$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d1fdcebc-6571-319b-b5fd-048ea54763bc.roa File: d1fdcebc-6571-319b-b5fd-048ea54763bc.roa (raw, json) Hash identifier: iukQMN+upkKjZJJB5GC4aeK4X9eK6W2BUmnxwssxqyc= Subject key identifier: 9B:34:9C:0F:32:28:42:F9:E3:C5:8E:DF:AD:D5:99:74:DE:A5:F5:6D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B99051D8EAA3DE3CB700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d1fdcebc-6571-319b-b5fd-048ea54763bc.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 166.88.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:90:51:d8:ea:a3:de:3c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=5a926a65-5968-40b1-ab60-913105c93dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:cb:04:d9:f3:7d:ec:1e:f7:95:71:4f:37: 77:46:62:0a:ae:6a:19:5d:8e:07:a1:19:32:30:d9: 59:35:7d:f3:3a:e0:23:a5:50:1a:a2:8b:72:5b:de: b6:c5:ec:0a:ac:26:d8:6e:b5:5f:c9:ea:c9:3a:86: 0f:14:b5:b8:6e:5a:9e:c9:3b:8b:9c:77:51:4e:77: 47:21:04:be:63:8e:1d:a3:c9:b9:1e:9c:72:d5:cc: f8:51:f8:ea:9a:a9:42:a9:8b:ae:d5:95:02:c2:f1: a3:16:cd:5b:13:af:10:a4:a5:b1:56:ab:1b:ee:56: a1:a3:3f:75:89:65:57:2d:35:ab:23:a7:87:e7:42: b3:e9:21:5d:44:fe:20:2b:f7:ac:2d:b5:c3:66:6c: 37:8a:3b:8e:ad:c1:e8:52:5f:dd:da:b5:f2:3e:c0: 8b:b8:8d:bf:de:fd:c6:51:f9:ca:20:3a:81:ad:da: 42:b6:5b:ae:b3:cb:84:ab:df:3e:ae:60:fb:5a:4d: 5c:7e:0a:9c:58:60:9f:48:f3:5a:15:50:67:67:39: 32:88:96:37:98:83:ac:63:95:5d:c1:e8:48:f9:21: ec:c6:80:8d:61:02:31:a0:04:19:4b:19:6b:36:17: 2e:48:78:d8:f3:74:16:2a:0e:f8:aa:40:64:1b:5b: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:34:9C:0F:32:28:42:F9:E3:C5:8E:DF:AD:D5:99:74:DE:A5:F5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d1fdcebc-6571-319b-b5fd-048ea54763bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ed:35:9e:63:6b:b2:c8:95:76:ab:5b:a2:d5:71:d0:2c:98: 3c:c4:1f:29:f3:4f:74:ff:a4:0f:fd:1e:cb:1b:c9:e8:c6:4c: bb:26:90:b4:96:6c:7b:ac:26:36:51:98:0d:9a:04:0a:2e:6e: 14:10:50:a9:0c:79:86:82:e2:6b:84:95:2a:4d:4f:4b:a0:1c: af:47:26:da:ac:4f:60:c7:e5:be:9c:95:a5:ff:0a:1f:28:2c: ba:b8:07:e2:20:2e:5a:1f:1f:05:42:d7:0a:a4:04:fb:89:a8: 5f:b3:a0:95:24:2d:2e:91:b6:8d:03:48:b4:75:7a:cf:81:8f: 7c:28:1e:b1:34:09:27:4c:81:2c:51:44:4c:29:b0:27:b4:e3: 01:dd:11:13:a5:e8:b0:dd:a2:d0:67:c7:0b:c3:58:96:24:24: 73:e4:02:64:6d:b9:c1:8d:80:15:55:48:a2:5e:7d:94:18:c5: 3a:1c:02:08:ad:2a:50:c5:f4:fd:12:2d:fe:97:d3:58:2b:ea: 7a:ce:1b:b2:63:5c:e1:7a:9c:52:ae:fe:9d:d7:ce:e9:f6:a7: 7b:18:78:f9:2c:2b:0b:04:2c:95:96:03:87:0e:d8:f6:02:39: 66:05:5c:3e:2b:b8:64:8c:a8:7b:1f:df:25:d8:f3:76:0c:d2: 5f:c9:e8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLmQUdjqo948twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NWE5MjZhNjUtNTk2OC00MGIxLWFiNjAtOTEzMTA1YzkzZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgjLBNnzfewe95VxTzd3RmIKrmoZXY4HoRky MNlZNX3zOuAjpVAaootyW962xewKrCbYbrVfyerJOoYPFLW4blqeyTuLnHdRTndH IQS+Y44do8m5Hpxy1cz4UfjqmqlCqYuu1ZUCwvGjFs1bE68QpKWxVqsb7lahoz91 iWVXLTWrI6eH50Kz6SFdRP4gK/esLbXDZmw3ijuOrcHoUl/d2rXyPsCLuI2/3v3G UfnKIDqBrdpCtluus8uEq98+rmD7Wk1cfgqcWGCfSPNaFVBnZzkyiJY3mIOsY5Vd wehI+SHsxoCNYQIxoAQZSxlrNhcuSHjY83QWKg74qkBkG1vZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs0nA8yKEL548WO363VmXTepfVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDFmZGNlYmMtNjU3MS0z MTliLWI1ZmQtMDQ4ZWE1NDc2M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbtNZ5ja7LIlXarW6LVcdAsmDzEHynzT3T/pA/9HssbyejGTLsmkLSW bHusJjZRmA2aBAoubhQQUKkMeYaC4muElSpNT0ugHK9HJtqsT2DH5b6claX/Ch8o LLq4B+IgLlofHwVC1wqkBPuJqF+zoJUkLS6Rto0DSLR1es+Bj3woHrE0CSdMgSxR REwpsCe04wHdEROl6LDdotBnxwvDWJYkJHPkAmRtucGNgBVVSKJefZQYxTocAgit KlDF9P0SLf6X01gr6nrOG7JjXOF6nFKu/p3Xzun2p3sYePksKwsELJWWA4cO2PYC OWYFXD4ruGSMqHsf3yXY83YM0l/J6JA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:18:00 2025 by rpki-client