$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa File: ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa (raw, json) Hash identifier: hbbUNr7pkqTm0gUWOcJ6zWorFIcLn/hAu1qhiu115cI= Subject key identifier: 3A:EA:84:5A:0B:5F:B4:02:34:B5:88:33:AB:61:1A:78:97:B5:98:5E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849A61F4A4CD6EECB82BA76597E Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 166.88.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:4a:4c:d6:ee:cb:82:ba:76:59:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c28e2273-8d58-446d-abd5-4f97a3666e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:53:da:8f:21:d2:52:b2:3f:02:6d:01:26: ee:49:ab:dd:a6:7a:cf:9e:7c:1d:1d:fb:35:4d:8e: dd:8c:16:79:08:47:76:d8:ee:75:83:85:38:42:a5: 9a:7f:78:b9:bf:aa:fb:f7:97:de:3e:57:d9:0d:5d: ce:f1:3d:34:9f:71:fa:92:8f:49:1e:4d:cf:45:a7: 14:69:28:b3:b4:98:5b:f0:76:e7:0b:eb:6e:34:d7: 85:06:b4:08:c7:ff:36:5e:b1:e9:c6:bb:db:87:a8: 45:49:cf:c6:ff:c1:11:3b:36:cd:18:49:d0:1a:b8: f0:e2:b4:22:02:e0:0b:f5:7d:eb:a7:5d:d9:a1:dd: 12:ab:7c:a3:18:92:3f:06:e2:13:65:4d:62:0e:26: ae:b5:c9:db:41:cd:02:cf:53:95:90:a4:a5:e2:db: 9a:b9:5f:ef:c9:3c:17:ff:52:51:89:96:fd:a6:c7: 0e:b7:fa:2f:49:fe:69:96:44:75:45:df:58:93:fb: 89:fe:bb:eb:63:04:65:9f:d0:ea:87:2b:ed:21:af: 47:0d:2b:e0:20:d3:fd:67:48:44:cd:ff:ab:8f:9a: ee:fa:31:75:5c:ba:d3:12:a0:dd:d1:b1:c7:bb:2d: 63:cc:0c:cc:89:3e:6e:6f:00:cb:e8:50:2b:81:b9: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:84:5A:0B:5F:B4:02:34:B5:88:33:AB:61:1A:78:97:B5:98:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff53e4b0-d180-376e-a5f2-888ce5cf0a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bc:8d:21:1f:97:ef:2c:86:10:5f:c7:54:eb:c1:64:cc:ed: 41:19:fb:64:99:62:34:9a:dd:64:50:76:d5:53:67:52:c6:b3: a5:7b:17:9c:ac:07:36:16:41:24:e3:ee:65:f3:2b:c1:88:9c: fd:99:15:f6:c0:70:c4:87:9f:d0:d1:0a:e0:2c:29:83:87:e3: 06:97:c9:3d:1b:4f:ab:52:75:65:5e:5d:e4:f4:d0:41:73:5c: 41:62:79:94:c5:aa:d4:0d:d1:4f:14:70:65:0e:4e:f5:d3:34: de:d8:16:55:15:19:b6:2b:85:ab:a4:2f:ea:80:4f:96:66:58: f9:73:33:06:b3:1b:50:e6:f7:a3:a8:e5:14:32:c7:2e:15:81: 5a:8e:5d:26:ba:10:8a:8c:d4:58:13:6b:30:80:6b:63:d7:ec: 75:8e:7a:b7:f8:de:e7:f0:fc:fa:32:7e:dc:63:f1:84:24:a8: bf:15:de:5f:3c:cf:e4:80:8c:b9:fb:f2:5e:eb:de:95:8e:0e: 6a:ec:8c:ee:80:fb:eb:61:b2:54:03:56:06:3a:c4:57:90:c7: 71:4b:22:a0:d1:c4:54:36:b7:5d:e6:91:f4:6c:78:14:2a:41: 79:c5:d9:4d:d7:ea:0f:80:cb:12:ca:70:66:64:01:5c:f0:d0: 74:8f:55:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0pM1u7Lgrp2WX4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YzI4ZTIyNzMtOGQ1OC00NDZkLWFiZDUtNGY5N2EzNjY2ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljRT2o8h0lKyPwJtASbuSavdpnrPnnwdHfs1 TY7djBZ5CEd22O51g4U4QqWaf3i5v6r795fePlfZDV3O8T00n3H6ko9JHk3PRacU aSiztJhb8HbnC+tuNNeFBrQIx/82XrHpxrvbh6hFSc/G/8EROzbNGEnQGrjw4rQi AuAL9X3rp13Zod0Sq3yjGJI/BuITZU1iDiautcnbQc0Cz1OVkKSl4tuauV/vyTwX /1JRiZb9pscOt/ovSf5plkR1Rd9Yk/uJ/rvrYwRln9DqhyvtIa9HDSvgINP9Z0hE zf+rj5ru+jF1XLrTEqDd0bHHuy1jzAzMiT5ubwDL6FArgbmXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrqhFoLX7QCNLWIM6thGniXtZheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmY1M2U0YjAtZDE4MC0z NzZlLWE1ZjItODg4Y2U1Y2YwYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS8jSEfl+8shhBfx1TrwWTM7UEZ+2SZYjSa3WRQdtVTZ1LGs6V7F5ys BzYWQSTj7mXzK8GInP2ZFfbAcMSHn9DRCuAsKYOH4waXyT0bT6tSdWVeXeT00EFz XEFieZTFqtQN0U8UcGUOTvXTNN7YFlUVGbYrhaukL+qAT5ZmWPlzMwazG1Dm96Oo 5RQyxy4VgVqOXSa6EIqM1FgTazCAa2PX7HWOerf43ufw/Poyftxj8YQkqL8V3l88 z+SAjLn78l7r3pWODmrsjO6A++thslQDVgY6xFeQx3FLIqDRxFQ2t13mkfRseBQq QXnF2U3X6g+AyxLKcGZkAVzw0HSPVdI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:37 2025 by rpki-client