$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa File: f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa (raw, json) Hash identifier: nrcd3KKnHNING3ENGxR5krYiDmWVyUqxVaaYLKW/ZEA= Subject key identifier: 8E:B9:3A:ED:42:64:BD:26:24:D4:05:7D:A3:00:DA:20:25:41:B7:98 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2BA89E670DB068F6EAFD80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 166.88.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:a8:9e:67:0d:b0:68:f6:ea:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=b819832e-5224-4316-8112-e559473f6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:82:80:7a:a1:68:58:70:18:58:f5:35:28: 04:e9:d1:e1:60:84:9b:af:29:cf:3b:2f:ed:f7:07: 7e:ae:f6:6d:1f:01:77:17:78:ff:c7:0c:1a:5e:3b: 36:6a:92:83:aa:b1:4d:03:f8:33:a3:bd:5b:39:97: dd:ed:3b:60:47:d8:4e:9e:8b:ba:85:e2:c8:23:8b: cf:1b:70:99:bf:0a:02:d0:19:62:3b:1e:27:a1:f2: 06:eb:7c:35:aa:ce:19:c0:0c:08:43:4b:33:97:70: 89:f1:d6:91:06:80:36:5b:90:af:ca:b4:f6:ec:db: c3:a0:40:c0:1d:c6:e1:d3:e7:34:b6:06:bc:5a:7e: b0:fb:d2:c4:71:e5:b5:7d:7f:9b:b4:11:b0:7e:ab: 92:4b:13:0f:7e:3a:ce:c2:d4:e3:0d:33:5e:a8:1d: 46:ff:ad:a1:23:81:5d:75:7e:b9:93:2c:63:92:92: 9f:2e:45:ca:1e:eb:9b:d3:af:a3:6e:e3:c7:62:99: 23:6d:34:55:76:c6:e6:87:c6:18:67:da:6c:58:8d: ff:3d:b0:f1:20:d3:fe:4b:01:5a:ff:8b:74:cb:f6: f2:8e:17:b5:2d:a4:13:94:a3:3a:56:29:a5:61:20: b3:56:61:2b:00:9f:7b:54:59:b3:a8:d1:81:20:a9: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:3A:ED:42:64:BD:26:24:D4:05:7D:A3:00:DA:20:25:41:B7:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f1b42937-d12b-390c-a90f-f1b7e5e3a345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a9:7d:4c:f6:18:bd:3d:8f:76:aa:57:22:15:23:91:b5:41: 6d:37:02:8b:45:07:01:45:a7:82:7b:64:1a:13:7e:4c:b7:ae: b4:e6:83:8b:a7:fb:28:12:ef:32:9d:d6:9d:9e:9f:52:58:96: 37:77:57:dd:6c:67:01:b3:34:26:81:ce:2c:c3:36:6c:ad:ee: 78:9e:14:c0:31:d0:89:6d:dd:47:0b:37:dd:df:92:98:1f:38: f4:c6:b7:20:25:5a:07:51:20:3f:80:ed:bf:9f:7b:b7:a4:4f: 0f:f8:be:59:bc:da:eb:1b:51:37:89:48:b2:7a:37:9b:88:eb: db:d0:d0:92:62:01:07:b7:c1:b0:99:5e:ea:93:cc:bd:67:01: 93:81:87:68:bc:3f:3c:8e:57:7b:ed:a1:4c:75:7d:c3:5b:af: 74:41:02:6e:7a:b8:cc:79:5f:2e:25:61:2e:0b:d7:1c:d6:9b: 85:f6:e0:cc:04:5e:ed:6d:0b:3e:27:05:df:5d:ed:da:3e:a0: 87:88:f9:dd:82:1b:18:6e:21:52:e9:31:d5:a9:7c:e5:35:3d: 4e:f1:f0:48:3e:e9:ae:b8:ec:e8:b2:ac:f2:7d:7b:76:41:88: 7f:dd:f5:81:73:31:48:ff:29:a6:18:6a:8c:91:23:4c:19:3f: 89:64:b1:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6ieZw2waPbq/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjgxOTgzMmUtNTIyNC00MzE2LTgxMTItZTU1OTQ3M2Y2NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy02CgHqhaFhwGFj1NSgE6dHhYISbrynPOy/t 9wd+rvZtHwF3F3j/xwwaXjs2apKDqrFNA/gzo71bOZfd7TtgR9hOnou6heLII4vP G3CZvwoC0BliOx4nofIG63w1qs4ZwAwIQ0szl3CJ8daRBoA2W5CvyrT27NvDoEDA Hcbh0+c0tga8Wn6w+9LEceW1fX+btBGwfquSSxMPfjrOwtTjDTNeqB1G/62hI4Fd dX65kyxjkpKfLkXKHuub06+jbuPHYpkjbTRVdsbmh8YYZ9psWI3/PbDxINP+SwFa /4t0y/byjhe1LaQTlKM6VimlYSCzVmErAJ97VFmzqNGBIKkzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI65Ou1CZL0mJNQFfaMA2iAlQbeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjFiNDI5MzctZDEyYi0z OTBjLWE5MGYtZjFiN2U1ZTNhMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACipfUz2GL09j3aqVyIVI5G1QW03AotFBwFFp4J7ZBoTfky3rrTmg4un +ygS7zKd1p2en1JYljd3V91sZwGzNCaBzizDNmyt7nieFMAx0Ilt3UcLN93fkpgf OPTGtyAlWgdRID+A7b+fe7ekTw/4vlm82usbUTeJSLJ6N5uI69vQ0JJiAQe3wbCZ XuqTzL1nAZOBh2i8PzyOV3vtoUx1fcNbr3RBAm56uMx5Xy4lYS4L1xzWm4X24MwE Xu1tCz4nBd9d7do+oIeI+d2CGxhuIVLpMdWpfOU1PU7x8Eg+6a647OiyrPJ9e3ZB iH/d9YFzMUj/KaYYaoyRI0wZP4lksbQ= -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:47 2025 by rpki-client