$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa File: efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa (raw, json) Hash identifier: 3bXap5Hdvn67J4voAuPopM3uzZjH/mKC16gwpb5OvAQ= Subject key identifier: DB:19:21:F8:C1:D9:13:7B:9F:92:C2:5B:41:C7:55:19:F7:CA:83:2E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AAFB6CB5BB89AF775A98EC00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 26383 IP address blocks: 166.88.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6c:b5:bb:89:af:77:5a:98:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=08fbaf9f-a282-4e1d-b71f-51104a54dadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:9b:fb:37:63:ee:65:12:26:a2:d3:99:93: 83:e1:e6:e8:5a:03:e2:55:22:38:9a:6e:3c:2a:93: 87:f0:11:4f:b2:49:bb:85:c6:86:11:0d:f7:37:a5: 3d:4e:b8:9a:04:90:24:0d:1f:7e:1d:1c:83:ac:1c: 8c:de:6f:b2:d7:22:1f:b6:40:a1:0e:dc:e9:bd:6f: 9d:3e:cd:6e:53:af:13:ee:0c:4d:0f:10:c4:c4:f8: 8f:87:a7:66:6a:ef:cf:b2:2b:c1:53:d9:3b:f7:c9: cc:66:31:7f:01:ff:5d:2b:e9:4c:6a:26:ec:ad:af: 93:44:84:ea:de:51:43:3c:07:c6:d8:57:ba:24:7e: 10:6b:4c:ca:32:08:5d:f0:68:12:48:73:24:b5:e8: 24:c4:87:8b:dd:e1:ad:76:58:50:fd:4f:88:b9:6f: 7b:3d:ee:8a:d3:0e:14:7b:51:79:9d:1f:f5:0c:f8: 19:af:01:1b:15:56:62:d3:ec:95:1f:86:0c:e7:17: d5:4f:f7:36:14:5f:3e:74:88:91:9c:b8:a0:3a:c7: ef:14:da:2f:63:07:63:77:96:63:59:c4:81:4b:ce: b3:23:e6:f9:5a:0e:d5:3b:0c:bf:c5:4d:5f:f4:fc: bd:72:1d:d1:43:5d:7f:21:ad:15:86:74:72:7a:a3: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:19:21:F8:C1:D9:13:7B:9F:92:C2:5B:41:C7:55:19:F7:CA:83:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/efdaa2df-4b6a-3563-932c-06cc33cbb21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:df:83:29:7a:53:cc:99:c6:1e:af:11:ff:b6:28:10:cb:8b: d1:1c:ab:9a:cf:8b:f0:bf:f4:8b:e5:f2:f0:13:97:c5:5a:a1: f9:76:40:c3:ff:7d:d8:cb:01:17:ad:cc:06:d5:2e:28:92:d0: c3:04:7a:9c:43:5d:b3:5c:87:c1:a1:02:c3:45:a6:6e:58:0f: 4c:80:ec:ec:6b:4c:1d:9e:20:fc:07:3d:aa:ac:45:55:e2:08: 47:7e:72:d1:d5:92:53:ea:48:48:51:a5:ad:b2:29:08:a7:a1: e6:b4:4e:20:c9:73:fd:cb:4a:b9:ee:0f:ef:03:da:46:08:4f: f6:9c:d5:e6:fc:fe:9b:95:20:62:58:40:68:71:15:e4:35:46: 10:d8:95:25:9b:05:87:4a:25:9e:75:5b:20:dc:c6:b8:a3:45: e9:3a:28:61:29:90:ce:76:99:93:cb:dc:14:10:ed:33:f6:31: 3a:69:05:8f:75:be:34:d1:3b:88:f3:3c:ca:24:05:08:9a:c8: 98:ee:d9:4e:2e:17:39:20:6e:6b:77:97:21:99:c8:28:b1:21: 2b:a7:a3:03:d5:33:76:37:80:ae:2e:b7:b1:cf:4f:d3:f7:54: de:dd:e7:93:37:df:a8:9b:19:4d:63:5d:73:dd:04:34:29:e7: 04:00:ff:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2y1u4mvd1qY7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MDhmYmFmOWYtYTI4Mi00ZTFkLWI3MWYtNTExMDRhNTRkYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeSb+zdj7mUSJqLTmZOD4eboWgPiVSI4mm48 KpOH8BFPskm7hcaGEQ33N6U9TriaBJAkDR9+HRyDrByM3m+y1yIftkChDtzpvW+d Ps1uU68T7gxNDxDExPiPh6dmau/PsivBU9k798nMZjF/Af9dK+lMaibsra+TRITq 3lFDPAfG2Fe6JH4Qa0zKMghd8GgSSHMktegkxIeL3eGtdlhQ/U+IuW97Pe6K0w4U e1F5nR/1DPgZrwEbFVZi0+yVH4YM5xfVT/c2FF8+dIiRnLigOsfvFNovYwdjd5Zj WcSBS86zI+b5Wg7VOwy/xU1f9Py9ch3RQ11/Ia0VhnRyeqMAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsZIfjB2RN7n5LCW0HHVRn3yoMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWZkYWEyZGYtNGI2YS0z NTYzLTkzMmMtMDZjYzMzY2JiMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDfgyl6U8yZxh6vEf+2KBDLi9Ecq5rPi/C/9Ivl8vATl8Vaofl2QMP/ fdjLARetzAbVLiiS0MMEepxDXbNch8GhAsNFpm5YD0yA7OxrTB2eIPwHPaqsRVXi CEd+ctHVklPqSEhRpa2yKQinoea0TiDJc/3LSrnuD+8D2kYIT/ac1eb8/puVIGJY QGhxFeQ1RhDYlSWbBYdKJZ51WyDcxrijRek6KGEpkM52mZPL3BQQ7TP2MTppBY91 vjTRO4jzPMokBQiayJju2U4uFzkgbmt3lyGZyCixISunowPVM3Y3gK4ut7HPT9P3 VN7d55M336ibGU1jXXPdBDQp5wQA/wQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:11 2025 by rpki-client