$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499f2735-a960-3e12-bcd3-a1398595fb9e.roa File: 499f2735-a960-3e12-bcd3-a1398595fb9e.roa (raw, json) Hash identifier: 9hvdNst42gtKoHSI0EDUO9idbDXDRv2qZd27wa/Sbtg= Subject key identifier: EB:D4:33:1C:60:E6:9F:AB:F5:67:62:6B:A6:9E:2E:9B:C6:E3:9B:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849955F26C7EC4F8D6D5E21E080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499f2735-a960-3e12-bcd3-a1398595fb9e.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 166.88.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:26:c7:ec:4f:8d:6d:5e:21:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=1390e060-4653-4079-8aef-19cb19d774bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:bb:5b:f1:46:a9:f1:02:3f:1a:55:47:dd: 61:26:1d:3f:92:72:b1:3c:9e:4e:1b:9b:6f:4d:56: db:ed:bf:d3:a2:4e:25:3f:9d:20:0d:e1:c0:62:c2: 25:91:55:77:7d:ab:68:1d:a1:c6:58:18:f3:39:ab: 94:67:ff:46:b7:66:1a:80:22:e2:f2:44:9f:a6:93: f0:22:75:50:f0:4f:7c:3e:df:fc:a0:58:9d:2c:3d: 56:93:e0:9f:03:77:34:06:04:94:7f:43:35:4e:b5: 94:b1:6e:47:be:6d:d5:26:b9:ac:a4:a4:a4:52:20: 52:08:87:c9:33:c4:51:fa:f6:93:73:a0:c9:60:c8: 85:76:64:03:11:06:98:77:07:57:50:a2:97:46:d0: 52:aa:43:4c:a5:00:d5:f2:2d:89:19:a0:d8:9d:01: 2c:56:9c:ae:cd:49:ec:2b:a7:50:dd:76:23:4d:87: b5:5c:51:e3:2e:db:86:01:33:17:3d:41:b2:64:f1: 82:2d:29:e5:59:e8:0e:34:46:74:40:78:c8:95:c9: 1a:3e:9f:9a:81:8f:93:8e:64:da:1e:df:2e:90:7b: e9:ed:58:1b:ca:62:57:48:1d:d4:12:d3:21:24:e8: aa:45:5b:38:b4:53:f6:2f:1a:af:92:20:21:c4:46: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D4:33:1C:60:E6:9F:AB:F5:67:62:6B:A6:9E:2E:9B:C6:E3:9B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499f2735-a960-3e12-bcd3-a1398595fb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2c:ed:c2:80:bc:9f:96:a7:39:b6:fe:1a:47:68:17:26:cc: 38:1e:8d:8d:f8:2c:55:1a:40:14:f6:d3:9e:4f:01:5b:d2:df: be:b8:2a:37:ca:fe:9e:56:12:89:6c:47:a9:ad:f3:ab:13:c5: 91:b6:b0:e8:d7:5f:6e:1d:68:01:97:92:45:5c:7c:ed:42:91: 4f:27:28:41:52:42:36:e9:95:ec:27:17:db:d0:b0:76:54:f6: 1f:dc:cd:0d:75:61:51:18:ed:86:2a:fe:00:55:f0:09:30:3f: a2:91:9d:1a:53:0d:29:27:71:c0:15:83:fa:cb:f8:f1:ee:cf: 7a:f4:6a:00:d2:8c:92:1b:b6:97:bc:ff:2b:ce:1e:33:e2:6a: 5b:34:01:d7:a1:4a:42:b2:29:c8:2b:6f:4a:5b:39:11:30:b8: 33:a3:92:2f:85:3f:8d:7c:d2:7f:1e:71:8b:da:35:ea:d2:4a: 88:18:2e:35:46:14:93:da:7c:67:13:6e:e9:f2:b4:95:03:7d: d4:ca:0f:1a:e2:8d:c3:27:26:07:17:e8:41:8d:a0:83:27:fa: 4e:3c:35:08:8c:54:1d:2f:89:9a:cb:12:b3:81:f4:a4:3f:ec: 18:ce:1e:5f:da:d4:a9:0a:88:5c:44:71:a7:cd:75:71:c3:b1: 4b:36:27:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXybH7E+NbV4h4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MTM5MGUwNjAtNDY1My00MDc5LThhZWYtMTljYjE5ZDc3NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstu7W/FGqfECPxpVR91hJh0/knKxPJ5OG5tv TVbb7b/Tok4lP50gDeHAYsIlkVV3fatoHaHGWBjzOauUZ/9Gt2YagCLi8kSfppPw InVQ8E98Pt/8oFidLD1Wk+CfA3c0BgSUf0M1TrWUsW5Hvm3VJrmspKSkUiBSCIfJ M8RR+vaTc6DJYMiFdmQDEQaYdwdXUKKXRtBSqkNMpQDV8i2JGaDYnQEsVpyuzUns K6dQ3XYjTYe1XFHjLtuGATMXPUGyZPGCLSnlWegONEZ0QHjIlckaPp+agY+TjmTa Ht8ukHvp7VgbymJXSB3UEtMhJOiqRVs4tFP2LxqvkiAhxEaN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvUMxxg5p+r9Wdia6aeLpvG45sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDk5ZjI3MzUtYTk2MC0z ZTEyLWJjZDMtYTEzOTg1OTVmYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8s7cKAvJ+Wpzm2/hpHaBcmzDgejY34LFUaQBT2055PAVvS3764KjfK /p5WEolsR6mt86sTxZG2sOjXX24daAGXkkVcfO1CkU8nKEFSQjbplewnF9vQsHZU 9h/czQ11YVEY7YYq/gBV8AkwP6KRnRpTDSknccAVg/rL+PHuz3r0agDSjJIbtpe8 /yvOHjPials0AdehSkKyKcgrb0pbOREwuDOjki+FP4180n8ecYvaNerSSogYLjVG FJPafGcTbunytJUDfdTKDxrijcMnJgcX6EGNoIMn+k48NQiMVB0viZrLErOB9KQ/ 7BjOHl/a1KkKiFxEcafNdXHDsUs2J54= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:15 2025 by rpki-client