$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c235b0ca-8836-3166-aa4a-14f0e67858bb.roa File: c235b0ca-8836-3166-aa4a-14f0e67858bb.roa (raw, json) Hash identifier: zEJMeYXm6q2Z7sc+QuVA+4GjpOompgnCzV4hTagAADo= Subject key identifier: 2C:6D:E4:EB:4B:5B:C7:13:16:92:FC:77:CF:77:E3:F5:44:6B:88:B4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B75247FE82569974941A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c235b0ca-8836-3166-aa4a-14f0e67858bb.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 142.111.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:75:24:7f:e8:25:69:97:49:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=13b38384-cf54-42aa-a93f-4eaaa4d18a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:93:03:c5:8d:41:eb:62:45:4f:28:d9:29: 07:fa:28:39:29:f9:19:66:af:1a:46:b8:84:22:3b: a4:34:24:6e:ad:82:1d:85:9a:c7:1c:64:7b:53:59: 28:71:75:c4:37:ed:36:33:6f:6f:0d:22:19:2c:03: bc:64:7d:84:f0:d8:03:38:46:6d:b0:c8:d7:78:69: f3:f8:c5:44:46:74:7d:c0:ba:af:98:9e:a0:23:d5: a7:c3:69:12:7c:ab:78:8d:ee:f3:67:03:4f:3b:57: 19:41:2a:18:4a:db:22:0d:2a:e4:d9:25:62:8c:1d: 57:25:1c:2c:76:f4:e5:6b:19:9b:8c:54:39:e6:fa: e2:73:ea:0b:24:1b:78:96:d7:a1:f9:1d:8c:28:31: f8:dc:78:77:b1:06:6f:98:84:e0:90:39:6d:80:3e: e7:c7:ed:66:7d:e8:bc:00:1e:97:61:c5:b3:36:9e: 51:1e:1d:d2:39:94:71:9e:52:64:47:65:2e:10:c5: 29:92:11:f8:48:f4:5f:de:78:bd:b5:36:cd:13:9e: 53:7c:41:d2:10:af:27:d1:d9:da:ba:b7:8b:98:4c: 05:2a:27:57:f0:b4:bb:95:70:de:1e:17:1b:3c:8d: 08:77:06:65:4d:04:32:bd:27:19:3a:c4:1f:51:3e: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6D:E4:EB:4B:5B:C7:13:16:92:FC:77:CF:77:E3:F5:44:6B:88:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c235b0ca-8836-3166-aa4a-14f0e67858bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c5:8c:83:cc:68:12:9a:60:67:3b:b2:61:52:ff:6b:81:8f: 64:a3:62:9f:3c:16:9c:65:e5:89:27:0d:23:08:07:d1:86:f6: ee:01:e2:ff:11:c9:ba:3a:42:6f:c1:ff:0a:63:99:bc:f6:c4: 2e:be:30:dc:58:69:c9:9f:6a:d9:60:7a:b8:90:0a:58:d1:13: 07:06:78:32:a9:b1:12:97:6f:d4:35:d9:b3:4f:4d:67:02:c7: cf:be:7d:57:03:eb:60:ae:38:dc:c4:24:96:3f:76:ca:6e:29: 10:d3:8e:09:75:ec:43:b3:1e:4e:e9:25:53:b9:52:68:c1:af: 13:ef:65:49:25:23:2e:c0:2c:3b:80:77:c9:7b:a4:d5:c2:77: 6a:7f:2a:d6:8e:23:65:fb:08:32:9a:ea:7a:df:da:14:9c:43: 4c:4b:8a:82:41:6f:dd:12:12:d3:f7:a6:72:72:f8:0d:0e:8c: d3:36:11:6d:dd:95:5b:d0:d5:61:60:f9:48:87:a6:c8:83:5d: 66:c9:e6:30:7a:d7:36:9c:84:dd:f0:4a:e5:42:9d:cd:21:f6: 99:a6:75:a2:41:b5:93:6c:a1:de:a6:67:a6:ec:a9:8a:56:4f: 68:3d:ce:d7:e8:e5:3f:f7:1d:8d:19:ee:c6:da:36:26:d0:3e: 40:a3:21:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3Ukf+glaZdJQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MTNiMzgzODQtY2Y1NC00MmFhLWE5M2YtNGVhYWE0ZDE4YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylWTA8WNQetiRU8o2SkH+ig5KfkZZq8aRriE IjukNCRurYIdhZrHHGR7U1kocXXEN+02M29vDSIZLAO8ZH2E8NgDOEZtsMjXeGnz +MVERnR9wLqvmJ6gI9Wnw2kSfKt4je7zZwNPO1cZQSoYStsiDSrk2SVijB1XJRws dvTlaxmbjFQ55vric+oLJBt4lteh+R2MKDH43Hh3sQZvmITgkDltgD7nx+1mfei8 AB6XYcWzNp5RHh3SOZRxnlJkR2UuEMUpkhH4SPRf3ni9tTbNE55TfEHSEK8n0dna ureLmEwFKidX8LS7lXDeHhcbPI0IdwZlTQQyvScZOsQfUT6TowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxt5OtLW8cTFpL8d8934/VEa4i0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzIzNWIwY2EtODgzNi0z MTY2LWFhNGEtMTRmMGU2Nzg1OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/FjIPMaBKaYGc7smFS/2uBj2SjYp88Fpxl5YknDSMIB9GG9u4B4v8R ybo6Qm/B/wpjmbz2xC6+MNxYacmfatlgeriQCljREwcGeDKpsRKXb9Q12bNPTWcC x8++fVcD62CuONzEJJY/dspuKRDTjgl17EOzHk7pJVO5UmjBrxPvZUklIy7ALDuA d8l7pNXCd2p/KtaOI2X7CDKa6nrf2hScQ0xLioJBb90SEtP3pnJy+A0OjNM2EW3d lVvQ1WFg+UiHpsiDXWbJ5jB61zachN3wSuVCnc0h9pmmdaJBtZNsod6mZ6bsqYpW T2g9ztfo5T/3HY0Z7sbaNibQPkCjIUk= -----END CERTIFICATE-----Generated at Fri Apr 4 20:14:51 2025 by rpki-client