$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa File: e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa (raw, json) Hash identifier: TlPeIsWSxgm0KjP3jdCUvuBdOuo2NBoUuIHXjmQxikU= Subject key identifier: 72:4E:66:A7:C1:F2:2D:FC:50:96:B8:C4:72:9C:03:F7:0C:2B:3A:95 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B756362A71110015781A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 142.111.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:75:63:62:a7:11:10:01:57:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=16cff9a0-67c5-4126-93c8-ddb1cd5bd64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:61:b7:30:8a:45:ae:46:c6:7e:7c:ba:a6: 16:e0:17:f6:ea:29:a3:b6:df:2e:a7:82:80:05:b8: da:89:b9:34:87:90:43:50:31:85:ab:ea:47:62:34: 98:ec:d4:8f:b9:f9:a2:f8:b7:60:7e:d4:d7:e8:46: 53:d1:13:58:63:5e:78:a3:3d:1f:dd:1b:15:80:b6: a4:6e:f6:48:32:ac:9e:f2:34:65:c7:d8:d2:b3:db: 4a:55:e7:10:4c:2f:04:51:ac:40:83:d8:15:f9:55: a8:a3:aa:ef:27:cc:fb:8e:08:78:26:da:a3:bf:0f: 60:42:21:95:ff:c5:c5:47:5c:fc:3e:f3:d3:c8:63: 84:b7:76:8b:12:f7:a2:c4:b4:e6:1b:be:fa:24:eb: 91:d4:27:93:7a:af:7e:65:27:de:61:9e:86:84:4f: af:b4:c6:dc:3a:e9:b2:a8:3b:84:48:dd:f1:47:27: 30:02:6e:96:b5:25:9b:8c:fa:22:b0:b2:11:f8:f4: c4:cf:1a:99:ab:2d:2d:81:a1:60:32:f1:24:27:b8: d5:9f:38:e7:31:c2:41:8e:92:8b:b0:52:9e:b3:59: d2:18:bf:c9:73:00:7a:78:77:9c:4e:f0:b2:99:29: cd:b8:0f:72:40:8b:ff:fa:d9:50:d6:26:9d:fe:3f: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4E:66:A7:C1:F2:2D:FC:50:96:B8:C4:72:9C:03:F7:0C:2B:3A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b1:bc:fc:80:99:37:8f:38:b4:dc:c6:61:88:5c:2f:cb:81: e6:82:a2:b9:a0:4c:85:bb:51:66:5a:b9:ca:ee:98:d6:63:b6: ac:b5:ae:86:09:3f:b4:36:1a:a0:da:c5:2b:22:80:7e:d5:57: f7:2b:c9:57:cd:f0:b2:79:08:49:93:38:f6:15:63:e2:fd:6d: 64:87:9b:2b:aa:34:6e:34:ba:1a:fd:3f:a8:e1:2e:a4:fc:78: f8:6a:11:e0:8b:aa:bb:7c:5c:d4:a0:e8:bc:ad:5e:3c:5b:1e: a8:cd:8a:fe:91:27:ac:e4:b9:d6:eb:4c:ae:e8:ca:a6:c2:2e: b9:cb:f0:64:cc:86:ac:80:f9:6a:1e:42:e1:4f:69:d2:ce:c1: fc:38:32:43:1a:03:f6:52:28:de:e4:a0:52:25:fd:59:a1:88: 37:d3:13:a3:a1:d3:78:45:50:35:f4:94:c3:02:16:27:62:bf: 37:3a:14:e2:46:1a:70:2c:9c:61:81:06:f0:b2:e4:b7:f4:58: 9e:82:7c:02:5c:98:b9:cf:31:6c:6a:97:3f:98:5b:f4:19:2a: ae:27:24:85:ae:f0:59:e0:ae:36:04:eb:29:1c:5f:97:4d:cb: 9a:dc:a7:d6:bc:5a:7b:40:75:95:fd:b1:14:66:cc:d1:3e:9a: a7:74:ca:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3VjYqcREAFXgaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MTZjZmY5YTAtNjdjNS00MTI2LTkzYzgtZGRiMWNkNWJkNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kdhtzCKRa5Gxn58uqYW4Bf26imjtt8up4KA Bbjaibk0h5BDUDGFq+pHYjSY7NSPufmi+LdgftTX6EZT0RNYY154oz0f3RsVgLak bvZIMqye8jRlx9jSs9tKVecQTC8EUaxAg9gV+VWoo6rvJ8z7jgh4Jtqjvw9gQiGV /8XFR1z8PvPTyGOEt3aLEveixLTmG776JOuR1CeTeq9+ZSfeYZ6GhE+vtMbcOumy qDuESN3xRycwAm6WtSWbjPoisLIR+PTEzxqZqy0tgaFgMvEkJ7jVnzjnMcJBjpKL sFKes1nSGL/JcwB6eHecTvCymSnNuA9yQIv/+tlQ1iad/j827wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJOZqfB8i38UJa4xHKcA/cMKzqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTM1MDNmMmUtNjM1NC0z MWIwLWJjM2EtOTM2NWE5ZmQ0ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGxvPyAmTePOLTcxmGIXC/LgeaCormgTIW7UWZaucrumNZjtqy1roYJ P7Q2GqDaxSsigH7VV/cryVfN8LJ5CEmTOPYVY+L9bWSHmyuqNG40uhr9P6jhLqT8 ePhqEeCLqrt8XNSg6LytXjxbHqjNiv6RJ6zkudbrTK7oyqbCLrnL8GTMhqyA+Woe QuFPadLOwfw4MkMaA/ZSKN7koFIl/VmhiDfTE6Oh03hFUDX0lMMCFidivzc6FOJG GnAsnGGBBvCy5Lf0WJ6CfAJcmLnPMWxqlz+YW/QZKq4nJIWu8FngrjYE6ykcX5dN y5rcp9a8WntAdZX9sRRmzNE+mqd0yms= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:09 2025 by rpki-client