$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa File: 645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa (raw, json) Hash identifier: qGyXQdERjyA9H6cRX8zWuK7sjZqrh1s8dS7gsH2yntI= Subject key identifier: 99:77:A9:66:44:98:E9:29:52:ED:9A:BA:7B:52:E0:2F:4F:E8:E2:EF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8FAF486101282E2E7280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 3257 IP address blocks: 142.111.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8f:af:48:61:01:28:2e:2e:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=af772d9f-c66b-4861-a0c2-85ce93b4d61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:aa:a3:fa:9b:20:ce:47:f3:37:54:f7:58: 78:2b:bb:7f:49:63:1b:82:13:97:cb:3e:f4:f7:66: d5:c9:00:55:0f:3d:ca:4f:b8:cf:d4:e0:67:2f:c0: 0d:38:98:00:62:9f:ed:76:0b:49:91:4b:93:f5:4c: 02:ed:6b:d8:24:61:de:13:7f:f0:e8:fb:c3:e5:01: 59:4e:99:da:2e:59:07:66:6e:95:4a:41:59:f9:b6: d2:7c:aa:f7:13:55:f7:9d:a9:34:19:43:22:3e:3a: bd:7f:ac:bd:d8:ac:ed:df:e3:5d:9e:74:1c:9e:79: 41:5c:2c:b2:45:f8:11:9f:82:2d:44:53:4a:ea:c6: b9:c6:f8:95:94:5b:c5:4c:c5:0a:2a:7f:9e:73:40: 76:27:67:42:bb:05:dc:16:3d:6b:68:45:18:23:cf: 54:59:06:86:40:09:36:da:f1:da:1d:e0:ad:90:63: 8d:fe:33:ca:97:ba:ec:21:0c:88:83:6e:f1:bd:62: 36:e5:16:a7:3d:5d:c0:f6:d5:a5:38:3f:08:20:0a: 14:44:43:9b:28:b7:97:38:2e:e0:db:12:91:53:70: 2f:44:0a:8d:6f:11:1f:d3:10:e0:03:36:cf:46:43: 7d:51:80:06:99:f3:8a:ca:a1:d4:57:22:c1:7b:88: 74:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:77:A9:66:44:98:E9:29:52:ED:9A:BA:7B:52:E0:2F:4F:E8:E2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b2:74:37:e7:1f:11:ec:cb:68:94:7a:c9:1f:93:f2:d9:f7: 07:5e:4b:06:ab:7e:da:d4:85:b1:e9:6e:72:32:75:c5:bc:04: 1b:59:85:48:4b:bf:96:7b:e3:7f:80:0f:70:02:93:2b:19:c7: 3d:26:e1:11:ef:77:15:a0:f2:08:9f:cf:25:e2:b0:9b:e7:9c: ff:7b:5c:7b:a6:1a:c9:b0:0d:42:1e:70:74:ae:3b:68:d7:49: 2d:3f:99:db:71:de:4a:97:c0:ab:2e:9a:8a:20:d1:48:3a:31: f4:cd:1c:fd:28:75:0c:56:79:e7:12:aa:a8:27:88:fb:e1:31: b2:48:e0:60:d7:6b:0d:16:a8:e3:e7:69:1b:e3:07:40:eb:0b: d7:42:6f:95:43:b5:0e:30:0c:f7:09:93:73:97:c5:5f:f9:3c: e7:e4:72:0a:5e:0a:90:2d:5a:52:7f:ea:33:34:9b:29:99:ce: b1:c6:6d:25:18:bf:86:b2:26:50:1a:4f:fa:16:3c:ee:99:0f: b7:7e:c7:80:64:d6:fb:86:ba:1f:5e:82:01:47:26:96:ac:11: c2:e0:45:8f:ea:74:25:fa:ed:03:39:87:f8:39:f9:27:4c:c2: f7:6a:f6:37:72:e8:df:87:cf:04:89:05:a2:d8:3d:ac:43:82: d0:99:11:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4+vSGEBKC4ucoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YWY3NzJkOWYtYzY2Yi00ODYxLWEwYzItODVjZTkzYjRkNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfmqo/qbIM5H8zdU91h4K7t/SWMbghOXyz70 92bVyQBVDz3KT7jP1OBnL8ANOJgAYp/tdgtJkUuT9UwC7WvYJGHeE3/w6PvD5QFZ TpnaLlkHZm6VSkFZ+bbSfKr3E1X3nak0GUMiPjq9f6y92Kzt3+NdnnQcnnlBXCyy RfgRn4ItRFNK6sa5xviVlFvFTMUKKn+ec0B2J2dCuwXcFj1raEUYI89UWQaGQAk2 2vHaHeCtkGON/jPKl7rsIQyIg27xvWI25RanPV3A9tWlOD8IIAoUREObKLeXOC7g 2xKRU3AvRAqNbxEf0xDgAzbPRkN9UYAGmfOKyqHUVyLBe4h0XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl3qWZEmOkpUu2auntS4C9P6OLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjQ1YWIxMWItZmEyMS0z MmNiLWI3YTEtZGFkNjRkNmE0Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACydDfnHxHsy2iUeskfk/LZ9wdeSwarftrUhbHpbnIydcW8BBtZhUhL v5Z743+AD3ACkysZxz0m4RHvdxWg8gifzyXisJvnnP97XHumGsmwDUIecHSuO2jX SS0/mdtx3kqXwKsumoog0Ug6MfTNHP0odQxWeecSqqgniPvhMbJI4GDXaw0WqOPn aRvjB0DrC9dCb5VDtQ4wDPcJk3OXxV/5POfkcgpeCpAtWlJ/6jM0mymZzrHGbSUY v4ayJlAaT/oWPO6ZD7d+x4Bk1vuGuh9eggFHJpasEcLgRY/qdCX67QM5h/g5+SdM wvdq9jdy6N+HzwSJBaLYPaxDgtCZES0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:47 2025 by rpki-client