$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21cef264-648b-31c5-a85e-052f0cff5bb8.roa File: 21cef264-648b-31c5-a85e-052f0cff5bb8.roa (raw, json) Hash identifier: 2uOazlQ98sKKUkLAnEetGa27Edd/QJYSx8ZFNhdIm38= Subject key identifier: C0:52:83:1F:29:F7:1D:F2:80:68:81:9E:97:CE:CA:1F:BB:D5:CA:1F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584908817D620F0B1A4BCFBD5880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21cef264-648b-31c5-a85e-052f0cff5bb8.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 393886 IP address blocks: 142.111.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7d:62:0f:0b:1a:4b:cf:bd:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=987d1df6-5aa6-4d1b-8f4f-d1619495b6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:ac:ee:36:23:ef:e5:08:90:61:8b:39:9f: 71:d6:19:62:96:4b:6c:1b:e6:cc:6c:bb:f8:05:48: ed:58:80:36:d3:5d:ec:b5:d3:53:0d:d6:10:ae:01: cd:6c:44:78:88:e0:fa:38:b7:ed:b8:a1:a4:63:6c: 72:ce:cb:59:05:f4:41:ee:10:bd:e0:57:b7:68:fb: 85:5f:77:51:33:e0:5b:4e:f8:63:7c:a2:e0:13:70: 96:7d:95:18:be:8c:c2:08:a3:8e:5c:46:20:1f:c7: eb:32:db:1c:60:00:b4:6f:f6:28:cb:33:8a:6c:b8: e7:47:16:98:fa:76:d4:c7:63:64:d3:60:c5:0b:d9: e6:a1:9c:fe:21:44:64:43:a2:59:a3:57:41:f7:74: d4:fc:69:2b:6a:40:04:11:b8:01:81:fb:ec:5c:6b: f7:01:dc:e4:96:6a:28:70:ae:09:e3:78:1d:c3:0f: 2e:aa:af:ed:1d:82:e5:ff:0f:1c:98:7d:55:f6:68: 9b:0f:79:a7:9a:6e:d1:8e:9c:9b:15:db:4f:1c:7a: 0e:ce:09:43:48:cc:06:83:25:af:4a:c3:7b:e0:e7: cb:f1:9c:7d:ed:84:bd:dd:39:9c:7b:3e:9c:bf:34: 53:85:88:b7:6a:4d:ca:67:08:57:ec:1b:80:26:8e: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:83:1F:29:F7:1D:F2:80:68:81:9E:97:CE:CA:1F:BB:D5:CA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21cef264-648b-31c5-a85e-052f0cff5bb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f0:b1:e8:d0:8f:7f:e0:04:3e:07:1b:d4:fa:26:24:41:00: be:99:06:8d:5b:a9:a0:ab:68:32:5e:98:8c:0f:c5:85:34:18: a6:4e:e2:3f:8e:06:0c:f9:f5:61:9b:f5:89:9f:72:c9:12:5a: 29:46:31:8a:47:59:d4:28:25:62:cc:40:b5:72:02:a5:19:96: 08:c8:88:7f:63:cf:a8:ac:65:a0:fe:ca:25:1c:ef:6b:14:19: d1:4f:a4:27:a7:5d:96:77:9a:fa:b2:c4:c7:37:ca:55:9b:55: 34:c1:dc:83:6d:e4:93:82:23:5c:25:f9:35:86:aa:4d:b2:d9: e2:29:50:bd:69:bb:64:32:af:e2:9f:71:b2:20:28:92:80:63: d9:af:49:61:96:21:c2:a0:b9:cb:52:3d:82:7c:f3:dd:bf:47: 3d:aa:f1:65:7d:db:94:cd:c9:2a:74:0b:56:2f:61:4e:9d:26: 1a:93:48:a3:0d:22:e8:61:50:5b:e4:ff:76:c2:e9:c2:a6:8c: c2:dc:93:da:11:67:cb:a1:f2:db:e5:fa:29:bc:5b:69:5b:a9: 00:fe:9e:70:cd:02:ec:85:c5:d7:68:d0:cb:2a:2e:4f:c9:c0: 0f:e6:07:be:f4:03:3a:50:e6:11:5f:85:25:cf:22:10:d3:61: 90:4c:a2:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgX1iDwsaS8+9WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTg3ZDFkZjYtNWFhNi00ZDFiLThmNGYtZDE2MTk0OTViNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Ks7jYj7+UIkGGLOZ9x1hlilktsG+bMbLv4 BUjtWIA2013stdNTDdYQrgHNbER4iOD6OLftuKGkY2xyzstZBfRB7hC94Fe3aPuF X3dRM+BbTvhjfKLgE3CWfZUYvozCCKOOXEYgH8frMtscYAC0b/YoyzOKbLjnRxaY +nbUx2Nk02DFC9nmoZz+IURkQ6JZo1dB93TU/GkrakAEEbgBgfvsXGv3Adzklmoo cK4J43gdww8uqq/tHYLl/w8cmH1V9mibD3mnmm7RjpybFdtPHHoOzglDSMwGgyWv SsN74OfL8Zx97YS93Tmcez6cvzRThYi3ak3KZwhX7BuAJo5vzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBSgx8p9x3ygGiBnpfOyh+71cofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjFjZWYyNjQtNjQ4Yi0z MWM1LWE4NWUtMDUyZjBjZmY1YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfwsejQj3/gBD4HG9T6JiRBAL6ZBo1bqaCraDJemIwPxYU0GKZO4j+O Bgz59WGb9YmfcskSWilGMYpHWdQoJWLMQLVyAqUZlgjIiH9jz6isZaD+yiUc72sU GdFPpCenXZZ3mvqyxMc3ylWbVTTB3INt5JOCI1wl+TWGqk2y2eIpUL1pu2Qyr+Kf cbIgKJKAY9mvSWGWIcKguctSPYJ8892/Rz2q8WV925TNySp0C1YvYU6dJhqTSKMN IuhhUFvk/3bC6cKmjMLck9oRZ8uh8tvl+im8W2lbqQD+nnDNAuyFxddo0MsqLk/J wA/mB770AzpQ5hFfhSXPIhDTYZBMot8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:33 2025 by rpki-client