e:a9:b0:f0:3a:58:97:9f:48:e7:8d:78: ed:0e:fc:9a:0e:2e:66:cb:a8:de:c1:4f:73:5d:25:03:37:db: 30:2f:7f:f2:ce:ae:c9:02:1e:c8:51:20:21:05:e2:d1:aa:1b: 5c:87:0d:48:69:5f:bd:15:0d:50:ed:a0:07:e8:2c:bc:91:42: 2a:c3:58:e3:4f:b1:72:9e:97:75:d5:ba:ae:96:0e:f9:e1:ec: 87:e3:6b:cd:14:74:6a:0e:51:47:90:a4:c5:bd:69:78:19:f6: 2f:50:ab:1b:b5:b1:9e:22:fe:15:62:8b:70:8e:30:a5:8e:e3: fc:37:a5:ad:55:d6:1d:23:a2:19:e7:90:50:7b:01:57:9b:03: 05:d5:e4:27:59:a8:29:e9:22:b4:57:c8:0a:40:66:9e:8c:44: 17:a6:06:60:4a:c0:02:3e:2b:29:e4:0c:d9:58:d8:3f:25:a9: a9:a0:1b:ae:8e:47:55:dc:00:49:d1:0b:70:47:69:cd:12:d4: b6:c0:ad:5c:6d:a3:ce:4e:2e:59:55:b7:3c:1c:d5:cb:02:ec: c3:e6:bb:20:0c:ad:c3:7e:72:5d:1e:c4:de:3b:bd:3f:36:5a: d3:55:c8:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQR2jsVX7So6h6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTgxOWIyMjItMWU5Mi00NDBiLWExNDYtMDkwYjViY2E2YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFyGflJyeR1HSd8N6BX5rxid9i25tMbKXFF6 StDzwlWcNfKjcF3nOLEb7x/DGczzcIlc5sNKif0PnEH8QqYp8f8VhxCqOAfRcAi6 QZBA7ocrGW77Y2aLu1IHyot3Lvh7Ya3XcLbn04uf2blRzYSzpY9NxPBFNKuu4uJg eXga8o0XVa2dihsXKP10LiyY8Cwz6+5AmKjBSGm5yLRepFdDaRsYJh0jrIIC9PIZ 2fgT8oLr3bSZavVuPU0qtl2f/0r2azi4d3Lxd25CdHLskk0yg8Bkd7yoC21yHI2R UQEoDiK3G/vDdq+3y+v5SlY+4GeRfrihdImHpU53gVBEz74daQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnZzywlqp1uS9Bzx1fNbWS1U9BdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjU3NGE4NzItMTIwNi0z N2E3LWExNWQtZTQ4NjU2NTY4OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABglvMFruFOxgQi72Z12edLZBzgfXO8zIQ6psPA6WJefSOeNeO0O/JoO LmbLqN7BT3NdJQM32zAvf/LOrskCHshRICEF4tGqG1yHDUhpX70VDVDtoAfoLLyR QirDWONPsXKel3XVuq6WDvnh7Ifja80UdGoOUUeQpMW9aXgZ9i9Qqxu1sZ4i/hVi i3COMKWO4/w3pa1V1h0johnnkFB7AVebAwXV5CdZqCnpIrRXyApAZp6MRBemBmBK wAI+KynkDNlY2D8lqamgG66OR1XcAEnRC3BHac0S1LbArVxto85OLllVtzwc1csC 7MPmuyAMrcN+cl0exN47vT82WtNVyI4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:34 2025 by rpki-client