$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f04092-80ff-3a0d-96ba-403dc1b6a6f2.roa File: 59f04092-80ff-3a0d-96ba-403dc1b6a6f2.roa (raw, json) Hash identifier: NbZIcOJttP/2H6xtp9UU/hfJTldyjtBNmwC/xyxB5kA= Subject key identifier: DC:D5:F6:8F:05:FF:C5:6B:57:14:F1:A3:5D:07:6D:1E:62:6C:B4:7A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858489FD0A03FD60C60F8D4E67100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f04092-80ff-3a0d-96ba-403dc1b6a6f2.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 7018 IP address blocks: 142.111.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:a0:3f:d6:0c:60:f8:d4:e6:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=04cdf368-a47d-4cdf-a12a-79a195d09739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:46:be:32:d1:d0:06:a0:60:fc:f0:32:de: 2d:8f:0b:9f:4b:d6:cc:84:68:a8:7c:0e:ed:28:86: 4c:f9:b8:a8:c7:db:09:b7:5a:7d:c3:02:59:e0:1b: 1d:97:59:40:eb:07:9f:8a:0d:25:52:c2:f0:c0:5a: 8d:0a:a8:38:6e:38:7c:93:95:09:fd:11:59:ea:ba: 1d:33:58:2e:dd:49:30:eb:26:23:12:09:ee:fe:a1: 1a:99:ea:f4:62:dc:68:b8:68:c8:3a:0d:99:3f:a3: 5b:38:76:85:c1:78:a2:4a:83:ab:d3:00:f0:f8:10: 1e:2b:48:ed:59:63:f2:11:92:3d:3f:9f:14:96:a3: 78:be:7c:51:54:0d:8f:77:88:d9:40:92:d2:9c:90: b2:42:cf:af:9d:36:28:29:6c:b9:bb:c3:ce:77:84: ea:07:c1:b1:39:6a:35:78:5e:e4:c8:0d:59:d5:55: af:ae:60:92:2b:a1:1b:7e:20:48:8a:97:00:c0:36: e8:86:00:f4:6c:c8:39:9d:d8:2e:1c:01:12:c8:c2: 13:09:83:54:c3:81:d4:d1:17:80:70:8d:5c:31:88: ec:6f:aa:a2:1a:a8:6d:76:f1:3b:0c:58:a6:f3:2d: d7:ca:51:df:41:e5:7c:c3:03:84:2e:4f:39:35:54: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D5:F6:8F:05:FF:C5:6B:57:14:F1:A3:5D:07:6D:1E:62:6C:B4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f04092-80ff-3a0d-96ba-403dc1b6a6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:96:65:5b:5f:c9:04:83:f7:7c:03:f7:29:ba:4a:b3:7b:3a: 97:17:6d:9f:3a:8c:f2:3a:0c:dc:52:dc:0a:64:85:40:a5:eb: 7f:49:07:f6:8f:0e:2b:e4:dd:db:29:be:e0:33:50:9c:5c:6e: c4:a3:91:18:be:df:4b:b1:bb:0e:04:0e:93:28:f8:bd:c7:2c: 17:4c:e0:45:61:2a:bb:a0:60:7b:04:d2:00:38:18:0d:54:68: 18:11:54:4f:09:38:95:c7:2a:13:53:d0:dc:c2:5f:e9:f9:89: c7:3f:4b:76:b6:d6:d3:47:db:ec:a1:2b:1f:65:31:40:0d:b6: e4:2b:e6:46:e3:21:51:29:c5:8c:7d:b2:29:3f:a4:67:2a:3b: 30:b2:6d:81:e4:b4:45:69:8c:d7:97:e4:94:bf:68:a7:21:d2: 92:29:28:b1:ef:ef:d5:b8:df:45:0c:f4:72:6b:4f:e7:6a:35: 3e:cc:7b:7a:96:92:e7:72:ee:e3:60:75:d6:b2:81:90:9c:02: 84:93:21:8f:2d:b0:be:6f:14:c8:a1:a1:bc:26:6f:83:ae:e3: f8:f0:18:8f:a6:85:34:4d:0f:92:11:9d:fe:74:5c:79:e4:1c: 71:e4:0c:93:31:46:0a:39:2e:fa:28:d5:0a:fa:46:38:3d:de: 87:10:56:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0KA/1gxg+NTmcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk MDRjZGYzNjgtYTQ3ZC00Y2RmLWExMmEtNzlhMTk1ZDA5NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgtGvjLR0AagYPzwMt4tjwufS9bMhGiofA7t KIZM+biox9sJt1p9wwJZ4Bsdl1lA6wefig0lUsLwwFqNCqg4bjh8k5UJ/RFZ6rod M1gu3Ukw6yYjEgnu/qEamer0YtxouGjIOg2ZP6NbOHaFwXiiSoOr0wDw+BAeK0jt WWPyEZI9P58UlqN4vnxRVA2Pd4jZQJLSnJCyQs+vnTYoKWy5u8POd4TqB8GxOWo1 eF7kyA1Z1VWvrmCSK6EbfiBIipcAwDbohgD0bMg5ndguHAESyMITCYNUw4HU0ReA cI1cMYjsb6qiGqhtdvE7DFim8y3XylHfQeV8wwOELk85NVQINwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzV9o8F/8VrVxTxo10HbR5ibLR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTlmMDQwOTItODBmZi0z YTBkLTk2YmEtNDAzZGMxYjZhNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGWZVtfyQSD93wD9ym6SrN7OpcXbZ86jPI6DNxS3ApkhUCl639JB/aP Divk3dspvuAzUJxcbsSjkRi+30uxuw4EDpMo+L3HLBdM4EVhKrugYHsE0gA4GA1U aBgRVE8JOJXHKhNT0NzCX+n5icc/S3a21tNH2+yhKx9lMUANtuQr5kbjIVEpxYx9 sik/pGcqOzCybYHktEVpjNeX5JS/aKch0pIpKLHv79W430UM9HJrT+dqNT7Me3qW kudy7uNgddaygZCcAoSTIY8tsL5vFMihobwmb4Ou4/jwGI+mhTRND5IRnf50XHnk HHHkDJMxRgo5Lvoo1Qr6Rjg93ocQVrE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:52 2025 by rpki-client