$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce1985f9-8ba7-3eca-8a65-5b309394ddef.roa File: ce1985f9-8ba7-3eca-8a65-5b309394ddef.roa (raw, json) Hash identifier: A1Az1mTWY6j3LmfN//lEjGDPYfVD2eb1tbpD5dws6zM= Subject key identifier: 0D:6A:D7:13:FD:71:71:E3:3C:69:28:D3:5F:72:AE:75:02:B0:89:0E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D6411CD7D52922C5E7DEA040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce1985f9-8ba7-3eca-8a65-5b309394ddef.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 142.111.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:1c:d7:d5:29:22:c5:e7:de:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=a69579a6-74d1-47da-8a11-0796417e09c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:44:82:9f:f1:aa:54:87:ff:12:3d:dc:68: 26:6b:db:29:ae:72:76:5e:e5:4c:ec:54:f6:26:a4: 0a:84:10:2e:4c:f3:e4:1f:bb:cf:30:5c:59:08:16: 1b:61:63:7c:c4:96:33:06:72:3e:39:18:b5:a5:52: 21:41:ca:47:e3:c0:9a:d0:8c:ed:9f:7d:89:87:96: c3:01:23:1b:8a:d9:64:38:dc:0f:a5:54:a1:f9:f6: bc:68:b8:3d:62:45:1b:fa:b0:3e:e0:85:24:82:19: 9a:7b:e7:58:e7:15:92:fd:cd:5a:5e:e0:ef:62:f5: 93:09:6c:82:d9:06:d5:9a:09:39:f5:d7:af:cc:6d: 41:37:e9:4a:32:09:5a:5b:a6:8a:e4:04:11:5a:04: 87:50:98:1f:ad:2a:e7:2b:d3:80:eb:67:60:54:b4: 58:56:f4:f2:28:82:81:13:16:65:3c:04:68:ca:d8: 43:be:d8:fb:57:6d:84:8d:f4:b1:74:86:5a:2a:1d: 82:3c:04:69:f1:10:90:35:ed:38:20:02:6b:33:f8: 29:96:ec:cd:19:c0:ec:68:bc:e7:d0:9e:bb:e1:e4: 73:4a:99:52:97:cd:42:62:51:e2:3e:a2:cc:93:d0: 3f:fb:03:ba:f0:eb:47:14:9e:81:4c:1f:0a:8f:2b: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6A:D7:13:FD:71:71:E3:3C:69:28:D3:5F:72:AE:75:02:B0:89:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce1985f9-8ba7-3eca-8a65-5b309394ddef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5a:f7:e5:8c:91:0d:ae:ef:81:96:23:23:fd:a7:34:13:a6: 54:a8:17:7f:6f:fc:c5:41:5c:f5:bb:41:4b:03:2d:1e:1e:97: 71:7b:84:d0:36:f2:64:24:94:a9:e9:67:ce:cf:e0:b9:c8:ca: 97:2a:6e:68:ef:7e:18:46:70:03:1a:84:af:34:a0:c3:0f:ab: 70:e9:3c:60:86:cb:50:2a:0d:55:84:22:b8:80:f4:87:23:6d: 62:c1:ec:44:e4:73:89:b0:69:9c:1d:50:88:ab:7e:bf:1b:e3: 2e:1a:5f:5c:ca:4b:3a:2b:8a:e9:e1:b6:fd:61:e8:a2:ef:bd: dc:85:ca:2c:cd:df:81:d2:e4:e5:c0:d4:60:c4:43:bd:0a:d9: 9f:aa:15:a8:26:97:ed:0a:97:83:1a:9c:0a:de:5e:e0:49:82: bd:21:97:f7:f9:95:a1:a3:80:60:37:bd:0e:14:75:49:2b:a8: 58:f2:f3:3a:44:62:ea:98:47:a8:9b:33:0a:78:5d:04:74:3a: 02:d9:17:c2:b1:3d:2c:7c:a6:09:8d:68:fd:ef:a7:8c:db:25: 85:be:db:6a:0d:0d:03:ee:e0:18:21:49:21:56:5f:96:72:ff: 95:bf:13:ad:b5:d0:17:5c:bf:76:58:ba:bf:46:44:5f:fe:22: 57:21:eb:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRzX1SkixefeoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTY5NTc5YTYtNzRkMS00N2RhLThhMTEtMDc5NjQxN2UwOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpEgp/xqlSH/xI93Ggma9sprnJ2XuVM7FT2 JqQKhBAuTPPkH7vPMFxZCBYbYWN8xJYzBnI+ORi1pVIhQcpH48Ca0Iztn32Jh5bD ASMbitlkONwPpVSh+fa8aLg9YkUb+rA+4IUkghmae+dY5xWS/c1aXuDvYvWTCWyC 2QbVmgk59devzG1BN+lKMglaW6aK5AQRWgSHUJgfrSrnK9OA62dgVLRYVvTyKIKB ExZlPARoythDvtj7V22EjfSxdIZaKh2CPARp8RCQNe04IAJrM/gpluzNGcDsaLzn 0J674eRzSplSl81CYlHiPqLMk9A/+wO68OtHFJ6BTB8KjyvhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1q1xP9cXHjPGko019yrnUCsIkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2UxOTg1ZjktOGJhNy0z ZWNhLThhNjUtNWIzMDkzOTRkZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRa9+WMkQ2u74GWIyP9pzQTplSoF39v/MVBXPW7QUsDLR4el3F7hNA2 8mQklKnpZ87P4LnIypcqbmjvfhhGcAMahK80oMMPq3DpPGCGy1AqDVWEIriA9Icj bWLB7ETkc4mwaZwdUIirfr8b4y4aX1zKSzoriunhtv1h6KLvvdyFyizN34HS5OXA 1GDEQ70K2Z+qFagml+0Kl4ManAreXuBJgr0hl/f5laGjgGA3vQ4UdUkrqFjy8zpE YuqYR6ibMwp4XQR0OgLZF8KxPSx8pgmNaP3vp4zbJYW+22oNDQPu4BghSSFWX5Zy /5W/E6210Bdcv3ZYur9GRF/+Ilch62Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:48 2025 by rpki-client