$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d066f70b-d063-366c-b423-5d1a25aa11c6.roa File: d066f70b-d063-366c-b423-5d1a25aa11c6.roa (raw, json) Hash identifier: 2YRpEKa+xJHDWnBySdUFsHgoYNmE5OrQJRgbhoIgtRI= Subject key identifier: B5:BF:8A:DF:C3:B0:DC:F9:C8:CF:4F:CB:7F:51:AA:1F:21:AC:04:14 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B7595D4976FC220230800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d066f70b-d063-366c-b423-5d1a25aa11c6.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 142.111.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:75:95:d4:97:6f:c2:20:23:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8ccb6815-7655-4bac-8df1-27bf0d25e4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:79:70:a4:52:c3:4d:d8:7a:89:da:2d:b1: 14:8b:fa:20:fb:9e:2e:f9:6c:5f:2e:47:81:5c:d4: 5f:e6:2b:0b:46:a4:d5:d7:90:32:2b:88:4c:03:54: 7f:15:b0:37:6d:8e:a2:ef:ab:d3:7a:10:a8:6b:c5: 5d:4a:93:ac:47:62:7f:b9:f5:75:92:69:cc:01:da: 4d:9f:2e:d9:ce:85:6c:83:9b:c1:1d:e7:ba:80:a4: 08:c8:75:35:99:b8:e4:d6:d8:ce:1b:96:e7:ac:06: a4:50:1e:1d:04:f2:d4:04:0f:bf:1a:2f:ec:69:46: 61:c3:9d:d9:ab:45:af:1a:a8:ff:44:89:25:a1:0f: 25:f3:b8:ea:f5:7b:2b:f4:a8:42:94:5d:67:49:d2: 95:84:54:cb:01:ad:e7:1b:d9:36:b8:92:0c:36:31: be:08:cb:43:68:93:39:1b:21:a8:36:06:77:e3:48: f0:9a:3a:1c:67:50:15:b4:8e:04:23:05:62:98:d4: 17:75:f9:9c:cf:cf:71:1f:3a:f9:2d:56:b0:e4:2c: e7:4b:05:0b:cb:9a:2d:31:e0:52:9c:73:4e:c9:2b: bd:80:1c:da:a3:a9:7c:bd:d2:38:13:bf:fa:32:40: 7b:eb:aa:71:92:46:82:5a:91:d6:91:10:8e:01:1a: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BF:8A:DF:C3:B0:DC:F9:C8:CF:4F:CB:7F:51:AA:1F:21:AC:04:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d066f70b-d063-366c-b423-5d1a25aa11c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cc:87:ee:4a:10:0a:4b:de:58:40:d2:c4:f6:4e:ee:44:41: 54:fc:d1:1c:9a:be:bc:d1:44:06:99:a1:a9:80:2e:c1:44:c2: 1e:89:53:3d:0a:d8:cb:ed:bb:98:6e:5c:6d:c6:70:f8:16:92: d6:51:1f:5c:b3:f5:f2:3a:c0:53:04:dd:6e:1c:5b:ae:f6:4b: 92:26:dc:a3:43:d1:6b:bc:b6:cf:87:bb:40:30:60:cf:69:53: 0a:e6:68:89:25:1a:64:c5:7f:7c:08:44:67:f6:39:0b:6b:6f: 89:39:6a:ce:fd:76:e7:cb:ef:37:e7:69:b1:da:28:7c:5e:bc: 8d:e5:03:54:0b:f5:70:2c:0a:7a:82:44:1b:24:c5:29:59:d4: 5f:8d:09:6f:bf:67:63:f4:03:48:41:f7:c6:ad:45:d3:93:94: e3:7c:ea:41:4c:92:f6:a7:6e:13:fd:bb:4a:75:93:a0:01:d8: 2b:88:03:bf:8c:9a:cd:27:b9:3c:23:d6:84:b5:35:38:e9:09: 62:a5:4a:99:45:a3:e3:06:38:15:a8:56:bc:c8:24:4b:b4:90: 8a:55:e1:ba:37:70:49:ae:1e:91:0f:25:35:21:e7:df:a5:21: c1:e4:63:f1:6b:1c:cc:ee:3e:9d:fa:99:0a:f4:08:23:07:4e: bb:99:ca:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3WV1JdvwiAjCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGNjYjY4MTUtNzY1NS00YmFjLThkZjEtMjdiZjBkMjVlNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJt5cKRSw03YeonaLbEUi/og+54u+WxfLkeB XNRf5isLRqTV15AyK4hMA1R/FbA3bY6i76vTehCoa8VdSpOsR2J/ufV1kmnMAdpN ny7ZzoVsg5vBHee6gKQIyHU1mbjk1tjOG5bnrAakUB4dBPLUBA+/Gi/saUZhw53Z q0WvGqj/RIkloQ8l87jq9Xsr9KhClF1nSdKVhFTLAa3nG9k2uJIMNjG+CMtDaJM5 GyGoNgZ340jwmjocZ1AVtI4EIwVimNQXdfmcz89xHzr5LVaw5CznSwULy5otMeBS nHNOySu9gBzao6l8vdI4E7/6MkB766pxkkaCWpHWkRCOARrWEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW/it/DsNz5yM9Py39Rqh8hrAQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDA2NmY3MGItZDA2My0z NjZjLWI0MjMtNWQxYTI1YWExMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPMh+5KEApL3lhA0sT2Tu5EQVT80RyavrzRRAaZoamALsFEwh6JUz0K 2Mvtu5huXG3GcPgWktZRH1yz9fI6wFME3W4cW672S5Im3KND0Wu8ts+Hu0AwYM9p UwrmaIklGmTFf3wIRGf2OQtrb4k5as79dufL7zfnabHaKHxevI3lA1QL9XAsCnqC RBskxSlZ1F+NCW+/Z2P0A0hB98atRdOTlON86kFMkvanbhP9u0p1k6AB2CuIA7+M ms0nuTwj1oS1NTjpCWKlSplFo+MGOBWoVrzIJEu0kIpV4bo3cEmuHpEPJTUh59+l IcHkY/FrHMzuPp36mQr0CCMHTruZyqk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:41 2025 by rpki-client