$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb06c644-98e6-301c-96c3-f19069b36250.roa File: cb06c644-98e6-301c-96c3-f19069b36250.roa (raw, json) Hash identifier: 4HhV79KsKLjKh6c5JzGEzgoVvWYhdX6xoFjaTA3txJk= Subject key identifier: 49:B6:24:D0:00:46:01:12:C1:A2:FF:BF:56:7B:CB:FF:DD:7A:81:FC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849A61F4A5A6D02C792D47F5580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb06c644-98e6-301c-96c3-f19069b36250.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 166.88.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:4a:5a:6d:02:c7:92:d4:7f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=1897ad7d-787f-4550-a5f0-f8d14c3e33da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:79:5c:fc:47:8e:9f:ea:41:88:5f:66:3d: d3:cd:65:28:a1:12:df:08:24:7c:30:04:fa:d7:30: 64:28:7d:52:3b:ad:28:fc:a2:ff:d5:52:d6:6d:36: 74:ba:03:1f:10:a8:89:ca:28:db:1b:fa:60:0e:41: 59:85:aa:b0:84:91:b8:ca:14:3f:79:ec:cf:ab:46: 90:e0:fe:5e:d1:a1:6c:34:18:f0:63:19:01:29:7d: 50:63:cd:39:04:95:71:9d:cb:59:23:c4:4e:17:17: 62:ac:93:f8:14:58:58:96:a6:28:35:fd:e3:7e:f6: 9a:c4:93:33:e4:6d:0e:37:56:f7:f5:22:0f:bc:44: 83:93:48:83:d7:24:e3:04:83:3f:a5:fa:01:1b:1e: a8:05:87:8d:a5:b2:e3:12:0b:88:91:54:c2:7b:20: e8:89:de:77:10:e1:f5:b7:23:7b:de:d9:3b:52:e1: f0:65:ba:ba:f7:57:ae:a9:cf:9b:02:07:7e:fc:e2: 9b:1b:eb:f4:97:5e:fb:d3:ad:a4:cb:ae:36:a3:84: 91:b0:a9:11:3f:84:9a:40:5d:a0:26:32:fc:25:53: fd:7c:de:cd:5b:2b:b9:80:f4:da:0b:c4:7a:0b:8d: c4:df:ed:f1:27:3a:f1:0c:ad:6f:ce:17:ce:11:a7: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:24:D0:00:46:01:12:C1:A2:FF:BF:56:7B:CB:FF:DD:7A:81:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb06c644-98e6-301c-96c3-f19069b36250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:61:a2:50:d7:d3:73:f3:ac:f0:ea:96:6f:b7:d4:9c:24:06: e8:dc:17:04:11:ba:18:64:01:01:ed:a7:45:aa:2f:c0:ab:2d: 64:9b:5a:71:bc:30:5d:70:40:a2:10:6b:03:c0:1d:e7:0c:ea: a3:54:79:48:05:58:9a:0c:d4:e3:ee:39:71:05:91:62:fe:06: 12:cc:11:e7:8c:ab:f4:ea:b1:62:26:3d:eb:7c:db:8c:f5:8a: c9:f9:f0:c3:90:e2:cf:b8:9f:93:8c:ac:1c:08:14:db:5d:5d: 19:c3:01:a8:0e:8d:0d:05:a0:0f:7c:b8:04:65:1e:e0:b0:9a: 70:ba:4e:96:2b:bb:a8:c7:e9:0a:7d:0b:bd:b5:0d:3d:6b:1d: e1:ee:12:7e:64:67:29:10:60:d0:df:59:76:5e:49:c4:b0:0b: 20:e4:9a:5e:9e:d9:96:90:a1:5e:b0:f1:c2:6c:c3:fa:a8:f8: 70:a8:bf:02:d8:1b:3b:94:f2:29:57:8f:b3:15:e8:e5:9e:5e: 64:cb:5f:cf:b4:49:b5:28:19:56:9c:4e:14:fc:6e:38:30:99: dc:19:ec:02:06:2d:6b:91:6e:c9:d5:4c:8f:f3:04:32:f1:72: 6b:51:8b:77:7e:4a:ed:19:28:93:a3:b6:eb:46:61:22:31:03: bb:5c:18:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0pabQLHktR/VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MTg5N2FkN2QtNzg3Zi00NTUwLWE1ZjAtZjhkMTRjM2UzM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAZ5XPxHjp/qQYhfZj3TzWUooRLfCCR8MAT6 1zBkKH1SO60o/KL/1VLWbTZ0ugMfEKiJyijbG/pgDkFZhaqwhJG4yhQ/eezPq0aQ 4P5e0aFsNBjwYxkBKX1QY805BJVxnctZI8ROFxdirJP4FFhYlqYoNf3jfvaaxJMz 5G0ON1b39SIPvESDk0iD1yTjBIM/pfoBGx6oBYeNpbLjEguIkVTCeyDoid53EOH1 tyN73tk7UuHwZbq691euqc+bAgd+/OKbG+v0l177062ky642o4SRsKkRP4SaQF2g JjL8JVP9fN7NWyu5gPTaC8R6C43E3+3xJzrxDK1vzhfOEadb9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm2JNAARgESwaL/v1Z7y//deoH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2IwNmM2NDQtOThlNi0z MDFjLTk2YzMtZjE5MDY5YjM2MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxholDX03PzrPDqlm+31JwkBujcFwQRuhhkAQHtp0WqL8CrLWSbWnG8 MF1wQKIQawPAHecM6qNUeUgFWJoM1OPuOXEFkWL+BhLMEeeMq/TqsWImPet824z1 isn58MOQ4s+4n5OMrBwIFNtdXRnDAagOjQ0FoA98uARlHuCwmnC6TpYru6jH6Qp9 C721DT1rHeHuEn5kZykQYNDfWXZeScSwCyDkml6e2ZaQoV6w8cJsw/qo+HCovwLY GzuU8ilXj7MV6OWeXmTLX8+0SbUoGVacThT8bjgwmdwZ7AIGLWuRbsnVTI/zBDLx cmtRi3d+Su0ZKJOjtutGYSIxA7tcGAg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:23:53 2025 by rpki-client