$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ed659bb-56cf-3b6b-946d-4e47b726965b.roa File: 1ed659bb-56cf-3b6b-946d-4e47b726965b.roa (raw, json) Hash identifier: C0+ycNY1V7gxbKpCa5LPMDK6gXnrO1a6ej2bcBnFr2s= Subject key identifier: 5F:0B:BE:E9:F9:1A:BD:FF:8A:E6:15:C7:96:1F:52:9D:59:CB:36:8A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8A82EB28D8E484A50B20 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ed659bb-56cf-3b6b-946d-4e47b726965b.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 3561 IP address blocks: 142.111.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8a:82:eb:28:d8:e4:84:a5:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=3d69ac2c-20e1-4982-aefc-f2f585659920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:ee:3c:06:9e:26:3c:d8:ba:1c:9d:bb:97: 67:14:59:47:14:31:af:c5:43:30:6a:2f:08:2f:ec: c1:76:c5:09:01:d9:39:b7:59:c5:84:90:e0:e0:2b: a7:c1:e8:02:46:60:0c:aa:ce:b5:12:44:d2:b4:c2: 4a:6e:3c:b7:1c:8c:d6:30:b1:23:4d:8b:7f:76:45: a1:a0:87:3b:d5:eb:e1:6f:2b:7d:21:38:21:62:2e: 75:93:af:64:e5:e6:b2:2e:08:b9:e1:b8:21:07:1e: 18:48:db:f4:32:39:10:b4:b5:3b:4d:dd:73:03:fd: fb:27:0f:06:68:f1:0e:ba:1c:b3:fb:fb:b5:d1:b6: 75:be:21:67:69:fb:06:f5:1b:57:c3:b8:3d:00:23: 74:e6:bd:ac:03:69:42:95:57:d8:76:3b:cb:bf:27: 0e:63:d5:30:8e:0b:4e:3c:0c:6e:98:fd:2b:ec:06: bc:63:d3:69:ba:95:0f:79:e1:0e:af:d8:cb:e3:76: c2:83:04:82:3a:b3:56:98:fe:1a:ab:c0:08:1a:03: 5f:e1:6a:4c:0e:1e:ff:22:53:ed:b4:74:bf:ea:9a: aa:ba:cc:f9:80:4f:76:ab:c6:b7:a0:51:16:1f:22: 6a:8b:d4:6c:95:5f:c8:d3:b9:cc:84:77:e9:e0:a4: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0B:BE:E9:F9:1A:BD:FF:8A:E6:15:C7:96:1F:52:9D:59:CB:36:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ed659bb-56cf-3b6b-946d-4e47b726965b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b6:e9:62:8f:39:5e:92:ae:2f:b9:ad:01:e3:00:17:60:0b: 1b:27:06:2f:fd:a0:20:24:e6:cf:96:8b:ea:b1:3a:f1:b5:68: e0:f9:47:e0:e8:96:c4:4a:24:5c:29:83:08:7a:74:9e:94:98: c3:80:8c:51:04:51:74:a2:90:d8:a0:a6:d2:1f:5c:50:71:f0: ed:49:ee:17:aa:a4:7e:7f:b8:63:41:65:eb:4c:2c:c8:08:71: db:17:de:cc:74:ce:c2:79:cb:d2:89:b3:17:c0:24:3a:ab:ec: 29:9c:45:be:5e:c6:55:3a:7e:8e:1b:f4:8a:74:2a:fd:75:3a: 56:e2:ee:31:fe:68:f8:3c:ad:c6:70:61:ef:04:c3:71:57:4b: d2:6f:cc:b2:3b:70:3f:cf:cd:b0:f4:b1:52:8a:76:b5:4d:9e: 3b:18:ef:3b:a9:81:2f:1a:b0:0d:87:a1:c8:83:f6:c3:2b:dd: 38:d2:3b:90:a0:24:c6:e6:a3:d1:6d:d2:43:46:21:9f:96:15: d5:bb:bc:f6:75:0b:5d:32:21:7b:bf:f5:0b:a3:4c:e1:15:9e: 8b:d7:b7:04:10:2f:83:e4:2f:ca:fe:b4:73:6b:49:12:17:20: aa:f2:8f:07:d0:ea:36:5b:cb:16:7d:76:d8:e0:eb:85:dc:e2: 64:06:9f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4qC6yjY5ISlCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk M2Q2OWFjMmMtMjBlMS00OTgyLWFlZmMtZjJmNTg1NjU5OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi87uPAaeJjzYuhydu5dnFFlHFDGvxUMwai8I L+zBdsUJAdk5t1nFhJDg4CunwegCRmAMqs61EkTStMJKbjy3HIzWMLEjTYt/dkWh oIc71evhbyt9ITghYi51k69k5eayLgi54bghBx4YSNv0MjkQtLU7Td1zA/37Jw8G aPEOuhyz+/u10bZ1viFnafsG9RtXw7g9ACN05r2sA2lClVfYdjvLvycOY9UwjgtO PAxumP0r7Aa8Y9NpupUPeeEOr9jL43bCgwSCOrNWmP4aq8AIGgNf4WpMDh7/IlPt tHS/6pqqusz5gE92q8a3oFEWHyJqi9RslV/I07nMhHfp4KT5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8Lvun5Gr3/iuYVx5YfUp1ZyzaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWVkNjU5YmItNTZjZi0z YjZiLTk0NmQtNGU0N2I3MjY5NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy26WKPOV6Sri+5rQHjABdgCxsnBi/9oCAk5s+Wi+qxOvG1aOD5R+Do lsRKJFwpgwh6dJ6UmMOAjFEEUXSikNigptIfXFBx8O1J7heqpH5/uGNBZetMLMgI cdsX3sx0zsJ5y9KJsxfAJDqr7CmcRb5exlU6fo4b9Ip0Kv11Olbi7jH+aPg8rcZw Ye8Ew3FXS9JvzLI7cD/PzbD0sVKKdrVNnjsY7zupgS8asA2HociD9sMr3TjSO5Cg JMbmo9Ft0kNGIZ+WFdW7vPZ1C10yIXu/9QujTOEVnovXtwQQL4PkL8r+tHNrSRIX IKryjwfQ6jZbyxZ9dtjg64Xc4mQGn70= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:58 2025 by rpki-client