$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8561ed7-4672-37df-9c13-fa9db464b29a.roa File: b8561ed7-4672-37df-9c13-fa9db464b29a.roa (raw, json) Hash identifier: S6229V4CQXgGXzCytUssi3YLprT+htZAixB9rmFtpag= Subject key identifier: 06:41:AE:C2:8D:DC:3E:48:37:BE:EC:3D:3C:9A:54:FF:76:54:A2:B8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B75E1BC0ADB6D6F329000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8561ed7-4672-37df-9c13-fa9db464b29a.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 142.111.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:75:e1:bc:0a:db:6d:6f:32:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=f29cfd41-06ca-45ce-ad2d-72bd0d1e1ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:21:7b:af:f6:e4:be:ef:47:11:03:12:1c: e9:4a:12:44:18:ae:c8:7e:c1:16:e8:99:c4:d3:cb: b6:e7:6e:d0:03:60:8a:6e:a7:1d:b3:39:c8:25:8d: 5f:11:0a:98:af:28:b7:65:67:52:ef:08:37:25:a0: 3d:ad:ab:13:dd:7b:d6:b5:5a:74:6d:9d:3f:61:7d: 98:46:32:38:a5:5a:2d:13:46:32:eb:fe:be:28:e7: 29:01:a5:aa:0c:73:b0:17:14:77:02:6c:ad:0d:ec: a4:82:09:a6:02:f4:48:6b:d5:48:b7:80:f9:2d:1a: d8:3c:55:43:72:16:05:a9:b5:21:e7:5e:84:2f:39: 68:47:3d:82:cf:97:cd:03:b4:9a:1a:f3:82:db:a2: ff:5e:f9:c3:32:39:af:eb:d3:0f:3f:41:18:05:c9: 4f:4c:97:35:55:80:af:53:80:e1:bc:51:0f:27:82: c9:ea:2d:b6:7b:29:b7:20:d2:a7:6c:04:65:86:84: 62:f1:ae:fb:96:01:54:1c:2e:dc:ef:a6:73:ec:57: 81:a9:b9:cb:e9:04:ee:9e:64:13:f0:3c:fd:a5:a7: a8:c2:6a:47:10:13:d3:04:82:c4:9c:97:96:9c:83: 6c:6b:fd:06:6e:04:55:94:52:dd:15:c7:a2:c2:f2: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:41:AE:C2:8D:DC:3E:48:37:BE:EC:3D:3C:9A:54:FF:76:54:A2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8561ed7-4672-37df-9c13-fa9db464b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:07:73:fe:e8:4d:66:df:b2:ec:94:2e:f9:3c:49:95:00:50: 29:86:a7:81:e6:f8:6a:ef:f5:a9:60:cf:33:1d:f2:ae:4b:82: e6:e9:a2:4c:31:4d:f4:d8:83:49:ac:fd:b0:a6:a9:64:35:89: b2:9f:51:99:1e:f6:db:a0:7b:5e:c6:9c:2b:7b:16:ec:e8:72: 98:5c:20:01:f7:f1:dc:d1:bb:72:cb:45:f6:2c:99:30:81:aa: b7:66:3a:a8:0d:aa:3f:af:03:53:c6:af:53:6a:e4:1d:cf:74: 74:ef:f0:89:c2:e3:c9:24:8a:37:7e:88:d5:78:e5:28:d3:01: 87:c8:ca:74:97:4b:aa:c3:f7:60:59:dc:ff:28:6c:10:a5:7a: ed:3f:50:49:87:f5:3f:40:d4:41:01:e6:14:c5:71:02:f1:c6: 7a:de:70:3e:07:bc:ef:90:6f:81:56:4d:9a:93:50:b8:da:72: bd:80:f8:cc:6c:52:68:ad:bd:4a:89:a4:3f:61:8e:78:b7:f0: 58:06:d3:69:fe:59:a5:e3:4d:8d:5e:4c:67:d8:4f:ca:b7:55: f7:5c:ca:22:51:a8:45:f6:16:93:58:c0:51:9b:e6:f8:32:4a: b2:43:c2:dc:5b:8e:91:3a:ea:30:57:74:e3:d1:bc:b4:d4:6f: 96:61:17:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3XhvArbbW8ykAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZjI5Y2ZkNDEtMDZjYS00NWNlLWFkMmQtNzJiZDBkMWUxYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4he6/25L7vRxEDEhzpShJEGK7IfsEW6JnE 08u2527QA2CKbqcdsznIJY1fEQqYryi3ZWdS7wg3JaA9rasT3XvWtVp0bZ0/YX2Y RjI4pVotE0Yy6/6+KOcpAaWqDHOwFxR3AmytDeykggmmAvRIa9VIt4D5LRrYPFVD chYFqbUh516ELzloRz2Cz5fNA7SaGvOC26L/XvnDMjmv69MPP0EYBclPTJc1VYCv U4DhvFEPJ4LJ6i22eym3INKnbARlhoRi8a77lgFUHC7c76Zz7FeBqbnL6QTunmQT 8Dz9paeowmpHEBPTBILEnJeWnINsa/0GbgRVlFLdFceiwvK1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZBrsKN3D5IN77sPTyaVP92VKK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjg1NjFlZDctNDY3Mi0z N2RmLTljMTMtZmE5ZGI0NjRiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkHc/7oTWbfsuyULvk8SZUAUCmGp4Hm+Grv9algzzMd8q5Lgubpokwx TfTYg0ms/bCmqWQ1ibKfUZke9tuge17GnCt7FuzocphcIAH38dzRu3LLRfYsmTCB qrdmOqgNqj+vA1PGr1Nq5B3PdHTv8InC48kkijd+iNV45SjTAYfIynSXS6rD92BZ 3P8obBCleu0/UEmH9T9A1EEB5hTFcQLxxnrecD4HvO+Qb4FWTZqTULjacr2A+Mxs UmitvUqJpD9hjni38FgG02n+WaXjTY1eTGfYT8q3VfdcyiJRqEX2FpNYwFGb5vgy SrJDwtxbjpE66jBXdOPRvLTUb5ZhF6M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:36 2025 by rpki-client