$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0ba4c34-19f0-3c13-81bf-06229021e2c3.roa File: a0ba4c34-19f0-3c13-81bf-06229021e2c3.roa (raw, json) Hash identifier: 1yovGlYDNhpIsdUNWekINipP5dxLvD3BrNvLjoB9VRM= Subject key identifier: 3E:35:97:CA:17:30:E3:9F:27:7E:F3:A7:97:0D:36:87:72:B0:E3:E2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8A415CF7F5DEA0502680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0ba4c34-19f0-3c13-81bf-06229021e2c3.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 3257 IP address blocks: 142.111.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8a:41:5c:f7:f5:de:a0:50:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=f79dc966-0dc7-4aab-9881-dee4b0f5120e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:cc:cd:f1:aa:36:59:68:cf:c5:c6:ae:fe: 93:8a:e7:c3:dd:60:78:05:a8:56:55:8e:c1:c1:fe: 67:47:28:a5:a8:fd:59:4a:e0:f1:8b:c1:11:80:98: d6:2e:92:38:90:59:1a:48:d1:1a:3b:8a:98:5b:93: 83:5f:8e:c6:45:2a:7d:dd:0e:09:58:60:95:5c:6f: 3a:7f:9a:6d:f2:6c:4c:c2:3c:d4:44:90:05:10:a6: 5c:1d:87:90:9c:54:93:96:6f:58:75:ea:0f:89:fe: 2e:ca:e8:c9:86:dc:40:6e:bb:88:f0:df:8f:a0:6e: 2b:a8:f5:57:a7:b0:71:f1:f2:dc:5a:69:eb:1b:23: cf:e8:be:de:11:93:c6:35:3d:fe:3c:3a:8a:05:b7: f7:c2:ae:a6:f4:0d:26:2e:bd:3e:a0:e6:ff:92:40: 55:90:ec:d5:63:f3:be:88:c4:f8:02:9e:e9:7c:58: 1c:10:d3:0c:19:a1:8b:a5:52:63:d4:ec:9a:6a:7d: 3c:29:11:dd:87:e5:cf:52:12:24:f1:46:df:e9:76: fc:a2:11:8e:a1:42:1c:a1:af:0c:7f:e8:81:ee:64: 18:9a:95:f0:6f:69:ae:d0:65:c7:25:53:14:95:7b: 2d:79:6e:e6:f0:27:b6:7b:d6:98:0f:e1:b8:96:70: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:35:97:CA:17:30:E3:9F:27:7E:F3:A7:97:0D:36:87:72:B0:E3:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0ba4c34-19f0-3c13-81bf-06229021e2c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:84:b1:61:83:61:8a:22:fb:7a:ba:a9:96:a7:3f:a8:0e:4d: 34:ed:c8:09:cd:26:48:03:d2:43:cc:33:82:e5:5f:0b:a7:85: 5e:93:68:44:cc:21:ad:8d:97:72:98:db:aa:7d:0d:72:39:c3: 26:6b:b8:eb:96:0a:69:44:6c:e8:90:5b:d8:10:28:10:3f:e9: 42:22:9f:cd:47:f9:70:88:60:cf:11:cc:4d:65:76:a8:91:41: 9a:cd:9b:c7:0f:aa:81:72:c1:08:59:35:65:18:9a:dd:50:11: 73:11:3a:af:e4:b3:24:84:06:c7:32:4e:1f:d8:80:f9:3c:11: 9c:c9:34:e2:b8:8e:75:74:8f:e4:ef:d6:82:22:b9:ec:a1:fb: 6c:e7:2d:e7:ff:18:25:81:97:23:b9:34:dc:e6:4e:a7:0a:b0: f9:57:31:f4:71:62:b5:7f:4e:53:56:ba:aa:ea:c1:aa:fc:66: 41:20:be:c3:43:05:01:d2:60:64:d3:0e:50:16:a2:c8:f2:59: 79:ae:06:7f:86:ab:22:c5:ae:a6:d1:33:0c:0a:cf:a8:82:bb: d7:5b:73:4c:6f:6f:49:12:93:a4:e8:ec:74:1a:74:8e:6a:c6: 50:41:e2:ee:dd:73:06:1d:74:b1:ca:a5:df:df:7e:f2:19:50: 9f:a5:5c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4pBXPf13qBQJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk Zjc5ZGM5NjYtMGRjNy00YWFiLTk4ODEtZGVlNGIwZjUxMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOjMzfGqNlloz8XGrv6TiufD3WB4BahWVY7B wf5nRyilqP1ZSuDxi8ERgJjWLpI4kFkaSNEaO4qYW5ODX47GRSp93Q4JWGCVXG86 f5pt8mxMwjzURJAFEKZcHYeQnFSTlm9YdeoPif4uyujJhtxAbruI8N+PoG4rqPVX p7Bx8fLcWmnrGyPP6L7eEZPGNT3+PDqKBbf3wq6m9A0mLr0+oOb/kkBVkOzVY/O+ iMT4Ap7pfFgcENMMGaGLpVJj1Oyaan08KRHdh+XPUhIk8Ubf6Xb8ohGOoUIcoa8M f+iB7mQYmpXwb2mu0GXHJVMUlXsteW7m8Ce2e9aYD+G4lnCD3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD41l8oXMOOfJ37zp5cNNodysOPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTBiYTRjMzQtMTlmMC0z YzEzLTgxYmYtMDYyMjkwMjFlMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWEsWGDYYoi+3q6qZanP6gOTTTtyAnNJkgD0kPMM4LlXwunhV6TaETM Ia2Nl3KY26p9DXI5wyZruOuWCmlEbOiQW9gQKBA/6UIin81H+XCIYM8RzE1ldqiR QZrNm8cPqoFywQhZNWUYmt1QEXMROq/ksySEBscyTh/YgPk8EZzJNOK4jnV0j+Tv 1oIiueyh+2znLef/GCWBlyO5NNzmTqcKsPlXMfRxYrV/TlNWuqrqwar8ZkEgvsND BQHSYGTTDlAWosjyWXmuBn+GqyLFrqbRMwwKz6iCu9dbc0xvb0kSk6To7HQadI5q xlBB4u7dcwYddLHKpd/ffvIZUJ+lXMc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:18 2025 by rpki-client