$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa File: c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa (raw, json) Hash identifier: XvU/teMcuhhBu8IGzx23coE7U3rpA1hThLrlbEWjFYY= Subject key identifier: 05:CB:AE:6A:D7:1B:96:48:C5:2A:46:76:DF:4B:99:10:CE:97:77:6C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848ADC627F91368F5F5F42FC280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 26383 IP address blocks: 166.88.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:27:f9:13:68:f5:f5:f4:2f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=f1062b50-2269-461e-b587-fcc5c157d15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:33:c1:0e:2d:56:e2:2c:b1:63:9f:09:82: fc:e5:37:9e:f9:b6:55:35:76:6e:2b:eb:38:64:72: 90:93:5d:ae:8a:7b:8a:ad:60:b0:5d:c9:23:14:b5: ce:c6:c9:16:61:11:db:b1:d0:9c:71:61:78:11:54: d7:80:54:10:4e:44:4c:68:75:9b:9e:29:99:ec:15: 34:b8:2f:52:c7:31:d7:55:70:36:40:6c:fe:89:be: 41:a6:25:d7:16:51:fe:26:0f:e9:f5:f1:e5:14:56: d8:6d:1a:f7:26:12:9f:49:87:18:d3:cd:4b:3a:0e: b6:5b:83:ba:3f:2d:96:85:94:69:4d:2c:94:73:3b: b3:9c:a0:03:1e:b8:21:bb:01:9e:17:15:8d:10:1a: e8:d9:9f:cf:b8:ba:30:af:16:50:75:8e:5e:3b:bd: 39:05:e3:1b:c1:ca:b9:7c:e8:4e:68:e7:9e:56:a4: c0:71:b6:51:e5:4e:d0:90:42:44:f9:c2:58:8e:17: 4e:22:0c:3e:63:5b:a0:77:5f:94:12:da:75:d6:86: c9:88:25:3e:d0:d7:c4:48:f8:73:3f:34:98:38:0a: 00:bf:0e:bb:89:b3:75:2c:80:f0:5c:d9:9f:3e:84: 76:61:e2:88:74:e8:f4:00:15:c0:96:7a:08:4e:72: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CB:AE:6A:D7:1B:96:48:C5:2A:46:76:DF:4B:99:10:CE:97:77:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c1607fd7-b68e-3ad9-ae3f-a87c6673159a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:62:a9:18:59:f1:f7:27:5a:c4:58:42:9e:5e:61:ee:26:1b: 75:20:e8:44:82:fd:33:9d:1f:cc:e8:a6:1b:33:4d:f2:1e:aa: 94:e7:86:05:ea:32:c1:6e:7d:41:72:a4:fd:da:eb:dd:28:6b: 33:b7:f6:e2:34:f9:ad:86:a0:74:17:cd:a5:d3:5e:9f:06:08: d7:11:4e:95:d5:2a:86:1f:5b:c4:de:d6:84:c1:a6:e6:a8:7a: d2:e5:1f:c2:82:e4:27:49:e0:bd:ac:86:60:45:3d:04:76:35: fa:1b:b4:78:d5:2f:54:ce:46:b1:f2:39:c5:f3:ed:53:86:0a: 1d:1a:00:79:89:5d:46:38:57:14:b5:96:53:fa:30:9c:a7:6d: c6:87:46:d2:12:c7:e8:1c:3d:09:4d:a3:a3:f2:57:1c:3a:b3: 4e:b8:b9:9e:c1:41:27:6d:22:72:23:74:98:6b:36:18:ed:f9: 48:6b:12:32:82:5d:6d:50:81:6c:b0:88:5b:49:cb:50:22:6e: ed:da:df:f7:50:3f:56:6c:01:8c:38:c5:cd:15:f1:2a:41:b8: 10:56:c5:bd:15:b8:17:22:01:67:9b:55:77:ee:72:00:be:53: 16:a9:7c:50:eb:32:68:02:b3:a8:bc:19:08:5e:de:91:e5:33: 50:68:4c:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxif5E2j19fQvwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjEwNjJiNTAtMjI2OS00NjFlLWI1ODctZmNjNWMxNTdkMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3kzwQ4tVuIssWOfCYL85Tee+bZVNXZuK+s4 ZHKQk12uinuKrWCwXckjFLXOxskWYRHbsdCccWF4EVTXgFQQTkRMaHWbnimZ7BU0 uC9SxzHXVXA2QGz+ib5BpiXXFlH+Jg/p9fHlFFbYbRr3JhKfSYcY081LOg62W4O6 Py2WhZRpTSyUczuznKADHrghuwGeFxWNEBro2Z/PuLowrxZQdY5eO705BeMbwcq5 fOhOaOeeVqTAcbZR5U7QkEJE+cJYjhdOIgw+Y1ugd1+UEtp11obJiCU+0NfESPhz PzSYOAoAvw67ibN1LIDwXNmfPoR2YeKIdOj0ABXAlnoITnJ/iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXLrmrXG5ZIxSpGdt9LmRDOl3dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzE2MDdmZDctYjY4ZS0z YWQ5LWFlM2YtYTg3YzY2NzMxNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhiqRhZ8fcnWsRYQp5eYe4mG3Ug6ESC/TOdH8zophszTfIeqpTnhgXq MsFufUFypP3a690oazO39uI0+a2GoHQXzaXTXp8GCNcRTpXVKoYfW8Te1oTBpuao etLlH8KC5CdJ4L2shmBFPQR2NfobtHjVL1TORrHyOcXz7VOGCh0aAHmJXUY4VxS1 llP6MJynbcaHRtISx+gcPQlNo6PyVxw6s064uZ7BQSdtInIjdJhrNhjt+UhrEjKC XW1QgWywiFtJy1Aibu3a3/dQP1ZsAYw4xc0V8SpBuBBWxb0VuBciAWebVXfucgC+ UxapfFDrMmgCs6i8GQhe3pHlM1BoTKY= -----END CERTIFICATE-----Generated at Fri Apr 4 22:52:06 2025 by rpki-client