$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f8f8fd5a-e6bc-3505-972d-230cf4fd48b3.roa File: f8f8fd5a-e6bc-3505-972d-230cf4fd48b3.roa (raw, json) Hash identifier: SgUhWgD1F4KUOO38/zCNDcXNOSw4eRI2xSlP9W7sQiA= Subject key identifier: 6F:8B:7B:A1:99:B8:47:25:42:8E:47:C7:73:55:5C:D5:E7:4A:D7:70 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848F00C4B4FDE0A2E97546A2080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f8f8fd5a-e6bc-3505-972d-230cf4fd48b3.roa Signing time: Wed 19 Feb 2025 19:45:40 +0000 ROA not before: Wed 19 Feb 2025 19:45:40 +0000 ROA not after: Tue 20 May 2025 18:45:40 +0000 asID: 204957 IP address blocks: 166.88.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:4b:4f:de:0a:2e:97:54:6a:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 19 19:45:40 2025 GMT Not After : May 20 18:45:40 2025 GMT Subject: CN=31897876-db96-4b4e-a07d-f37e5438ed3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:97:97:d3:1c:f4:8c:6b:fa:c1:dc:e8:e0: 7c:a2:5b:39:c6:61:1d:41:6e:fa:c6:35:1e:20:12: a6:9a:f1:02:bf:a0:a5:3d:a7:e3:3b:57:8b:49:84: d5:a7:da:08:8f:a6:37:71:4a:bb:aa:aa:23:5a:1c: f3:77:0e:09:7f:35:ab:d0:33:ae:52:48:bb:dc:69: 78:50:bf:d8:ac:10:a2:ef:93:47:ee:59:2d:4f:5a: ba:01:2f:87:55:92:9c:62:32:39:b0:f8:ca:af:19: 94:e9:66:77:ca:6e:79:43:b1:9e:35:1d:c0:75:b1: 61:4b:02:17:8d:a8:42:ad:8a:e8:0f:22:74:56:fc: 46:11:a4:e1:16:8c:8d:72:50:86:bb:bb:70:48:74: ac:a7:0e:e9:4c:5f:70:c0:ab:45:f4:62:1c:31:0f: 72:7d:64:1e:dd:55:fb:30:a5:77:9f:d8:66:14:48: 77:fe:d0:1f:e3:1b:1c:8e:28:14:19:ad:77:4b:24: f7:49:24:38:13:0e:fc:28:be:51:01:e0:db:d7:e0: 0d:0e:d0:4c:d9:4c:61:cf:8a:79:f0:50:4c:28:6d: ad:3a:b0:28:a3:1f:19:8e:84:73:a3:51:06:b6:8b: 94:92:1b:41:00:27:4f:0f:01:6d:b5:de:ed:12:72: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8B:7B:A1:99:B8:47:25:42:8E:47:C7:73:55:5C:D5:E7:4A:D7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f8f8fd5a-e6bc-3505-972d-230cf4fd48b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c1:45:90:be:e1:9d:77:c6:a8:1b:b7:68:ad:37:a8:30:5a: 0d:ab:df:c2:96:a4:f3:b7:65:9a:28:aa:8c:c3:64:91:e3:ef: fc:82:51:34:e0:76:64:d6:05:6d:b6:af:58:c9:e8:4d:b2:6c: 41:1f:a8:e6:f5:2e:83:27:d6:93:c5:e8:d7:37:44:c8:48:f8: 48:52:4d:14:e2:b8:eb:de:db:35:6d:ac:b4:60:07:24:42:4d: f0:76:30:c1:97:e3:3e:eb:3e:a1:b6:30:4e:d8:c0:0d:82:4c: b2:95:6a:57:ae:bf:a3:81:22:71:8d:09:61:79:8c:01:00:b1: 88:c4:91:75:29:e2:2d:dd:18:0b:39:d9:ff:18:18:e0:bb:ed: 27:85:bd:55:3a:93:f1:7b:7d:fc:f1:af:5a:6e:b8:82:b2:f9: 73:82:2d:72:a1:bd:23:4d:b6:c4:94:a1:bc:33:00:a8:30:05: 9e:3d:3d:64:01:9b:12:8f:86:f8:b0:63:89:51:ae:07:d8:c5: 36:c5:07:65:fd:bf:3d:31:06:00:ee:20:07:8d:b2:ad:d9:93: 04:3e:b9:a1:e1:6d:76:f9:38:6a:93:18:77:c2:f4:f2:41:1d: 83:4a:06:4b:b9:2c:3a:74:a6:e6:34:08:86:a5:25:bf:10:65: 72:e8:26:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDEtP3goul1RqIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxOTE5NDU0MFoXDTI1MDUyMDE4NDU0MFowLzEtMCsGA1UEAxMk MzE4OTc4NzYtZGI5Ni00YjRlLWEwN2QtZjM3ZTU0MzhlZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx++Xl9Mc9Ixr+sHc6OB8ols5xmEdQW76xjUe IBKmmvECv6ClPafjO1eLSYTVp9oIj6Y3cUq7qqojWhzzdw4JfzWr0DOuUki73Gl4 UL/YrBCi75NH7lktT1q6AS+HVZKcYjI5sPjKrxmU6WZ3ym55Q7GeNR3AdbFhSwIX jahCrYroDyJ0VvxGEaThFoyNclCGu7twSHSspw7pTF9wwKtF9GIcMQ9yfWQe3VX7 MKV3n9hmFEh3/tAf4xscjigUGa13SyT3SSQ4Ew78KL5RAeDb1+ANDtBM2Uxhz4p5 8FBMKG2tOrAoox8ZjoRzo1EGtouUkhtBACdPDwFttd7tEnJmFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+Le6GZuEclQo5Hx3NVXNXnStdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjhmOGZkNWEtZTZiYy0z NTA1LTk3MmQtMjMwY2Y0ZmQ0OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHBRZC+4Z13xqgbt2itN6gwWg2r38KWpPO3ZZooqozDZJHj7/yCUTTg dmTWBW22r1jJ6E2ybEEfqOb1LoMn1pPF6Nc3RMhI+EhSTRTiuOve2zVtrLRgByRC TfB2MMGX4z7rPqG2ME7YwA2CTLKValeuv6OBInGNCWF5jAEAsYjEkXUp4i3dGAs5 2f8YGOC77SeFvVU6k/F7ffzxr1puuIKy+XOCLXKhvSNNtsSUobwzAKgwBZ49PWQB mxKPhviwY4lRrgfYxTbFB2X9vz0xBgDuIAeNsq3ZkwQ+uaHhbXb5OGqTGHfC9PJB HYNKBku5LDp0puY0CIalJb8QZXLoJiw= -----END CERTIFICATE-----Generated at Sat Apr 5 03:01:39 2025 by rpki-client