$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d4ba294c-4a2a-344e-8def-0a26a6e2739a.roa File: d4ba294c-4a2a-344e-8def-0a26a6e2739a.roa (raw, json) Hash identifier: ZjoVnn+hpotmS/waprHWp51FujWvStDxuG3bFkl0VeY= Subject key identifier: 60:23:60:E2:D0:5A:4A:90:41:50:AE:72:D2:50:57:33:74:FA:98:75 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8D088D2EADED58358E30 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d4ba294c-4a2a-344e-8def-0a26a6e2739a.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 212238 IP address blocks: 166.88.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8d:08:8d:2e:ad:ed:58:35:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=c10d5188-12ba-475e-959c-5f2ed8e95c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ef:6b:0c:04:60:69:c6:98:ca:06:6f:83:a1: ac:a6:cf:1e:32:5b:a0:c4:fb:69:a2:7d:b3:d7:39: df:5d:c3:df:27:96:3e:cf:d4:9a:cb:e9:f2:e7:24: 3d:f6:84:0b:9f:0c:2a:a2:42:d0:aa:ed:76:fa:79: dd:95:18:1b:2b:85:e4:6c:f4:ec:90:49:f1:19:21: 37:c8:0d:b0:1b:ef:ad:37:8f:f5:f8:56:9f:24:70: 94:61:90:6b:ab:8f:2c:a8:5f:88:61:5a:1f:5e:90: 4f:15:35:04:77:63:63:40:8f:ee:1f:60:d7:f2:ab: 4d:cc:37:9f:af:dd:3d:ec:e2:a1:eb:b0:cd:23:a4: cb:e0:8f:47:8a:9e:3c:e8:27:36:47:fb:96:6e:8b: 13:05:4f:c8:ab:8c:9f:74:65:76:e0:f0:c1:9d:3c: 40:4d:ee:a5:b7:b1:b8:68:f3:8d:71:5e:50:9d:b9: 30:9c:10:2f:0b:cc:2f:ec:46:25:f1:b7:75:d7:0d: fc:36:b2:0e:b3:9f:d3:ab:d2:56:90:d2:f4:93:1f: 9b:97:89:cc:77:4c:77:da:cb:d5:28:32:9d:60:55: 48:14:ef:8d:b1:0e:25:c6:c3:27:f2:93:86:8a:90: f0:d8:16:42:bc:72:eb:7b:59:8c:8b:0a:43:6a:d4: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:23:60:E2:D0:5A:4A:90:41:50:AE:72:D2:50:57:33:74:FA:98:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d4ba294c-4a2a-344e-8def-0a26a6e2739a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5e:c1:e6:f6:86:a7:af:86:6e:73:d4:49:74:93:87:db:a6: 55:7e:e9:11:15:77:8f:92:7a:07:fe:57:8a:27:22:82:58:d4: 52:7f:e5:b8:c2:e7:06:ff:34:26:28:40:dc:68:3c:7f:5b:dc: f2:35:06:45:29:14:89:33:ad:23:b4:66:fc:ee:1a:f5:d4:d4: 4b:54:01:6a:a5:31:2a:1f:6d:71:e7:fb:ff:0b:3c:0c:26:35: 73:48:51:e9:d0:14:28:23:1f:0b:e8:74:04:55:f0:af:21:6a: 2b:30:64:8a:1a:41:ac:5b:4e:ac:47:d3:c7:7f:ad:35:c3:b5: 08:10:b7:15:73:67:d8:25:17:75:d6:e5:37:04:c1:a3:c9:b3: 23:91:2b:8e:51:9d:54:d5:e9:4e:d6:36:48:71:3f:fa:18:4f: 93:c4:90:5d:d0:2d:6f:15:ff:e3:be:07:57:64:81:9a:cc:0d: 74:ed:73:b7:a4:4d:ae:e0:a6:58:18:11:6b:50:bd:33:98:06: d6:69:45:47:36:11:cd:91:05:04:f5:95:73:7f:a3:96:32:be: 0f:b3:22:69:e7:92:95:f9:f0:26:51:05:68:08:c2:0d:96:79: a3:d3:2b:55:24:00:a1:26:aa:b0:66:c2:d4:4d:1d:e7:b9:50: d1:4e:91:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i40IjS6t7Vg1jjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YzEwZDUxODgtMTJiYS00NzVlLTk1OWMtNWYyZWQ4ZTk1YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O9rDARgacaYygZvg6Gsps8eMlugxPtpon2z 1znfXcPfJ5Y+z9Say+ny5yQ99oQLnwwqokLQqu12+nndlRgbK4XkbPTskEnxGSE3 yA2wG++tN4/1+FafJHCUYZBrq48sqF+IYVofXpBPFTUEd2NjQI/uH2DX8qtNzDef r9097OKh67DNI6TL4I9Hip486Cc2R/uWbosTBU/Iq4yfdGV24PDBnTxATe6lt7G4 aPONcV5QnbkwnBAvC8wv7EYl8bd11w38NrIOs5/Tq9JWkNL0kx+bl4nMd0x32svV KDKdYFVIFO+NsQ4lxsMn8pOGipDw2BZCvHLre1mMiwpDatT9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAjYOLQWkqQQVCuctJQVzN0+ph1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDRiYTI5NGMtNGEyYS0z NDRlLThkZWYtMGEyNmE2ZTI3MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9eweb2hqevhm5z1El0k4fbplV+6REVd4+Segf+V4onIoJY1FJ/5bjC 5wb/NCYoQNxoPH9b3PI1BkUpFIkzrSO0ZvzuGvXU1EtUAWqlMSofbXHn+/8LPAwm NXNIUenQFCgjHwvodARV8K8haiswZIoaQaxbTqxH08d/rTXDtQgQtxVzZ9glF3XW 5TcEwaPJsyORK45RnVTV6U7WNkhxP/oYT5PEkF3QLW8V/+O+B1dkgZrMDXTtc7ek Ta7gplgYEWtQvTOYBtZpRUc2Ec2RBQT1lXN/o5Yyvg+zImnnkpX58CZRBWgIwg2W eaPTK1UkAKEmqrBmwtRNHee5UNFOkaA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:12 2025 by rpki-client