$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdb4d067-d673-3fb6-9869-3842b5d363f9.roa File: fdb4d067-d673-3fb6-9869-3842b5d363f9.roa (raw, json) Hash identifier: GrNI8DC19bagWps/EAB5mwGvT5HfLvmfCnEkm9OXJ6w= Subject key identifier: 18:52:C7:19:4E:7F:79:F8:39:BB:56:8C:F4:F2:24:E7:73:21:6B:8F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B981A7FEFC61F7509460 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdb4d067-d673-3fb6-9869-3842b5d363f9.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 18530 IP address blocks: 166.88.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b9:81:a7:fe:fc:61:f7:50:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=9e92c1e6-19a7-44f0-9d5c-c0d7b1789f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:11:cf:e8:bb:5d:ba:60:d4:18:fa:87:84: 49:19:8a:94:39:15:e5:a1:f9:2c:5c:22:1a:6b:db: 43:8a:5e:df:4c:01:9a:c3:da:2b:fe:1f:38:2e:13: 20:d5:bf:bb:6e:ab:49:a7:84:fc:f5:3f:c0:04:75: f5:e5:8d:e2:15:03:ee:ce:f0:b6:d6:48:95:2a:2f: 5a:28:ad:0f:b9:21:4e:cc:e4:8d:7a:18:cc:25:9e: e2:3d:72:7d:c6:01:f7:12:86:9f:20:26:74:e4:84: c9:27:e5:96:56:1e:26:ea:48:72:01:7c:55:86:7b: 61:62:83:4e:70:f1:e9:e5:d5:0f:0f:3c:0f:1b:84: b6:5d:69:ac:c9:bb:ec:75:c8:c8:c3:49:8a:f3:be: 55:68:2b:36:8b:f5:1b:b2:8e:52:0f:77:19:9e:0c: 64:da:02:ba:20:29:a2:c0:65:76:b4:91:92:2f:02: 2c:4e:63:fe:99:9d:92:9c:ee:e4:76:7a:f0:22:49: 9b:d2:06:d5:19:9e:b9:20:52:cd:de:bd:37:2b:6c: 07:06:24:77:f8:90:86:8b:a5:ab:a9:4c:ab:ad:8f: d6:e4:3a:f6:a7:ea:88:d3:f8:49:d2:d2:e4:39:18: d4:a7:eb:7a:2e:e8:00:8d:93:af:87:e1:7a:21:22: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:C7:19:4E:7F:79:F8:39:BB:56:8C:F4:F2:24:E7:73:21:6B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdb4d067-d673-3fb6-9869-3842b5d363f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:e7:5b:9d:29:b6:e2:b1:4b:db:3a:16:44:09:48:6a:6b: 10:3d:b9:d4:5c:35:7b:fc:4f:65:31:65:8f:e8:dc:f3:81:ee: 1a:5f:b3:bc:e9:ee:e9:aa:3c:7f:2e:44:d1:92:f8:be:36:81: 6f:8d:71:03:f1:b3:20:bf:46:c9:e8:36:9a:22:9e:aa:c9:ea: e5:7a:59:02:75:36:52:69:10:e3:cd:70:74:da:26:ef:b3:bf: 01:00:30:6a:a0:ef:d5:a4:d6:e5:bc:60:1f:e1:10:9e:90:cc: 44:b4:01:78:5c:d7:02:cc:71:f4:8e:df:4f:d4:b8:ae:88:ff: e4:08:bc:19:f2:f2:f7:71:d1:d5:bb:30:16:f6:f6:99:84:75: 8d:06:d5:cb:dd:2f:62:d3:09:bc:7a:ff:10:40:2f:97:d2:c0: a7:02:cc:73:82:50:d1:f6:32:63:1d:0e:0b:84:54:e8:58:d1: 4c:70:ca:2a:ac:1f:63:7f:3c:30:a9:7a:8a:23:41:c7:11:64: 4a:f3:dc:49:7d:b7:ce:a9:3d:21:b6:c5:a0:83:2c:42:60:8e: a9:51:fd:0b:00:c2:5a:11:7a:b3:46:66:9f:98:fd:4a:c1:5b: 5b:8d:79:2a:36:33:40:e9:72:b4:1c:93:69:b9:65:40:d5:87: b6:fd:40:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLmBp/78YfdQlGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OWU5MmMxZTYtMTlhNy00NGYwLTlkNWMtYzBkN2IxNzg5ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyewRz+i7Xbpg1Bj6h4RJGYqUORXlofksXCIa a9tDil7fTAGaw9or/h84LhMg1b+7bqtJp4T89T/ABHX15Y3iFQPuzvC21kiVKi9a KK0PuSFOzOSNehjMJZ7iPXJ9xgH3EoafICZ05ITJJ+WWVh4m6khyAXxVhnthYoNO cPHp5dUPDzwPG4S2XWmsybvsdcjIw0mK875VaCs2i/Ubso5SD3cZngxk2gK6ICmi wGV2tJGSLwIsTmP+mZ2SnO7kdnrwIkmb0gbVGZ65IFLN3r03K2wHBiR3+JCGi6Wr qUyrrY/W5Dr2p+qI0/hJ0tLkORjUp+t6LugAjZOvh+F6ISJdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhSxxlOf3n4ObtWjPTyJOdzIWuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmRiNGQwNjctZDY3My0z ZmI2LTk4NjktMzg0MmI1ZDM2M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKV51udKbbisUvbOhZECUhqaxA9udRcNXv8T2UxZY/o3POB7hpfs7zp 7umqPH8uRNGS+L42gW+NcQPxsyC/RsnoNpoinqrJ6uV6WQJ1NlJpEOPNcHTaJu+z vwEAMGqg79Wk1uW8YB/hEJ6QzES0AXhc1wLMcfSO30/UuK6I/+QIvBny8vdx0dW7 MBb29pmEdY0G1cvdL2LTCbx6/xBAL5fSwKcCzHOCUNH2MmMdDguEVOhY0Uxwyiqs H2N/PDCpeoojQccRZErz3El9t86pPSG2xaCDLEJgjqlR/QsAwloRerNGZp+Y/UrB W1uNeSo2M0DpcrQck2m5ZUDVh7b9QAM= -----END CERTIFICATE-----Generated at Sun Apr 27 21:35:36 2025 by rpki-client