$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c34dd72a-4371-32e0-b67a-c9351a47f17f.roa File: c34dd72a-4371-32e0-b67a-c9351a47f17f.roa (raw, json) Hash identifier: lPjPx1DJXSIcKRXuWgQj+u14tBuctOmO/HN2J+kR7UM= Subject key identifier: 89:91:2C:6A:76:B8:AA:A4:CF:A1:6E:F5:6F:D5:9A:A4:A7:2E:8B:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A62B17227C9430043980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c34dd72a-4371-32e0-b67a-c9351a47f17f.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 166.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a6:2b:17:22:7c:94:30:04:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=f1e12a51-dc9c-4f8f-bc6c-ba752e2a7ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:ee:0f:8d:0b:1b:0b:37:b8:94:ac:32:92: 0b:42:44:9b:ae:b0:f1:51:c1:ff:95:15:d7:1f:97: c4:59:9a:48:9a:47:b2:80:9a:e0:35:f5:4a:56:ca: c9:7f:23:5c:71:3a:cf:0c:06:63:9c:10:a2:78:b4: 52:04:7d:9e:4d:19:76:2a:db:3a:cb:2a:45:89:1c: fb:3b:29:0f:11:45:d9:57:99:4f:8a:bb:f2:f9:b5: 9c:2a:3f:1d:1a:ce:6a:78:77:3a:f3:4d:39:46:a6: dd:52:07:94:29:37:a4:2c:28:a5:50:d3:ff:f2:83: 7e:27:48:4d:f1:b2:c4:c8:cb:69:4a:0a:05:4b:cd: fd:39:c5:b1:75:35:11:66:de:52:39:45:fc:a7:2e: d6:77:7a:10:ad:35:45:83:9d:55:66:38:2e:f3:29: 85:19:e7:01:b7:aa:88:ff:d9:91:d0:16:25:d0:2c: 04:ab:a2:5a:6d:fb:db:75:4d:64:54:62:cb:db:a0: 3b:1c:a8:a4:e4:2b:57:d4:fc:ee:78:89:4e:03:c5: cc:ef:b4:90:c0:bb:54:4c:bd:c9:2e:c0:d9:57:5c: 3d:ea:94:b0:d4:a8:11:c9:28:e6:d6:bc:33:13:36: ec:9d:bf:10:70:1b:56:8b:65:1e:0e:97:4a:53:b7: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:2C:6A:76:B8:AA:A4:CF:A1:6E:F5:6F:D5:9A:A4:A7:2E:8B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c34dd72a-4371-32e0-b67a-c9351a47f17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ea:54:0d:70:a4:a0:1d:cb:80:aa:b7:78:42:d1:66:6f:42: 21:39:10:e0:cd:0d:9d:2a:84:14:e1:07:ac:bd:5d:26:0f:11: bf:6c:72:75:aa:3f:c7:97:16:6d:fd:97:fb:62:6b:15:5c:c2: 7e:61:7f:dd:9b:61:11:fc:2c:c8:36:6b:aa:9a:10:a6:c2:e6: 6c:95:3e:63:3f:76:01:4c:fa:72:28:3c:1a:e4:dd:01:b6:6f: c2:15:b5:aa:b6:de:9d:4b:af:65:ba:6d:01:32:78:07:f2:e1: d3:d2:89:fa:e5:4c:40:22:b4:fc:10:c7:20:0b:e9:38:c5:c2: e2:8d:18:36:e7:b1:b2:dd:f1:ad:f7:6b:c7:94:95:c1:78:e1: 51:27:03:be:5f:f4:e2:4f:29:2a:e8:b3:fd:12:14:09:0b:50: 8f:e9:04:f3:eb:92:b2:22:93:c5:ab:31:9b:fb:04:2d:4a:b1: 96:c7:f7:02:d2:d3:a1:2c:3d:39:56:0f:69:bb:f8:f6:59:4c: 56:0d:0f:3c:a4:0e:d8:67:57:7d:76:81:1d:3c:e9:c0:5d:d2: 03:ec:2a:fc:89:1d:ce:4e:45:0a:be:ca:60:89:4e:6a:80:42: 67:bf:23:c7:a6:03:11:c4:94:4c:6b:3d:07:09:f4:a5:5b:41: 48:2e:ce:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKYrFyJ8lDAEOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZjFlMTJhNTEtZGM5Yy00ZjhmLWJjNmMtYmE3NTJlMmE3ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSDuD40LGws3uJSsMpILQkSbrrDxUcH/lRXX H5fEWZpImkeygJrgNfVKVsrJfyNccTrPDAZjnBCieLRSBH2eTRl2Kts6yypFiRz7 OykPEUXZV5lPirvy+bWcKj8dGs5qeHc68005RqbdUgeUKTekLCilUNP/8oN+J0hN 8bLEyMtpSgoFS839OcWxdTURZt5SOUX8py7Wd3oQrTVFg51VZjgu8ymFGecBt6qI /9mR0BYl0CwEq6JabfvbdU1kVGLL26A7HKik5CtX1PzueIlOA8XM77SQwLtUTL3J LsDZV1w96pSw1KgRySjm1rwzEzbsnb8QcBtWi2UeDpdKU7coNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImRLGp2uKqkz6Fu9W/VmqSnLotmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzM0ZGQ3MmEtNDM3MS0z MmUwLWI2N2EtYzkzNTFhNDdmMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPqVA1wpKAdy4Cqt3hC0WZvQiE5EODNDZ0qhBThB6y9XSYPEb9scnWq P8eXFm39l/tiaxVcwn5hf92bYRH8LMg2a6qaEKbC5myVPmM/dgFM+nIoPBrk3QG2 b8IVtaq23p1Lr2W6bQEyeAfy4dPSifrlTEAitPwQxyAL6TjFwuKNGDbnsbLd8a33 a8eUlcF44VEnA75f9OJPKSros/0SFAkLUI/pBPPrkrIik8WrMZv7BC1KsZbH9wLS 06EsPTlWD2m7+PZZTFYNDzykDthnV312gR086cBd0gPsKvyJHc5ORQq+ymCJTmqA Qme/I8emAxHElExrPQcJ9KVbQUguzvk= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:41 2025 by rpki-client