$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a523c763-3cd9-3670-8473-35fd2777b72b.roa File: a523c763-3cd9-3670-8473-35fd2777b72b.roa (raw, json) Hash identifier: ncdUEwGQMihDpyJAhqEC99cFp0U7fW2x/lrVnyLgE9U= Subject key identifier: F8:9D:CF:84:70:C2:7E:0C:FE:4D:04:A2:8A:1F:FA:14:11:ED:17:72 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584917DC3DF39A14CCA2435EAF00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a523c763-3cd9-3670-8473-35fd2777b72b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 142.111.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:3d:f3:9a:14:cc:a2:43:5e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=5940ce5c-32c8-49a5-9127-79fe82d8f7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:17:26:b9:93:4d:2c:f4:8c:4e:c7:ea:01: 20:92:f6:e4:53:96:65:f5:d8:23:d0:69:c0:89:27: 84:e4:46:e9:5a:26:6d:d7:0f:ec:53:5b:5b:bb:f4: 98:60:02:6e:59:26:3b:45:f3:96:66:89:2a:17:27: 9e:95:b6:11:55:1d:bf:2a:d2:23:6f:1f:ef:ee:a9: 76:0c:a2:13:ac:39:41:1e:e8:b0:c9:20:69:40:99: 0e:71:c6:74:9b:7d:92:70:ef:7f:b6:46:d5:6d:0c: bd:db:7a:21:e6:ba:80:62:48:be:40:85:cb:9e:2e: c9:08:58:5e:cb:45:19:4e:0a:30:af:ca:7d:38:64: f6:e0:eb:aa:9f:1e:fb:f8:81:a3:fd:57:2c:33:01: 75:6a:1c:a9:46:1a:b3:c6:9b:c3:6c:ae:70:7a:aa: 3d:03:ae:5a:ca:30:19:b9:5d:90:46:6f:48:f2:0b: 53:84:0d:ac:3e:cc:7e:cc:fd:db:a1:2f:a8:ea:52: ff:50:13:6a:52:bc:8b:64:ea:58:9e:9a:4f:66:04: 22:03:91:61:0c:95:74:e6:c8:96:7c:73:fd:12:f6: e4:33:9c:6c:1f:65:7c:42:38:36:85:43:b5:5a:f9: 11:e3:01:a7:9c:3e:d7:0d:e3:75:b1:2c:08:02:86: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:CF:84:70:C2:7E:0C:FE:4D:04:A2:8A:1F:FA:14:11:ED:17:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a523c763-3cd9-3670-8473-35fd2777b72b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7c:a6:c6:5c:d4:38:54:2f:12:f0:06:09:d2:d3:4e:30:29: c5:d1:2e:33:cc:88:5d:0b:2f:2b:aa:98:b4:3e:de:42:b8:4d: 4b:10:9f:81:a4:c0:e6:0f:be:29:d5:6e:c6:6a:3d:7c:f6:22: 10:14:79:ae:52:a7:c9:d4:9b:b5:1f:ed:55:97:e2:fa:c3:1a: 47:be:c8:17:28:11:06:a3:0a:2c:71:15:6b:d4:d1:60:b6:52: 1f:e0:77:46:a3:ad:73:b4:df:cd:cd:0d:9a:a5:79:14:ac:8d: 98:b8:be:34:2e:41:ba:22:e0:4e:6c:81:77:db:38:80:83:17: 8f:67:3a:24:d1:d3:4f:f0:1d:54:1b:1f:92:db:69:28:d8:8d: 8b:5d:e2:71:70:47:e6:78:4a:81:c5:a1:49:12:81:84:67:c0: c9:f4:d5:3f:85:f5:64:15:17:59:6f:50:da:cb:d6:81:a3:cc: 40:3b:77:c8:a1:08:a8:43:c0:dc:9f:aa:3f:2b:ea:96:99:13: 5f:7e:ce:7c:1b:7f:fb:7c:77:d8:d2:5a:a0:7a:85:d0:be:ae: d2:04:b5:90:b2:13:60:b9:68:13:43:3b:4a:38:d0:68:2d:52: 1a:18:55:fc:84:17:cb:26:d6:c0:5c:fd:b6:69:6e:67:6a:7f: 4d:22:14:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3D3zmhTMokNerwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NTk0MGNlNWMtMzJjOC00OWE1LTkxMjctNzlmZTgyZDhmN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonAXJrmTTSz0jE7H6gEgkvbkU5Zl9dgj0GnA iSeE5EbpWiZt1w/sU1tbu/SYYAJuWSY7RfOWZokqFyeelbYRVR2/KtIjbx/v7ql2 DKITrDlBHuiwySBpQJkOccZ0m32ScO9/tkbVbQy923oh5rqAYki+QIXLni7JCFhe y0UZTgowr8p9OGT24Ouqnx77+IGj/VcsMwF1ahypRhqzxpvDbK5weqo9A65ayjAZ uV2QRm9I8gtThA2sPsx+zP3boS+o6lL/UBNqUryLZOpYnppPZgQiA5FhDJV05siW fHP9EvbkM5xsH2V8Qjg2hUO1WvkR4wGnnD7XDeN1sSwIAoapJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPidz4Rwwn4M/k0Eooof+hQR7RdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTUyM2M3NjMtM2NkOS0z NjcwLTg0NzMtMzVmZDI3NzdiNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG98psZc1DhULxLwBgnS004wKcXRLjPMiF0LLyuqmLQ+3kK4TUsQn4Gk wOYPvinVbsZqPXz2IhAUea5Sp8nUm7Uf7VWX4vrDGke+yBcoEQajCixxFWvU0WC2 Uh/gd0ajrXO0383NDZqleRSsjZi4vjQuQboi4E5sgXfbOICDF49nOiTR00/wHVQb H5LbaSjYjYtd4nFwR+Z4SoHFoUkSgYRnwMn01T+F9WQVF1lvUNrL1oGjzEA7d8ih CKhDwNyfqj8r6paZE19+znwbf/t8d9jSWqB6hdC+rtIEtZCyE2C5aBNDO0o40Ggt UhoYVfyEF8sm1sBc/bZpbmdqf00iFAU= -----END CERTIFICATE-----Generated at Fri Mar 14 14:04:33 2025 by rpki-client