$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa File: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (raw, json) Hash identifier: nnIP1xsXrmPSi83jzI9dHY6iRQvfbRRAPzmqF/QH/Wc= Subject key identifier: 80:3F:DC:16:37:00:FD:40:41:62:51:A8:10:3D:CA:DA:B6:7D:FD:E1 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F43285849ABB4A7CE9BFB91E1591098C0 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 398813 IP address blocks: 166.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a7:ce:9b:fb:91:e1:59:10:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=aed6022c-364d-4a99-ac71-cb900bd81383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:a2:12:60:71:64:47:e2:33:e3:6f:b8:1c: 85:0f:af:35:90:c9:6c:86:3f:b5:81:0c:81:5b:e9: 5a:21:d2:cf:76:d1:20:72:5a:57:57:70:0a:2e:6d: dc:ce:dd:19:74:a0:27:9d:b1:ec:d9:24:45:56:ab: 30:86:64:e4:95:84:0c:84:27:d9:61:76:b8:0f:d0: 03:4e:8f:8f:4d:9a:d4:47:0b:30:f2:e6:97:ea:a1: d4:f0:60:a8:cc:e9:3b:f9:f3:0b:c3:4a:81:e7:43: ac:85:3a:13:9c:9b:23:4a:54:cf:bf:f6:14:e2:01: e1:06:bc:c1:34:22:41:24:88:ef:9e:07:7e:f2:8a: 4a:65:b5:59:b9:64:e8:5e:bc:d0:c9:70:3b:14:8e: c8:6e:f7:a2:f1:36:1e:59:20:b9:07:5a:9f:8c:a2: 69:cb:10:76:59:fe:e1:5c:68:1c:b2:f3:3c:e0:a0: 4f:6f:a4:7a:b8:aa:c9:4d:23:a4:0a:1a:98:1b:db: 18:f2:f1:fc:11:6d:bf:a1:6f:53:d9:e8:7c:3c:52: 14:ff:f9:e0:6f:36:b3:ee:d8:57:0b:5e:01:d0:f3: a0:00:8d:cd:2a:39:71:28:73:ac:ee:2f:03:f9:67: 5d:d7:c5:5f:aa:a3:35:68:ca:a4:d9:a0:ba:d6:d0: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3F:DC:16:37:00:FD:40:41:62:51:A8:10:3D:CA:DA:B6:7D:FD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b6:ee:53:1c:7b:d2:6a:23:fb:08:30:cb:8f:2d:fb:a7:78: 17:17:95:85:57:63:aa:c2:54:91:da:94:07:cc:da:af:f3:c0: 29:89:e9:87:54:a9:3e:30:e2:4c:9f:81:dd:ca:1c:aa:bd:e1: bb:f8:d7:ef:5c:11:6d:c0:ab:d8:f4:19:c2:f7:cb:1c:e5:55: f9:8f:50:85:46:bc:0d:f4:de:33:8d:d2:3d:ae:22:14:11:31: be:fb:37:06:80:1c:b9:85:28:a7:ce:78:4e:dd:b2:b0:28:c5: e8:b5:3d:5a:92:bb:3f:bc:6f:64:c4:06:6b:1b:55:8b:6e:ef: 43:ac:be:7e:d1:fc:a0:52:68:52:96:55:9a:74:48:17:e0:75: 2a:73:7b:90:b4:0a:1f:74:b2:f4:84:f0:0b:ef:65:31:61:c9: 91:56:a1:d9:fe:9d:bb:27:e4:c5:85:db:74:d4:83:c9:6e:d7: b5:0a:8a:36:72:cb:39:5c:3b:f5:f3:2e:ea:f0:6d:36:7e:90: 58:68:f9:32:0b:af:35:87:c2:fe:c2:fa:bd:67:48:b4:50:42: 4a:09:25:84:9a:c9:60:ba:65:57:88:dc:94:62:e5:e4:71:c2: 8d:5e:a1:69:eb:17:8f:33:92:3a:04:03:4e:95:33:9b:15:ed: a7:e6:7e:9b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmrtKfOm/uR4VkQmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWVkNjAyMmMtMzY0ZC00YTk5LWFjNzEtY2I5MDBiZDgxMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcSiEmBxZEfiM+NvuByFD681kMlshj+1gQyB W+laIdLPdtEgclpXV3AKLm3czt0ZdKAnnbHs2SRFVqswhmTklYQMhCfZYXa4D9AD To+PTZrURwsw8uaX6qHU8GCozOk7+fMLw0qB50OshToTnJsjSlTPv/YU4gHhBrzB NCJBJIjvngd+8opKZbVZuWToXrzQyXA7FI7Ibvei8TYeWSC5B1qfjKJpyxB2Wf7h XGgcsvM84KBPb6R6uKrJTSOkChqYG9sY8vH8EW2/oW9T2eh8PFIU//ngbzaz7thX C14B0POgAI3NKjlxKHOs7i8D+Wdd18VfqqM1aMqk2aC61tAxpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIA/3BY3AP1AQWJRqBA9ytq2ff3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvMDg4YjEwOTgtOWYxMy0z YjljLTllZDItMWM4NzlmMDc5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATbbuUxx70moj+wgwy48t+6d4FxeVhVdjqsJUkdqUB8zar/PAKYnph1Sp PjDiTJ+B3cocqr3hu/jX71wRbcCr2PQZwvfLHOVV+Y9QhUa8DfTeM43SPa4iFBEx vvs3BoAcuYUop854Tt2ysCjF6LU9WpK7P7xvZMQGaxtVi27vQ6y+ftH8oFJoUpZV mnRIF+B1KnN7kLQKH3Sy9ITwC+9lMWHJkVah2f6duyfkxYXbdNSDyW7XtQqKNnLL OVw79fMu6vBtNn6QWGj5MguvNYfC/sL6vWdItFBCSgklhJrJYLplV4jclGLl5HHC jV6haesXjzOSOgQDTpUzmxXtp+Z+mw== -----END CERTIFICATE-----Generated at Mon Apr 28 06:31:13 2025 by rpki-client