$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa File: 598af8ac-86a0-3161-bc94-c07de93e1d30.roa (raw, json) Hash identifier: RAw4IrYTOHoEde4IbQ58+e0YvyD5fQENjOpijJBdTa8= Subject key identifier: 11:79:A6:32:DC:F3:D6:D5:3E:CE:FA:B0:5C:AC:EF:17:C0:7F:9F:93 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848705AFA6A6AD5186E55E61E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 8881 IP address blocks: 142.111.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fa:6a:6a:d5:18:6e:55:e6:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=58dc6a57-340c-47b2-80be-82426a5b2839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:51:68:dd:86:b0:f1:f0:a2:15:7b:69:91: 4a:88:ca:32:66:92:dd:c1:b7:16:ce:7f:08:9e:f6: 1b:4e:dc:02:31:a8:5f:7d:bb:7c:bd:b3:f8:82:8e: 04:2c:19:bf:97:9b:b1:c1:32:37:77:6e:07:a5:d6: f3:7a:b3:d2:6d:73:32:a1:0e:3b:c0:a4:37:63:fc: 65:f2:d4:df:45:bc:3b:ac:76:38:6d:13:de:82:49: e7:bb:a7:a6:59:86:26:cd:a7:74:3a:eb:87:6d:69: cc:4b:8f:8d:41:58:2e:bd:a3:9d:46:87:5f:6d:d2: 9a:ec:94:c8:70:35:95:73:d6:77:bd:92:40:50:c3: 14:3b:d1:dd:07:3a:e9:d4:de:21:5f:6d:29:86:fd: 19:15:f2:c4:f9:c9:80:5c:30:80:17:17:d8:8e:e2: a4:08:fb:a3:a9:36:d7:8d:94:c5:3f:fd:08:a9:33: 02:47:32:86:e0:97:ce:c3:f8:0f:d8:15:95:84:a7: d0:13:81:0a:c6:13:e6:58:1e:fa:b1:21:c1:dd:de: 5b:ef:e1:7f:22:e2:65:21:28:bd:83:5f:81:16:bf: a0:c5:c2:00:bf:18:cc:83:2e:31:19:43:db:1b:a2: b9:a5:b6:9c:65:0f:f2:ee:16:7a:b5:b9:c9:8e:e4: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:A6:32:DC:F3:D6:D5:3E:CE:FA:B0:5C:AC:EF:17:C0:7F:9F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1b:4c:b3:76:90:ed:af:c0:98:9d:43:8a:51:89:bf:45:c3: 61:49:58:0e:7c:ce:ce:54:a0:ae:65:99:1a:59:ec:d6:70:2f: ed:ee:0d:7a:fe:6c:43:c9:8b:07:c5:b5:87:92:79:31:5e:6d: b4:be:2e:56:ff:8c:ef:91:33:64:39:2d:06:bc:38:0a:3b:16: 0f:f7:48:06:54:4f:ae:3a:83:d1:03:aa:5d:26:07:63:da:d2: 09:fb:c7:01:d1:83:3e:55:35:d9:2a:34:02:e0:57:8d:eb:67: 55:f9:bb:2d:09:bc:3f:1a:26:9d:6d:fc:5c:cf:8a:76:21:d4: e4:47:90:b7:b0:03:b9:71:99:6a:d6:ad:19:95:92:64:9e:8d: 19:20:dd:20:ca:ba:e9:17:24:b3:c8:89:b2:75:39:78:9c:e5: 50:c1:19:6a:aa:d9:8a:ca:16:2b:a9:b1:aa:63:37:6d:0d:ca: d2:d2:c0:47:68:45:d7:46:6b:d2:dc:04:16:06:2e:2e:db:e6: a1:3b:83:c2:2a:db:10:77:61:a3:20:91:04:f1:b5:df:b7:be: 2c:cb:22:b6:1b:df:03:eb:73:a1:e6:5d:77:ac:b2:6c:56:11: 70:d0:dc:b2:e2:68:30:dd:10:21:67:d6:5f:e9:7c:df:e6:51: dd:17:65:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvpqatUYblXmHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk NThkYzZhNTctMzQwYy00N2IyLTgwYmUtODI0MjZhNWIyODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPhRaN2GsPHwohV7aZFKiMoyZpLdwbcWzn8I nvYbTtwCMahffbt8vbP4go4ELBm/l5uxwTI3d24HpdbzerPSbXMyoQ47wKQ3Y/xl 8tTfRbw7rHY4bRPegknnu6emWYYmzad0OuuHbWnMS4+NQVguvaOdRodfbdKa7JTI cDWVc9Z3vZJAUMMUO9HdBzrp1N4hX20phv0ZFfLE+cmAXDCAFxfYjuKkCPujqTbX jZTFP/0IqTMCRzKG4JfOw/gP2BWVhKfQE4EKxhPmWB76sSHB3d5b7+F/IuJlISi9 g1+BFr+gxcIAvxjMgy4xGUPbG6K5pbacZQ/y7hZ6tbnJjuTzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF5pjLc89bVPs76sFys7xfAf5+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTk4YWY4YWMtODZhMC0z MTYxLWJjOTQtYzA3ZGU5M2UxZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0bTLN2kO2vwJidQ4pRib9Fw2FJWA58zs5UoK5lmRpZ7NZwL+3uDXr+ bEPJiwfFtYeSeTFebbS+Llb/jO+RM2Q5LQa8OAo7Fg/3SAZUT646g9EDql0mB2Pa 0gn7xwHRgz5VNdkqNALgV43rZ1X5uy0JvD8aJp1t/FzPinYh1ORHkLewA7lxmWrW rRmVkmSejRkg3SDKuukXJLPIibJ1OXic5VDBGWqq2YrKFiupsapjN20NytLSwEdo RddGa9LcBBYGLi7b5qE7g8Iq2xB3YaMgkQTxtd+3vizLIrYb3wPrc6HmXXessmxW EXDQ3LLiaDDdECFn1l/pfN/mUd0XZfA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:22 2025 by rpki-client