$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa File: cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa (raw, json) Hash identifier: MGLUBgZfzjUVj4Rxs2MZj72xT+GPFhviAI8H5zSh+XI= Subject key identifier: BC:B2:71:0D:B6:CC:DC:78:C1:53:20:57:6A:D9:64:FE:0D:E7:8F:0C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B761BBCE83E1B6C8D4780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 166.88.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:76:1b:bc:e8:3e:1b:6c:8d:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8d79b7e3-e986-4439-ad36-bc2f98590f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:19:29:7c:da:57:55:f9:ab:bd:f7:2a:89: 1b:ed:84:df:67:ad:d8:98:f2:6e:4d:f7:14:9f:cd: 55:fe:2c:a3:dc:cb:80:7e:49:c0:37:0c:1e:00:02: c6:e7:52:a7:91:09:ef:b0:83:d9:2b:38:5c:47:4f: ea:90:8d:2b:b4:38:03:14:1f:37:91:d8:e9:69:e3: 2d:8b:cc:17:c4:bd:33:4a:77:a3:34:52:2e:1b:14: 0c:a7:4b:01:1a:a1:04:e4:79:3f:bc:dc:8d:fb:c0: 17:26:72:54:f6:0a:f3:a3:12:c9:7b:a9:9c:9b:ec: 21:46:d4:79:06:55:e5:f2:bb:f5:0e:ee:ef:e1:f9: 5d:a8:bb:e9:0e:ab:af:0e:47:fb:ce:5f:46:d7:e9: 42:fb:68:cf:d5:8a:10:dd:a2:a3:a8:66:80:e9:69: f5:8f:d0:fb:d2:97:39:39:14:d8:33:84:d6:5a:22: 36:6c:1c:0a:30:45:66:d6:65:39:dc:73:82:37:04: d5:5a:ee:fb:38:2f:23:28:62:61:89:f1:39:35:04: 80:d1:65:27:6a:f5:e7:23:15:48:95:f6:6e:01:02: f0:52:fe:53:35:90:62:78:01:90:7c:4c:a0:97:41: 3e:e0:cb:ef:22:d5:45:c5:a4:9e:6c:07:7d:38:b9: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B2:71:0D:B6:CC:DC:78:C1:53:20:57:6A:D9:64:FE:0D:E7:8F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd433ea6-1e1c-3b26-9bc8-f97e6a051f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:00:1f:ca:17:e3:0d:55:e1:80:f4:70:c8:d2:3b:03:61:15: 2d:32:e7:67:f0:16:bc:c3:92:56:ad:ed:a0:ec:a5:da:be:c9: 1c:b3:ed:b3:9c:ca:90:48:89:fb:14:b1:e2:bb:a9:00:b0:1f: 49:ad:ee:fc:ef:68:c8:c9:bb:a4:35:16:ce:8a:66:31:75:cb: 5c:b4:d0:7b:e3:3e:2b:2b:c0:1d:f2:85:d7:66:19:80:c5:21: a9:22:92:a9:a7:b2:f1:99:24:c5:2c:63:31:6f:ab:ba:5c:45: ae:b8:4b:1f:35:c2:9f:ea:a8:2a:df:c5:c8:ca:f9:fb:f9:a5: 11:e8:31:d8:11:ad:21:ce:de:b2:42:d1:b6:5a:7f:2d:db:1b: 1e:7b:51:5f:99:cc:a5:8f:cc:c5:b1:48:dd:41:53:7b:9d:ee: c4:0a:c9:a2:0d:4d:67:b0:00:c0:6e:d5:d5:b7:f2:fa:4d:1e: a9:4e:aa:59:49:44:34:99:18:57:dd:72:75:a9:b3:9f:88:18: 7b:51:40:f0:a1:57:2e:b1:09:b1:64:b0:e3:bb:47:b2:a9:de: dc:6f:34:4c:6f:98:ed:68:31:17:42:67:0e:d6:29:86:5d:85: a8:72:00:2c:b8:f0:16:30:0b:96:15:e9:a5:f3:39:d6:f1:ef: 69:c9:78:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3YbvOg+G2yNR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGQ3OWI3ZTMtZTk4Ni00NDM5LWFkMzYtYmMyZjk4NTkwZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v0ZKXzaV1X5q733Kokb7YTfZ63YmPJuTfcU n81V/iyj3MuAfknANwweAALG51KnkQnvsIPZKzhcR0/qkI0rtDgDFB83kdjpaeMt i8wXxL0zSnejNFIuGxQMp0sBGqEE5Hk/vNyN+8AXJnJU9grzoxLJe6mcm+whRtR5 BlXl8rv1Du7v4fldqLvpDquvDkf7zl9G1+lC+2jP1YoQ3aKjqGaA6Wn1j9D70pc5 ORTYM4TWWiI2bBwKMEVm1mU53HOCNwTVWu77OC8jKGJhifE5NQSA0WUnavXnIxVI lfZuAQLwUv5TNZBieAGQfEygl0E+4MvvItVFxaSebAd9OLnEtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyycQ22zNx4wVMgV2rZZP4N548MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2Q0MzNlYTYtMWUxYy0z YjI2LTliYzgtZjk3ZTZhMDUxZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQAH8oX4w1V4YD0cMjSOwNhFS0y52fwFrzDklat7aDspdq+yRyz7bOc ypBIifsUseK7qQCwH0mt7vzvaMjJu6Q1Fs6KZjF1y1y00HvjPisrwB3yhddmGYDF IakikqmnsvGZJMUsYzFvq7pcRa64Sx81wp/qqCrfxcjK+fv5pRHoMdgRrSHO3rJC 0bZafy3bGx57UV+ZzKWPzMWxSN1BU3ud7sQKyaINTWewAMBu1dW38vpNHqlOqllJ RDSZGFfdcnWps5+IGHtRQPChVy6xCbFksOO7R7Kp3txvNExvmO1oMRdCZw7WKYZd hahyACy48BYwC5YV6aXzOdbx72nJeJA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:02 2025 by rpki-client