$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa File: a25adc19-0b0f-3e58-9770-caf9c965b218.roa (raw, json) Hash identifier: NaBkzgENl11uH97JjkHjLyTRn4GiYsTbnHJ4Cvl9UII= Subject key identifier: 8D:DC:87:8E:B8:DE:3D:41:7D:A6:B4:0F:31:BC:97:73:41:CF:8D:73 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847D834BE4CE89CE39680595340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa Signing time: Mon 11 Nov 2024 14:00:39 +0000 ROA not before: Mon 11 Nov 2024 14:00:39 +0000 ROA not after: Sun 09 Feb 2025 14:00:39 +0000 asID: 3257 IP address blocks: 142.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d8:34:be:4c:e8:9c:e3:96:80:59:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 11 14:00:39 2024 GMT Not After : Feb 9 14:00:39 2025 GMT Subject: CN=7317ed23-233a-4865-bb85-6910bc8bc8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:57:d0:a0:b7:4e:52:10:f7:ea:54:bd:67: 63:3d:e9:80:e9:39:5d:32:db:6a:39:c2:42:f3:ca: 59:8c:d0:00:83:ec:40:5d:b6:6a:03:3d:c5:73:63: 78:f2:c9:8b:5d:22:34:25:4a:d5:6d:2a:bb:d9:1c: 9f:2c:82:73:72:07:bc:05:2e:c8:3c:67:0d:b7:11: 56:8c:66:bc:32:71:c4:59:cb:6b:a4:20:73:bf:ef: 0e:23:7c:9f:bd:84:e4:b1:fb:c4:1b:24:80:f2:02: d7:11:45:61:ff:27:da:e9:c7:55:1b:76:bc:b6:72: 1c:21:f3:53:4a:66:23:4f:ec:a4:ce:91:60:5a:c9: 7a:28:83:3c:79:96:ce:c9:8e:c3:e4:da:e1:fa:22: 9d:69:a6:c6:2e:36:ce:1f:84:af:6d:2f:ab:e9:45: 60:de:c6:5c:62:75:82:a0:b7:df:96:12:a0:4b:af: 8e:1f:8d:f6:fe:9c:ac:33:19:98:b8:ee:22:99:11: 1a:25:40:28:e1:b3:32:64:06:7f:4a:9a:74:45:a1: 87:85:b9:ff:b9:e6:ad:33:d3:55:c4:d3:67:fc:cc: 67:eb:d5:84:db:35:0a:1b:d4:0e:b3:7f:9a:6d:46: fa:b6:af:3d:3d:27:94:e3:71:e9:e4:50:b7:f1:e0: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DC:87:8E:B8:DE:3D:41:7D:A6:B4:0F:31:BC:97:73:41:CF:8D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d7:6b:20:d6:67:c2:25:cd:70:01:93:e4:9b:35:59:a2:be: 40:17:fa:2c:9a:cd:9f:fb:60:71:ff:12:8a:de:ba:99:5c:d5: fb:1a:75:be:de:3e:ac:c1:bc:db:6a:c3:91:3a:6b:75:fe:68: 30:68:bf:c8:9e:70:1e:ef:c1:93:6a:f4:72:29:81:03:39:1d: f5:1c:78:49:79:59:4f:74:9a:92:65:ec:4e:26:2e:5a:ee:66: e8:e8:16:66:97:86:c2:bd:75:68:aa:c4:0b:e0:0c:09:ec:7f: 3b:09:f3:ec:b5:09:eb:1b:68:0b:fc:a8:8d:57:dd:4b:b5:bb: eb:e4:49:0d:f3:b0:23:5b:c1:58:17:4c:8a:5c:16:71:00:97: 00:d2:60:45:95:79:0a:3b:ee:f3:22:a0:02:13:dd:1c:ef:dd: 33:54:c8:b8:5e:30:fc:b3:59:39:62:01:a8:63:7e:05:47:ab: c7:77:2b:3a:24:42:82:a7:a4:4c:e5:85:4f:6c:cf:d0:84:0c: 87:15:db:41:78:ea:98:9f:eb:bd:bf:b5:9c:57:d8:5e:f3:4e: fa:3e:b4:6e:4f:a6:92:e7:2e:e6:fc:e7:1a:8a:ad:07:5d:96: c0:31:14:23:e7:e4:06:b1:b8:fd:33:1d:4a:de:b0:4f:f4:7d: 52:45:a2:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNL5M6JzjloBZU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk NzMxN2VkMjMtMjMzYS00ODY1LWJiODUtNjkxMGJjOGJjOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9JX0KC3TlIQ9+pUvWdjPemA6TldMttqOcJC 88pZjNAAg+xAXbZqAz3Fc2N48smLXSI0JUrVbSq72RyfLIJzcge8BS7IPGcNtxFW jGa8MnHEWctrpCBzv+8OI3yfvYTksfvEGySA8gLXEUVh/yfa6cdVG3a8tnIcIfNT SmYjT+ykzpFgWsl6KIM8eZbOyY7D5Nrh+iKdaabGLjbOH4SvbS+r6UVg3sZcYnWC oLfflhKgS6+OH432/pysMxmYuO4imREaJUAo4bMyZAZ/Spp0RaGHhbn/ueatM9NV xNNn/Mxn69WE2zUKG9QOs3+abUb6tq89PSeU43Hp5FC38eDsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3ch4643j1Bfaa0DzG8l3NBz41zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTI1YWRjMTktMGIwZi0z ZTU4LTk3NzAtY2FmOWM5NjViMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzXayDWZ8IlzXABk+SbNVmivkAX+iyazZ/7YHH/Eoreuplc1fsadb7e PqzBvNtqw5E6a3X+aDBov8iecB7vwZNq9HIpgQM5HfUceEl5WU90mpJl7E4mLlru ZujoFmaXhsK9dWiqxAvgDAnsfzsJ8+y1CesbaAv8qI1X3Uu1u+vkSQ3zsCNbwVgX TIpcFnEAlwDSYEWVeQo77vMioAIT3Rzv3TNUyLheMPyzWTliAahjfgVHq8d3Kzok QoKnpEzlhU9sz9CEDIcV20F46pif672/tZxX2F7zTvo+tG5PppLnLub85xqKrQdd lsAxFCPn5AaxuP0zHUresE/0fVJFoi0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:56 2024 by rpki-client on console-fra.rpki-client.org