$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aeb9fe34-49ab-3379-a31d-6ba6d167ef44.roa File: aeb9fe34-49ab-3379-a31d-6ba6d167ef44.roa (raw, json) Hash identifier: LIEYe+ZGDzpRwVmZGub/hxK7qam7nmibJFKDEvTjz6M= Subject key identifier: F6:61:60:60:57:E5:F2:8F:6E:E3:4B:96:50:C1:9F:11:20:0E:D0:32 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABBB9D1415FE07072750C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aeb9fe34-49ab-3379-a31d-6ba6d167ef44.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 62240 IP address blocks: 142.111.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bb:9d:14:15:fe:07:07:27:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=f41adcd4-0fe9-454d-b05e-9cd5ac8fa3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:db:9c:d3:aa:68:01:e5:7c:a7:58:66:64: 31:6f:24:53:3b:00:ad:5e:0d:15:af:51:a0:4c:9b: 18:a8:31:22:19:5a:1d:da:ec:9b:6c:77:cd:ad:17: 2b:fd:47:b6:cb:6a:5d:34:2a:92:ce:4c:78:ed:c0: 32:96:62:d6:94:5e:35:84:25:cb:a9:e1:cc:b7:57: 2e:ad:9d:21:db:4f:f1:dd:dd:2f:e2:2e:c5:24:73: 09:11:65:24:33:59:c3:f3:24:74:a3:48:b8:43:94: a7:7c:d6:6a:0f:61:41:1c:9a:a0:ea:06:a5:33:6d: 22:45:59:c3:12:df:74:86:a7:9a:8e:85:9b:5c:aa: d2:a5:80:4d:ee:bc:80:54:b4:0d:c6:71:ce:f5:d3: 6a:4c:c5:14:13:69:5f:2c:23:77:6c:fd:06:88:de: c6:a5:ab:9e:1f:6e:4d:3d:d7:37:72:8f:ab:b4:9a: 5b:b8:da:cc:a9:7e:ee:bc:a7:a3:f3:fe:52:c7:fd: 47:b8:cc:10:a1:50:56:8b:c6:a8:e9:9a:8c:1f:5f: 44:17:15:7a:d2:f2:f9:96:51:0d:e7:61:1b:ce:72: ab:14:78:27:d3:60:02:7e:93:51:e3:3d:60:4c:b9: d6:65:0e:e8:1c:8f:d9:15:c8:09:71:8b:f6:0a:cf: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:61:60:60:57:E5:F2:8F:6E:E3:4B:96:50:C1:9F:11:20:0E:D0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aeb9fe34-49ab-3379-a31d-6ba6d167ef44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b5:d5:61:97:81:22:97:77:b9:48:82:02:12:90:8f:63:ea: 24:4f:c5:9a:11:d2:14:7d:11:ed:2a:25:26:eb:fd:07:96:c7: 92:d0:1a:6e:2e:d3:ef:ce:59:42:d1:e8:a0:ca:5a:36:bd:d9: bf:a2:21:98:5c:59:73:09:2f:9c:3d:42:3b:a9:be:f8:4a:51: b7:41:82:43:f1:1a:dc:7e:5b:a4:e1:bb:9e:cd:9c:b0:9b:42: 5f:fd:63:23:8c:b3:67:92:a7:d5:41:c1:36:88:9b:81:3a:e0: cd:4f:76:ce:b2:ca:74:1b:40:bb:97:bb:e6:4c:4a:ae:0c:e8: 74:f2:91:4f:5e:ac:17:d2:66:c8:9a:b9:23:02:c1:35:75:c6: 33:53:a2:19:08:9f:51:6c:b0:f4:a0:ec:f1:50:9a:88:b3:05: 6a:3e:48:74:8a:57:19:0f:83:f7:f9:b4:5f:f9:16:f9:75:93: 19:87:c1:30:88:34:46:06:fa:a3:6f:4c:32:60:cf:86:bb:cf: fb:e7:db:e9:5a:10:9a:2f:c2:a6:74:bf:5f:06:55:1e:18:b9: f3:44:19:47:05:c7:c4:15:54:41:22:d0:19:e3:e7:32:2e:32: 49:aa:71:1f:82:ee:c2:4c:d7:1b:5f:1f:c2:ae:8b:16:3d:7d: fb:19:6c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7udFBX+BwcnUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjQxYWRjZDQtMGZlOS00NTRkLWIwNWUtOWNkNWFjOGZhM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipzbnNOqaAHlfKdYZmQxbyRTOwCtXg0Vr1Gg TJsYqDEiGVod2uybbHfNrRcr/Ue2y2pdNCqSzkx47cAylmLWlF41hCXLqeHMt1cu rZ0h20/x3d0v4i7FJHMJEWUkM1nD8yR0o0i4Q5SnfNZqD2FBHJqg6galM20iRVnD Et90hqeajoWbXKrSpYBN7ryAVLQNxnHO9dNqTMUUE2lfLCN3bP0GiN7GpaueH25N Pdc3co+rtJpbuNrMqX7uvKej8/5Sx/1HuMwQoVBWi8ao6ZqMH19EFxV60vL5llEN 52EbznKrFHgn02ACfpNR4z1gTLnWZQ7oHI/ZFcgJcYv2Cs/nqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZhYGBX5fKPbuNLllDBnxEgDtAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWViOWZlMzQtNDlhYi0z Mzc5LWEzMWQtNmJhNmQxNjdlZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD611WGXgSKXd7lIggISkI9j6iRPxZoR0hR9Ee0qJSbr/QeWx5LQGm4u 0+/OWULR6KDKWja92b+iIZhcWXMJL5w9QjupvvhKUbdBgkPxGtx+W6Thu57NnLCb Ql/9YyOMs2eSp9VBwTaIm4E64M1Pds6yynQbQLuXu+ZMSq4M6HTykU9erBfSZsia uSMCwTV1xjNTohkIn1FssPSg7PFQmoizBWo+SHSKVxkPg/f5tF/5Fvl1kxmHwTCI NEYG+qNvTDJgz4a7z/vn2+laEJovwqZ0v18GVR4YufNEGUcFx8QVVEEi0Bnj5zIu MkmqcR+C7sJM1xtfH8KuixY9ffsZbAA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:23 2025 by rpki-client