$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa File: 9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa (raw, json) Hash identifier: XlKbyN+37YOhqZvCbAb7O9g8mp2siheEKzNRIhCVdNw= Subject key identifier: 8A:72:4B:F6:B2:A6:FF:D0:39:3C:4E:78:3D:D7:F2:96:15:ED:4B:01 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D6411B5F1E5215146A336700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 142.111.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:1b:5f:1e:52:15:14:6a:33:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=8a70e580-85ee-44da-9623-abb5dd3506ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:bc:92:88:88:30:8d:27:c0:f3:56:fc:43: bf:a1:0f:8c:a5:b8:98:f2:09:09:9d:d5:79:92:86: 67:7e:e2:01:37:8d:28:83:f2:6f:35:48:bc:14:f3: 54:62:30:3b:7a:17:1d:40:47:23:53:cb:ee:e3:d0: 75:b8:95:7f:9e:51:81:35:07:f7:fa:b9:51:6b:ba: b8:5d:77:cf:c6:a8:c8:90:6f:0c:86:87:cc:69:3e: f9:b8:e0:f7:15:45:2f:d9:70:75:d7:16:62:41:8e: a7:b2:3d:1b:e4:f3:c0:21:1a:05:9b:69:36:e8:da: 04:d8:0a:ee:d8:45:9f:2b:7f:01:05:11:ac:d0:4b: 5f:3e:d5:cf:cb:35:b2:eb:69:79:a9:67:b6:1a:1d: 60:56:3e:c5:6b:6a:35:65:03:1c:28:59:61:41:a5: fc:93:7b:59:b6:75:d6:d9:42:3a:dc:c5:2f:e6:e2: 7c:91:62:d2:20:78:1b:23:c5:59:59:3d:4f:d8:2c: 59:d6:d7:c5:45:05:da:d9:19:f4:57:d2:b9:1f:65: 2b:ef:ff:dc:9e:6e:41:0c:4a:02:7e:c2:19:f2:6d: 35:30:c8:81:d2:c7:a2:2d:b6:6e:b6:3a:c4:30:6d: bf:95:5a:6a:c0:f8:90:f2:12:95:6a:04:da:9e:3a: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:72:4B:F6:B2:A6:FF:D0:39:3C:4E:78:3D:D7:F2:96:15:ED:4B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f1:e7:e3:4e:53:9f:48:39:cd:ee:e9:bd:ce:f5:0d:11:f0: b1:73:6b:63:ad:3c:4e:a7:e9:61:75:a9:c9:45:a6:cd:6c:94: b4:59:cb:ac:f2:fc:a2:b3:5a:16:c5:ca:6e:b8:de:34:d8:4e: 4c:b2:43:f5:80:9d:87:94:88:47:42:b3:86:b8:a3:ec:76:e8: 64:e2:e5:67:56:7b:b6:1c:4e:a9:03:ef:7e:9c:88:eb:dd:3e: 39:d9:3a:6e:5a:aa:46:a7:e5:e3:a2:92:32:63:2f:c0:fb:72: e3:91:dc:27:10:60:c3:ad:7f:b0:b8:c4:4a:13:26:8b:59:16: 46:5c:ad:b0:f2:9a:a0:66:1f:19:5c:b7:32:bb:49:81:ca:4c: 2c:b9:c2:ec:72:5e:d1:59:76:19:15:6a:68:7f:1d:a7:19:9a: 52:c4:70:fa:e4:c4:7d:0d:67:67:74:dc:b4:b4:24:61:ad:96: 00:c6:aa:99:79:7f:cf:02:0d:59:dd:19:a8:69:ef:29:62:fc: 3b:b0:7e:9b:e4:ae:85:df:0f:74:1a:a0:36:1e:24:65:45:09: 8f:fc:1a:87:a4:b7:23:50:52:8b:7c:56:69:55:37:1a:1a:13: dc:94:5a:4d:67:cc:bf:5f:00:85:57:2f:86:b6:ea:6c:8c:de: 84:1d:fd:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRtfHlIVFGozZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGE3MGU1ODAtODVlZS00NGRhLTk2MjMtYWJiNWRkMzUwNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6O8koiIMI0nwPNW/EO/oQ+MpbiY8gkJndV5 koZnfuIBN40og/JvNUi8FPNUYjA7ehcdQEcjU8vu49B1uJV/nlGBNQf3+rlRa7q4 XXfPxqjIkG8MhofMaT75uOD3FUUv2XB11xZiQY6nsj0b5PPAIRoFm2k26NoE2Aru 2EWfK38BBRGs0EtfPtXPyzWy62l5qWe2Gh1gVj7Fa2o1ZQMcKFlhQaX8k3tZtnXW 2UI63MUv5uJ8kWLSIHgbI8VZWT1P2CxZ1tfFRQXa2Rn0V9K5H2Ur7//cnm5BDEoC fsIZ8m01MMiB0seiLbZutjrEMG2/lVpqwPiQ8hKVagTanjryxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpyS/aypv/QOTxOeD3X8pYV7UsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWE4YWNkZDQtMjIyNC0z YjBhLTk1MTgtOGRiMTkzZjhhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvx5+NOU59IOc3u6b3O9Q0R8LFza2OtPE6n6WF1qclFps1slLRZy6zy /KKzWhbFym643jTYTkyyQ/WAnYeUiEdCs4a4o+x26GTi5WdWe7YcTqkD736ciOvd PjnZOm5aqkan5eOikjJjL8D7cuOR3CcQYMOtf7C4xEoTJotZFkZcrbDymqBmHxlc tzK7SYHKTCy5wuxyXtFZdhkVamh/HacZmlLEcPrkxH0NZ2d03LS0JGGtlgDGqpl5 f88CDVndGahp7yli/DuwfpvkroXfD3QaoDYeJGVFCY/8GoektyNQUot8VmlVNxoa E9yUWk1nzL9fAIVXL4a26myM3oQd/SM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:54 2025 by rpki-client