$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/285a3b21-b42f-3980-9d35-ed0dc3086f4a.roa File: 285a3b21-b42f-3980-9d35-ed0dc3086f4a.roa (raw, json) Hash identifier: Ms4NPvWkpSVBh+l0H5l1RNeGF00ZAFjDwEKmTMlfyTk= Subject key identifier: 99:70:53:28:6D:50:AD:72:00:98:33:A4:A5:EF:25:6F:FC:5B:41:4B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848F00C4A4526DD3AF0F74ADCB0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/285a3b21-b42f-3980-9d35-ed0dc3086f4a.roa Signing time: Wed 19 Feb 2025 19:45:39 +0000 ROA not before: Wed 19 Feb 2025 19:45:39 +0000 ROA not after: Tue 20 May 2025 18:45:39 +0000 asID: 204957 IP address blocks: 142.111.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:4a:45:26:dd:3a:f0:f7:4a:dc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 19 19:45:39 2025 GMT Not After : May 20 18:45:39 2025 GMT Subject: CN=1dbf1b10-3652-4828-9b47-203a99cce2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:55:e9:9a:6c:ec:fa:8a:80:d8:39:c1:ff: 96:2e:66:2c:c6:f7:a2:dc:92:68:20:6a:94:15:2d: d0:2b:27:61:bb:b6:af:52:21:8b:c7:c5:94:2e:b7: 5f:44:e5:ac:08:bd:66:d8:7f:7e:84:90:36:17:72: b3:5f:06:a9:6a:73:55:f9:24:82:96:02:2a:0c:5c: ba:e2:30:99:64:c7:e8:fe:1b:00:ba:84:79:7b:06: 09:62:6a:63:1b:40:fa:e2:cf:39:6a:ad:a8:5e:1b: 3e:5f:77:19:cd:f0:7b:30:d5:84:a7:96:dd:08:ff: 66:4e:db:90:56:3a:50:95:88:8a:45:dd:75:9e:f7: f5:64:37:59:9c:d8:88:3a:1c:67:f3:db:f4:3b:a6: 6d:ce:31:f4:37:30:76:c0:2f:50:59:02:6e:89:d8: 8d:8c:92:50:c9:16:61:e7:0a:02:bf:67:8e:a3:6c: a9:44:8b:7d:14:df:9e:96:f0:12:db:5b:74:a4:77: eb:c2:6e:70:29:9e:51:12:56:ae:40:99:7b:2b:84: c0:a3:bb:16:dc:f2:d2:fd:fa:1b:40:be:18:b1:89: e2:2a:3f:a1:2e:80:96:47:5c:69:29:9d:ef:a9:d8: 76:ec:a2:51:bc:c8:d8:22:40:02:a7:6f:27:dd:dd: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:70:53:28:6D:50:AD:72:00:98:33:A4:A5:EF:25:6F:FC:5B:41:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/285a3b21-b42f-3980-9d35-ed0dc3086f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:71:9f:ce:10:61:df:ab:ce:ce:88:43:b6:1c:27:50:a3:5e: af:c3:06:32:de:76:99:17:bd:04:51:ba:1b:19:21:53:55:9a: f9:18:21:17:92:1b:a2:f4:7b:b4:7f:cc:c4:2a:0b:60:0c:f7: 7d:8f:d8:96:2c:e7:61:f6:a9:77:bc:1b:c8:7e:22:14:dc:a2: 81:7b:76:dd:88:51:e4:e3:b3:78:88:46:f1:45:1c:33:7f:6b: 82:b7:f5:65:0e:7b:c7:32:4c:d1:0c:56:84:96:b9:95:4b:09: f4:85:bb:df:2d:92:37:a0:17:da:63:5f:65:eb:89:6b:d7:8d: 66:e9:4f:b1:f7:c9:54:07:9e:34:32:85:8b:a0:4f:d4:59:39: 54:ca:fa:31:a3:5a:12:24:b8:f1:02:08:2b:97:83:3f:18:87: 35:67:8e:de:69:fb:d0:74:e2:d9:d0:1d:c0:06:65:c8:21:98: 10:9a:a3:11:6f:6d:2b:a3:05:e4:7b:23:bb:2f:25:67:f0:22: 05:85:2c:90:85:b6:f5:20:d2:e9:ee:f4:2a:ee:b6:72:c8:26: 82:fe:4e:50:69:e1:e5:57:3c:97:28:8b:49:b9:da:88:7c:11: cf:a4:92:af:0f:fb:c9:44:19:12:07:52:2e:4c:68:de:6c:df: 42:46:62:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDEpFJt068PdK3LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxOTE5NDUzOVoXDTI1MDUyMDE4NDUzOVowLzEtMCsGA1UEAxMk MWRiZjFiMTAtMzY1Mi00ODI4LTliNDctMjAzYTk5Y2NlMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZpV6Zps7PqKgNg5wf+WLmYsxvei3JJoIGqU FS3QKydhu7avUiGLx8WULrdfROWsCL1m2H9+hJA2F3KzXwapanNV+SSClgIqDFy6 4jCZZMfo/hsAuoR5ewYJYmpjG0D64s85aq2oXhs+X3cZzfB7MNWEp5bdCP9mTtuQ VjpQlYiKRd11nvf1ZDdZnNiIOhxn89v0O6ZtzjH0NzB2wC9QWQJuidiNjJJQyRZh 5woCv2eOo2ypRIt9FN+elvAS21t0pHfrwm5wKZ5RElauQJl7K4TAo7sW3PLS/fob QL4YsYniKj+hLoCWR1xpKZ3vqdh27KJRvMjYIkACp28n3d0wvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlwUyhtUK1yAJgzpKXvJW/8W0FLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjg1YTNiMjEtYjQyZi0z OTgwLTlkMzUtZWQwZGMzMDg2ZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxxn84QYd+rzs6IQ7YcJ1CjXq/DBjLedpkXvQRRuhsZIVNVmvkYIReS G6L0e7R/zMQqC2AM932P2JYs52H2qXe8G8h+IhTcooF7dt2IUeTjs3iIRvFFHDN/ a4K39WUOe8cyTNEMVoSWuZVLCfSFu98tkjegF9pjX2XriWvXjWbpT7H3yVQHnjQy hYugT9RZOVTK+jGjWhIkuPECCCuXgz8YhzVnjt5p+9B04tnQHcAGZcghmBCaoxFv bSujBeR7I7svJWfwIgWFLJCFtvUg0unu9CrutnLIJoL+TlBp4eVXPJcoi0m52oh8 Ec+kkq8P+8lEGRIHUi5MaN5s30JGYpY= -----END CERTIFICATE-----Generated at Wed Apr 9 17:14:46 2025 by rpki-client