$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa File: ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa (raw, json) Hash identifier: gIeCV/4Z4KO7OVB48yKYflyt/2xVRVSAxMojXFq/Qh0= Subject key identifier: E5:D7:C5:EB:CA:B2:EF:D5:D9:1B:8D:FE:4C:97:E3:8B:97:46:12:97 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848C6E63CFDD6E752B1231D4900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 166.88.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:3c:fd:d6:e7:52:b1:23:1d:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=cc2f09f5-18ad-419e-b448-614f017f6e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:4f:10:a2:3d:15:4a:ee:aa:43:1d:51:e2: 3d:48:cd:02:a9:9b:40:62:8a:3b:ec:a0:5b:87:3c: 0d:64:f9:89:93:ac:27:38:31:a6:0a:49:b7:65:bc: ec:ef:52:33:7e:fc:74:38:6e:5e:6d:c0:82:75:80: e6:a3:36:f1:4f:3d:be:d2:bb:4d:4d:27:df:3a:e8: fb:27:13:6a:cc:41:6e:11:86:f7:0d:87:3d:c6:c8: 8a:5a:ac:8b:8b:5c:22:2b:1f:75:08:57:07:29:12: b4:d3:a1:be:46:8e:a7:fc:0b:e8:68:73:7b:5b:ff: 12:41:d6:b7:69:b5:19:9b:22:87:ef:07:46:59:b3: f1:06:7f:65:c4:c6:8f:63:2e:d8:26:d8:5c:21:76: 75:c6:d0:61:11:16:c2:64:b4:05:ff:12:5c:43:8d: 20:66:7b:9a:eb:60:ef:05:1a:69:c4:27:d3:75:e4: 2a:b8:6e:f1:c7:ea:82:3b:c8:a3:ba:db:d3:75:8d: 9f:1a:52:82:c3:b2:9e:9f:6a:59:f7:70:61:a4:e8: c4:67:1c:ff:46:f7:81:a2:2c:91:42:09:48:f5:4c: 48:15:2f:fd:28:99:67:48:66:4b:e8:d3:3c:83:f6: 52:5b:fc:59:c6:4a:fc:7f:96:59:d8:d5:58:f2:74: f3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D7:C5:EB:CA:B2:EF:D5:D9:1B:8D:FE:4C:97:E3:8B:97:46:12:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c3:9b:87:d5:f2:c4:03:d1:96:d0:3c:05:15:b4:f4:30:0a: 7d:87:95:36:2d:f1:1d:de:2e:f6:f6:8a:37:26:21:9c:cf:a7: 6c:18:37:b5:72:10:ab:3e:7c:ef:eb:a6:f3:bd:ef:ab:f5:11: eb:1b:cb:b3:d3:a4:31:39:fa:50:f7:22:d6:56:b4:67:bd:a4: 02:a5:ef:9f:f1:51:7a:fe:da:63:7f:a9:f2:a5:f5:ef:65:09: d9:78:7b:0e:ae:07:af:de:04:18:d3:b6:10:2f:08:bd:73:8c: 83:7d:57:a0:ee:d5:0b:2b:c8:e0:0e:29:04:80:fb:2f:e3:b8: 20:f5:19:a4:a0:c3:ef:2a:e1:39:d9:65:97:2a:64:c3:26:86: ec:ef:ea:9e:10:97:ea:c2:70:4f:1e:ae:a0:6d:80:a9:f0:66: 4b:f6:b3:8f:f6:64:aa:7e:c9:95:34:e2:0a:5d:79:b8:f3:3c: bf:51:94:54:e1:45:0a:9e:63:19:7e:86:35:cf:66:16:31:a0: f9:c6:46:8c:16:16:b8:95:c6:7a:05:f6:ac:9e:88:66:a0:d0: 84:51:e3:1c:67:26:68:df:c3:90:14:b2:13:2e:42:ff:58:17: 8b:5c:1b:53:14:d6:02:bf:b3:ab:04:78:e2:24:a1:e4:17:37: 7a:05:ac:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jz91udSsSMdSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk Y2MyZjA5ZjUtMThhZC00MTllLWI0NDgtNjE0ZjAxN2Y2ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6FPEKI9FUruqkMdUeI9SM0CqZtAYoo77KBb hzwNZPmJk6wnODGmCkm3Zbzs71Izfvx0OG5ebcCCdYDmozbxTz2+0rtNTSffOuj7 JxNqzEFuEYb3DYc9xsiKWqyLi1wiKx91CFcHKRK006G+Ro6n/AvoaHN7W/8SQda3 abUZmyKH7wdGWbPxBn9lxMaPYy7YJthcIXZ1xtBhERbCZLQF/xJcQ40gZnua62Dv BRppxCfTdeQquG7xx+qCO8ijutvTdY2fGlKCw7Ken2pZ93BhpOjEZxz/RveBoiyR QglI9UxIFS/9KJlnSGZL6NM8g/ZSW/xZxkr8f5ZZ2NVY8nTz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXXxevKsu/V2RuN/kyX44uXRhKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmY1M2U0YjAtZDE4MC0z NzZlLWE1ZjItODg4Y2U1Y2YwYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXDm4fV8sQD0ZbQPAUVtPQwCn2HlTYt8R3eLvb2ijcmIZzPp2wYN7Vy EKs+fO/rpvO976v1Eesby7PTpDE5+lD3ItZWtGe9pAKl75/xUXr+2mN/qfKl9e9l Cdl4ew6uB6/eBBjTthAvCL1zjIN9V6Du1QsryOAOKQSA+y/juCD1GaSgw+8q4TnZ ZZcqZMMmhuzv6p4Ql+rCcE8erqBtgKnwZkv2s4/2ZKp+yZU04gpdebjzPL9RlFTh RQqeYxl+hjXPZhYxoPnGRowWFriVxnoF9qyeiGag0IRR4xxnJmjfw5AUshMuQv9Y F4tcG1MU1gK/s6sEeOIkoeQXN3oFrC8= -----END CERTIFICATE-----Generated at Wed Apr 9 11:35:52 2025 by rpki-client