$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa File: bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa (raw, json) Hash identifier: ON/ZySKHLY2xlBTYmrDPlLdA2nhmvgVML94VN8Kr9Is= Subject key identifier: 9F:E6:B5:8F:F2:2D:C6:42:1B:F8:9A:D4:5B:9F:9C:9B:FE:94:60:5B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D6411B8B8A999F5BE904C300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 142.111.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:1b:8b:8a:99:9f:5b:e9:04:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=ea7056f6-f5aa-4222-927d-b1da4ac69eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:62:a7:6f:fe:1b:4c:d9:cd:32:d7:2e:1c: 39:e4:f0:06:b9:13:04:7c:44:a1:b4:be:75:4c:bb: d7:0c:2c:f7:88:de:c2:b9:10:df:80:62:0d:36:ff: 73:06:5f:d4:1d:8d:8c:bb:53:ae:9e:a4:b8:99:05: 3d:47:dd:33:27:00:07:5b:37:a5:2d:2b:e2:2b:43: a5:07:4f:32:e5:ec:3c:13:f5:1a:d3:93:65:d1:42: ea:ef:69:9e:87:60:7a:e3:0f:c3:4e:0c:b4:1c:26: 62:c5:58:ba:e8:94:13:cd:be:f0:c0:b2:25:bf:5f: 42:3b:e1:fa:9a:88:96:9a:2e:79:47:89:e9:0b:ab: 4e:ec:27:7d:af:b7:0c:6a:0d:a6:b0:3b:13:e7:6e: bc:f9:82:85:80:e9:f7:6d:7a:ae:4d:94:b0:3d:9d: bf:67:74:6e:07:79:e4:61:c2:15:b6:1d:9f:c2:6c: 43:57:e4:74:f7:0e:7c:ed:76:ae:af:af:76:5e:53: 51:22:e4:c7:d8:ce:11:48:8c:ba:6d:0c:38:63:12: d0:a6:6a:77:aa:2d:d3:67:8e:f7:3e:1b:4d:8b:d0: 49:28:52:0f:2b:f8:70:95:d6:b2:86:30:6d:03:d4: 28:bf:d2:93:11:a8:7e:9b:67:00:14:5e:36:05:3f: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:B5:8F:F2:2D:C6:42:1B:F8:9A:D4:5B:9F:9C:9B:FE:94:60:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf2628f9-94e9-3d95-86e3-4ba928fa6542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:70:21:c1:cf:c4:43:0b:54:e0:9d:f2:ff:19:91:37:ec:95: 37:87:91:cf:cb:23:52:85:c6:45:c9:9a:3e:54:41:f9:75:89: 5d:b2:58:7a:e7:8a:92:8b:d1:2e:d7:5f:e4:61:a6:e6:bf:f0: 2d:8d:d2:11:0f:91:6b:c9:69:14:4d:6e:fc:c3:8a:54:af:84: 24:6a:2f:60:41:06:06:7d:b5:b5:f0:43:9f:75:06:84:85:7a: 52:41:61:6e:1b:0a:51:d0:b5:f0:e8:9c:a4:33:15:17:b4:7f: 7f:21:ba:c1:3f:61:52:87:cc:9c:20:38:45:6b:68:33:15:93: 0b:27:46:dc:5c:16:39:73:a2:50:34:d8:ae:4e:8f:02:a9:a3: 71:54:90:ae:f2:11:fc:b2:ef:2f:ce:7e:fb:95:d5:a2:06:df: be:7a:2f:34:14:d1:f0:7b:b8:25:8c:e4:09:41:d4:1d:ee:00: 40:cd:73:c8:75:a6:ef:71:93:27:10:d3:8a:81:c8:fe:d3:4b: 96:6a:61:53:3f:36:4f:37:cf:74:4c:66:a0:42:14:c8:7a:72: 8f:ab:a1:ac:81:f9:26:4c:b2:0f:33:ea:02:96:c2:00:5c:43: fd:dc:a6:eb:00:51:b3:aa:b1:25:a0:5c:8c:b5:75:45:ed:a9: 53:4a:9a:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRuLipmfW+kEwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWE3MDU2ZjYtZjVhYS00MjIyLTkyN2QtYjFkYTRhYzY5ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM9ip2/+G0zZzTLXLhw55PAGuRMEfEShtL51 TLvXDCz3iN7CuRDfgGINNv9zBl/UHY2Mu1OunqS4mQU9R90zJwAHWzelLSviK0Ol B08y5ew8E/Ua05Nl0ULq72meh2B64w/DTgy0HCZixVi66JQTzb7wwLIlv19CO+H6 moiWmi55R4npC6tO7Cd9r7cMag2msDsT5268+YKFgOn3bXquTZSwPZ2/Z3RuB3nk YcIVth2fwmxDV+R09w587Xaur692XlNRIuTH2M4RSIy6bQw4YxLQpmp3qi3TZ473 PhtNi9BJKFIPK/hwldayhjBtA9Qov9KTEah+m2cAFF42BT+XVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/mtY/yLcZCG/ia1FufnJv+lGBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmYyNjI4ZjktOTRlOS0z ZDk1LTg2ZTMtNGJhOTI4ZmE2NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9wIcHPxEMLVOCd8v8ZkTfslTeHkc/LI1KFxkXJmj5UQfl1iV2yWHrn ipKL0S7XX+Rhpua/8C2N0hEPkWvJaRRNbvzDilSvhCRqL2BBBgZ9tbXwQ591BoSF elJBYW4bClHQtfDonKQzFRe0f38husE/YVKHzJwgOEVraDMVkwsnRtxcFjlzolA0 2K5OjwKpo3FUkK7yEfyy7y/OfvuV1aIG3756LzQU0fB7uCWM5AlB1B3uAEDNc8h1 pu9xkycQ04qByP7TS5ZqYVM/Nk83z3RMZqBCFMh6co+roayB+SZMsg8z6gKWwgBc Q/3cpusAUbOqsSWgXIy1dUXtqVNKmgg= -----END CERTIFICATE-----Generated at Sat Apr 5 00:08:57 2025 by rpki-client