$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa File: 99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa (raw, json) Hash identifier: EvAWGY9czmBQKZ+JqhY/lkpLWa3dZys/YZBEtESZWbs= Subject key identifier: 37:BA:87:B3:B8:CE:DF:03:25:C3:29:DA:86:E6:9D:DF:FF:C9:70:B8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B89FD91DB8F52F89A29C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 3257 IP address blocks: 142.111.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:89:fd:91:db:8f:52:f8:9a:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=4e4cfa9c-f26a-4a0c-b5ec-ebe4db9b0394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:ed:d3:4a:9f:79:e0:35:f4:88:ad:4d:e6: 61:82:3d:ed:bf:d6:7b:10:a3:51:87:78:c8:25:95: 7a:19:b7:df:17:33:7c:c0:00:61:88:8e:a2:e1:8c: a6:b7:61:0d:f7:3b:8e:4b:2e:c6:96:c7:9f:d8:03: 79:1a:7e:ad:38:c7:27:c0:7a:e1:74:8f:b1:22:b4: 0c:4b:45:8d:65:cf:56:9b:dd:69:8a:20:8f:aa:43: fe:b9:07:ad:1b:91:72:c6:57:49:af:9b:5a:ac:da: 8e:3a:de:d1:e2:36:c9:8a:df:58:72:2f:f0:99:3d: 55:0a:b5:6e:f5:76:27:46:ec:5f:37:be:1e:c9:fb: d1:9b:54:39:ac:06:b6:07:80:f7:23:38:eb:bb:aa: 41:b1:f9:cf:1f:0d:39:aa:7d:57:17:26:11:44:35: b4:24:43:70:87:d3:95:f5:08:14:41:c6:23:05:d4: 9f:8f:9b:35:c9:4c:82:0a:cf:a7:e3:c8:e8:15:51: 5c:72:07:88:bf:b8:4e:36:5e:46:de:79:4c:e5:f4: c8:0f:7d:44:6c:bb:7b:dc:f1:26:a3:d6:23:e0:b5: 7e:a3:63:1a:ce:70:5a:26:51:77:f1:ed:3a:9c:72: 17:57:ca:14:12:96:66:30:8c:ca:07:af:42:7c:5e: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BA:87:B3:B8:CE:DF:03:25:C3:29:DA:86:E6:9D:DF:FF:C9:70:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:23:d5:83:aa:c4:5b:f5:e0:b2:28:35:79:23:09:fd:f4:68: 12:a7:ec:9f:85:63:33:1c:99:f8:59:5f:85:6a:3e:78:df:dd: f5:71:e0:8a:bc:b1:a2:57:ef:c6:b1:31:4b:95:8c:1d:c1:48: c9:7a:70:31:8d:8e:44:68:b6:1b:57:90:2b:1d:84:62:1b:10: e1:b0:fb:1a:9b:09:b5:4a:bc:89:ed:0e:36:f2:28:0a:28:84: 6b:19:06:48:3e:6a:79:25:70:8d:9e:40:ea:63:e1:5b:48:9a: 77:a7:78:99:a8:aa:aa:1a:88:ef:e8:51:96:1d:c2:8e:17:5c: f2:8e:f9:05:e9:2c:f9:35:6e:03:2d:48:79:cb:98:2f:50:66: 68:8f:40:86:a2:7d:f1:3e:51:13:d1:fd:e4:eb:d9:71:86:f5: fd:17:d3:b2:ec:33:b8:49:ec:a3:38:e6:59:97:dd:80:37:cf: fb:fa:2a:e2:32:ef:7b:b9:f6:4a:63:c2:35:31:dd:eb:3d:e0: 06:d5:7d:c7:f3:9e:9f:9e:74:98:59:ee:55:dc:8a:33:2e:0a: c6:b4:ec:c9:a3:ae:4d:59:12:a0:b5:a3:e7:53:4e:bb:f8:d3: b6:44:98:b8:16:6e:2b:df:55:1a:d0:bd:a5:3d:84:2e:85:22: ca:fa:22:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4n9kduPUviaKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk NGU0Y2ZhOWMtZjI2YS00YTBjLWI1ZWMtZWJlNGRiOWIwMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocbt00qfeeA19IitTeZhgj3tv9Z7EKNRh3jI JZV6GbffFzN8wABhiI6i4Yymt2EN9zuOSy7Glsef2AN5Gn6tOMcnwHrhdI+xIrQM S0WNZc9Wm91piiCPqkP+uQetG5FyxldJr5tarNqOOt7R4jbJit9Yci/wmT1VCrVu 9XYnRuxfN74eyfvRm1Q5rAa2B4D3Izjru6pBsfnPHw05qn1XFyYRRDW0JENwh9OV 9QgUQcYjBdSfj5s1yUyCCs+n48joFVFccgeIv7hONl5G3nlM5fTID31EbLt73PEm o9Yj4LV+o2MaznBaJlF38e06nHIXV8oUEpZmMIzKB69CfF60hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe6h7O4zt8DJcMp2obmnd//yXC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTlmM2NmZWEtOWNiNi0z NWI2LTgyNmUtNGRmYTE2YjIxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgj1YOqxFv14LIoNXkjCf30aBKn7J+FYzMcmfhZX4VqPnjf3fVx4Iq8 saJX78axMUuVjB3BSMl6cDGNjkRothtXkCsdhGIbEOGw+xqbCbVKvIntDjbyKAoo hGsZBkg+anklcI2eQOpj4VtImneneJmoqqoaiO/oUZYdwo4XXPKO+QXpLPk1bgMt SHnLmC9QZmiPQIaiffE+URPR/eTr2XGG9f0X07LsM7hJ7KM45lmX3YA3z/v6KuIy 73u59kpjwjUx3es94AbVfcfznp+edJhZ7lXcijMuCsa07Mmjrk1ZEqC1o+dTTrv4 07ZEmLgWbivfVRrQvaU9hC6FIsr6IvM= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:11 2025 by rpki-client