$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea5ea6e0-7767-3be1-9e6e-e3f93e25b80c.roa File: ea5ea6e0-7767-3be1-9e6e-e3f93e25b80c.roa (raw, json) Hash identifier: 5CdNFo/znduPYuvq5xZbtrrT3AyT8RiUSkE+eShQ2JQ= Subject key identifier: 8D:42:B7:24:4D:6F:80:2D:C3:66:60:5F:55:A7:56:CD:17:68:DA:4A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B76BD3E058C943AD11AE0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea5ea6e0-7767-3be1-9e6e-e3f93e25b80c.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 166.88.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:76:bd:3e:05:8c:94:3a:d1:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=bc4f4c2a-e876-490d-a6e4-52549cf0e7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:5e:24:92:76:34:96:50:1a:1d:46:e2:b2: 98:67:c4:87:c6:53:9d:16:66:0b:c6:e7:94:32:8c: 57:0f:04:49:ec:76:34:4f:db:7d:ca:66:c8:3f:cd: 7b:43:39:52:3e:1c:91:e6:45:18:e2:cc:f2:92:54: e5:67:26:4f:14:7f:39:85:8d:57:06:60:06:61:9c: 63:09:64:fb:d5:65:38:62:56:78:bd:8e:97:4c:5c: f6:ee:7a:bc:02:f0:96:2e:e4:65:b9:f0:00:fc:b0: 66:28:6d:91:7d:42:3f:43:9a:4c:40:fc:a4:d6:1e: 9b:b7:3c:eb:2b:bf:99:bf:7d:fa:13:65:29:73:25: 0e:8a:9b:ed:90:9a:52:07:49:0c:f7:a7:3b:59:c0: 23:54:67:e4:e1:8b:16:8e:72:e0:f8:05:63:85:05: e0:5c:9c:af:76:4c:35:5d:79:95:da:ba:f2:4d:71: 21:ed:a5:41:4d:8d:a1:8b:dd:ee:66:42:72:5b:3f: 09:8c:f2:be:93:dc:60:1d:33:43:1d:d7:2f:86:e1: 30:b1:cd:32:b5:6f:d3:27:79:c2:04:cb:a7:47:21: 65:ce:18:61:90:1a:01:92:ee:d1:f5:ec:6d:6b:27: ce:00:3b:e9:98:2c:88:9f:49:0b:c3:37:1d:7c:c6: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:B7:24:4D:6F:80:2D:C3:66:60:5F:55:A7:56:CD:17:68:DA:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea5ea6e0-7767-3be1-9e6e-e3f93e25b80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:92:9d:d2:44:0a:4e:01:50:09:fa:ea:ba:c1:5c:59:9d:82: 27:d5:f1:b2:94:ca:a1:ea:8d:03:4d:65:7b:67:83:e3:6d:81: 8a:6a:25:87:45:2e:1c:e8:f0:f6:3e:3f:bf:37:8c:87:fe:52: c2:ed:7c:04:fb:3d:e5:5d:3f:11:22:66:28:8d:71:90:c3:2c: 0a:49:8a:7a:5b:7a:52:59:0a:7d:82:6a:98:5c:4b:75:c9:c3: 0b:a9:d6:69:d4:ae:18:68:7b:5d:59:53:4a:10:51:ec:33:e7: 0c:4c:1f:d9:d9:fa:c3:a8:89:55:47:88:f7:de:4d:ae:3e:f6: 85:fd:fe:77:2a:2a:bc:80:8e:5e:2a:59:da:19:b1:bd:30:7d: 2c:e3:5f:4e:65:ad:94:8c:b5:14:a3:c0:af:61:0e:77:02:59: 55:1e:1b:50:bc:41:4b:37:58:f7:e0:89:db:a2:89:47:4c:50: 64:f9:d0:8f:d1:04:12:88:02:1b:1e:42:f0:b6:ed:02:e1:c4: b8:2a:0c:8f:b7:48:bf:5d:c1:8c:52:b5:52:d3:30:09:43:35: f2:c0:2d:7f:51:84:f4:68:61:c4:f0:d8:96:59:c1:4c:9d:72: a9:fb:69:b5:a3:d1:f4:2d:d4:03:42:57:36:1d:f6:42:4f:5d: 64:4e:2f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3a9PgWMlDrRGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YmM0ZjRjMmEtZTg3Ni00OTBkLWE2ZTQtNTI1NDljZjBlN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C5eJJJ2NJZQGh1G4rKYZ8SHxlOdFmYLxueU MoxXDwRJ7HY0T9t9ymbIP817QzlSPhyR5kUY4szyklTlZyZPFH85hY1XBmAGYZxj CWT71WU4YlZ4vY6XTFz27nq8AvCWLuRlufAA/LBmKG2RfUI/Q5pMQPyk1h6btzzr K7+Zv336E2UpcyUOipvtkJpSB0kM96c7WcAjVGfk4YsWjnLg+AVjhQXgXJyvdkw1 XXmV2rryTXEh7aVBTY2hi93uZkJyWz8JjPK+k9xgHTNDHdcvhuEwsc0ytW/TJ3nC BMunRyFlzhhhkBoBku7R9extayfOADvpmCyIn0kLwzcdfMYLewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1CtyRNb4Atw2ZgX1WnVs0XaNpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWE1ZWE2ZTAtNzc2Ny0z YmUxLTllNmUtZTNmOTNlMjViODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuSndJECk4BUAn66rrBXFmdgifV8bKUyqHqjQNNZXtng+NtgYpqJYdF Lhzo8PY+P783jIf+UsLtfAT7PeVdPxEiZiiNcZDDLApJinpbelJZCn2CaphcS3XJ wwup1mnUrhhoe11ZU0oQUewz5wxMH9nZ+sOoiVVHiPfeTa4+9oX9/ncqKryAjl4q WdoZsb0wfSzjX05lrZSMtRSjwK9hDncCWVUeG1C8QUs3WPfgiduiiUdMUGT50I/R BBKIAhseQvC27QLhxLgqDI+3SL9dwYxStVLTMAlDNfLALX9RhPRoYcTw2JZZwUyd cqn7abWj0fQt1ANCVzYd9kJPXWROL6w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:53 2025 by rpki-client