$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d488990-2094-30af-9508-08de7e475994.roa File: 0d488990-2094-30af-9508-08de7e475994.roa (raw, json) Hash identifier: Xs0f+a2B/vPYGrCzSt57lKjVzbeOahw5VLxZZc2kF1o= Subject key identifier: 52:87:C2:3F:E6:07:80:BA:F0:F4:92:1F:35:FC:71:BE:3D:96:CC:11 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858489FD0A00CDA9A59427AC8A040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d488990-2094-30af-9508-08de7e475994.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 7018 IP address blocks: 142.111.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:a0:0c:da:9a:59:42:7a:c8:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=10b2b52c-e5c5-4fb1-9299-09cd3856e7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:fa:0d:fa:ee:3d:dd:d2:cc:c8:36:f9:c6: 9e:33:46:31:98:0e:ad:23:27:b7:02:41:c1:1b:19: 16:a1:0d:c2:cd:f7:e7:78:63:57:bc:f3:d2:e8:21: 5b:1f:b3:64:53:c9:5c:0e:6a:61:67:6c:34:e7:59: 33:a3:bc:db:71:4f:9d:db:d1:fb:77:6d:86:6a:53: 34:ea:71:8f:b6:c9:b3:79:0c:08:7b:de:74:85:19: 73:ac:93:01:cf:9e:cb:e4:13:b9:33:4e:60:98:f6: 33:f4:c4:74:58:86:5f:d7:47:b3:c0:a8:9f:eb:9d: 93:24:7b:5d:49:a2:23:2e:42:24:a7:f8:98:06:12: 1b:a6:e4:75:9c:82:48:67:3c:8d:aa:70:aa:ca:d4: 14:56:22:02:f0:47:d3:b5:83:27:bf:b3:52:9d:ed: 9b:36:1a:da:88:87:51:96:f8:7f:cd:9b:55:5f:12: 68:c4:f9:6e:05:19:fc:9e:3c:73:c2:49:f7:28:fa: 5c:cd:6f:95:26:65:63:d7:78:5a:4c:b7:a0:a0:4a: ab:0d:d0:70:5f:3a:95:e9:70:36:04:90:dc:4f:4e: f6:b6:2a:dd:20:a3:5e:01:21:ec:b4:c6:bf:4e:63: ea:c5:e9:f2:ab:7b:ab:ed:89:04:bc:03:56:8a:ee: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:C2:3F:E6:07:80:BA:F0:F4:92:1F:35:FC:71:BE:3D:96:CC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d488990-2094-30af-9508-08de7e475994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9b:97:7f:c3:29:5d:16:95:58:37:ef:03:3b:12:31:df:81: 83:03:50:ec:de:a2:db:38:f3:d8:b1:60:6a:f3:1c:9c:b0:48: b9:97:00:1b:0a:ee:4e:5d:5a:4c:48:b5:5c:99:32:7c:60:35: 5e:e0:db:88:94:c7:67:54:6f:bc:91:e4:28:e1:d4:9c:99:10: 48:c3:1a:bb:3c:32:8d:53:e5:53:7e:d0:0c:72:2f:51:18:2f: 4d:31:a5:90:b4:43:ab:38:65:e3:6d:6b:bb:97:36:83:6b:0f: 60:35:1f:20:c7:0d:b7:f9:b6:ca:94:f6:78:64:08:c4:ac:ad: ee:ea:0f:3e:89:0b:e5:0b:b0:5e:c1:0d:dc:f2:31:ef:cd:89: fa:c8:52:7d:a7:ae:b7:3d:82:8e:d9:9c:0d:61:fe:44:2e:0e: a8:8c:af:b2:73:91:8f:16:c9:41:13:54:77:49:6c:46:d0:e7: 6d:73:ee:7b:36:bb:c3:6f:90:3d:50:20:1b:e9:a4:80:bb:f4: ad:08:51:b2:cf:f5:1d:4e:3e:b6:cc:92:08:af:89:dd:aa:36: 05:f0:d3:0a:6b:55:9c:fd:76:72:2c:25:37:4a:0c:8a:f1:28: 12:6d:76:4a:02:de:d4:34:e3:34:97:16:29:58:18:45:b9:62: a4:3e:08:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0KAM2ppZQnrIoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk MTBiMmI1MmMtZTVjNS00ZmIxLTkyOTktMDljZDM4NTZlN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidv6DfruPd3SzMg2+caeM0YxmA6tIye3AkHB GxkWoQ3CzffneGNXvPPS6CFbH7NkU8lcDmphZ2w051kzo7zbcU+d29H7d22GalM0 6nGPtsmzeQwIe950hRlzrJMBz57L5BO5M05gmPYz9MR0WIZf10ezwKif652TJHtd SaIjLkIkp/iYBhIbpuR1nIJIZzyNqnCqytQUViIC8EfTtYMnv7NSne2bNhraiIdR lvh/zZtVXxJoxPluBRn8njxzwkn3KPpczW+VJmVj13haTLegoEqrDdBwXzqV6XA2 BJDcT072tirdIKNeASHstMa/TmPqxenyq3ur7YkEvANWiu6+tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKHwj/mB4C68PSSHzX8cb49lswRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGQ0ODg5OTAtMjA5NC0z MGFmLTk1MDgtMDhkZTdlNDc1OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGObl3/DKV0WlVg37wM7EjHfgYMDUOzeots489ixYGrzHJywSLmXABsK 7k5dWkxItVyZMnxgNV7g24iUx2dUb7yR5Cjh1JyZEEjDGrs8Mo1T5VN+0AxyL1EY L00xpZC0Q6s4ZeNta7uXNoNrD2A1HyDHDbf5tsqU9nhkCMSsre7qDz6JC+ULsF7B DdzyMe/NifrIUn2nrrc9go7ZnA1h/kQuDqiMr7JzkY8WyUETVHdJbEbQ521z7ns2 u8NvkD1QIBvppIC79K0IUbLP9R1OPrbMkgivid2qNgXw0wprVZz9dnIsJTdKDIrx KBJtdkoC3tQ04zSXFilYGEW5YqQ+CJI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:19 2025 by rpki-client