$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f52aabf6-4db4-3169-9459-4027671b508d.roa File: f52aabf6-4db4-3169-9459-4027671b508d.roa (raw, json) Hash identifier: 1kotquC9sn2jeJe5Ho9Li2MmoLUpnKrI6k2KtSdNaXA= Subject key identifier: AC:A9:C0:01:A2:0B:F0:CC:92:20:1D:91:92:8C:0F:5E:B9:E5:82:E5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B75EE2E4015365EC36940 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f52aabf6-4db4-3169-9459-4027671b508d.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 142.111.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:75:ee:2e:40:15:36:5e:c3:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=c5446552-69ac-4ffd-9e2d-0c74f711c615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:25:3b:b0:b0:10:14:e2:5e:db:17:54:cc: c9:12:9e:83:93:04:ca:ab:60:8a:57:69:b5:6b:43: 05:cf:83:86:33:32:3b:8b:78:b9:75:7c:5d:99:81: 4a:25:a4:1a:c7:95:d0:a9:e7:25:0d:14:a4:fc:1e: 5d:6c:52:2a:ee:fa:d6:6f:55:14:8f:e0:8b:a4:9c: 50:37:82:7a:18:2f:f4:c6:21:1c:fd:c8:d4:2a:0e: be:b1:4a:63:da:1c:0a:81:d1:52:9e:09:4a:8d:42: a0:21:8d:f1:8d:79:5b:da:a3:ed:c1:9b:fe:b8:df: a4:91:ff:b3:e9:5b:ff:4b:11:8f:c2:90:46:2e:ff: 3e:f8:8f:9d:24:57:4a:31:4a:00:9e:69:8e:bd:5f: b1:31:c4:8e:c5:16:42:3e:59:21:81:e2:f7:2d:71: a8:9d:b8:70:15:7d:6e:5a:2d:df:a9:8c:35:b0:52: 56:27:99:4c:49:b8:55:33:14:32:67:c5:06:fc:1a: 53:e4:9a:13:1f:eb:96:ee:a5:c3:4d:b7:8d:7a:aa: 6f:22:57:6a:7b:55:9c:86:5a:72:20:e2:28:10:8a: af:a7:80:43:86:d6:d1:66:16:8b:37:11:64:26:04: 51:77:95:95:e8:7f:1a:6f:d4:2c:80:c9:8c:e9:de: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:C0:01:A2:0B:F0:CC:92:20:1D:91:92:8C:0F:5E:B9:E5:82:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f52aabf6-4db4-3169-9459-4027671b508d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cb:61:f5:22:92:a3:7d:50:eb:45:aa:66:76:24:83:70:8a: bb:73:c6:f0:af:2f:ad:7c:56:29:c9:69:1c:70:d8:6b:36:05: 2b:2e:e6:9a:e0:5a:cc:bd:42:94:32:20:ac:de:03:29:ac:f2: 22:eb:1c:6b:6f:e9:87:41:fc:8f:d5:61:2d:e4:2a:32:91:8d: 64:d1:a0:ce:f7:76:b1:bd:0c:1a:11:5a:f2:18:1b:c6:f1:7f: 70:40:cd:8f:9e:8b:05:01:01:11:e1:bc:05:60:16:ce:94:59: 9a:b4:d7:de:a5:c4:06:24:21:c4:be:62:c7:52:ee:0d:7d:fa: b2:33:40:d1:c4:82:b8:24:e6:23:83:6c:b0:5b:51:83:d7:e3: 96:66:43:1f:cc:3d:56:28:98:0e:46:31:80:b3:d2:d1:7c:3a: df:ed:3c:d8:d4:3e:46:50:ac:0b:b7:ab:30:d6:af:f6:bc:33: 17:cf:40:c1:ac:30:42:a4:0c:b5:71:db:19:7f:a0:e2:3f:ba: 16:6a:98:c6:5c:4f:f9:7d:48:47:7f:b2:5e:0d:2a:fd:d6:79: ca:23:9f:07:3d:36:84:84:3e:15:c8:65:40:be:11:65:7a:f8: d2:f9:4e:ff:9c:f4:4c:70:09:a6:54:32:42:db:89:13:c7:02: 1e:31:9d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3XuLkAVNl7DaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YzU0NDY1NTItNjlhYy00ZmZkLTllMmQtMGM3NGY3MTFjNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BolO7CwEBTiXtsXVMzJEp6DkwTKq2CKV2m1 a0MFz4OGMzI7i3i5dXxdmYFKJaQax5XQqeclDRSk/B5dbFIq7vrWb1UUj+CLpJxQ N4J6GC/0xiEc/cjUKg6+sUpj2hwKgdFSnglKjUKgIY3xjXlb2qPtwZv+uN+kkf+z 6Vv/SxGPwpBGLv8++I+dJFdKMUoAnmmOvV+xMcSOxRZCPlkhgeL3LXGonbhwFX1u Wi3fqYw1sFJWJ5lMSbhVMxQyZ8UG/BpT5JoTH+uW7qXDTbeNeqpvIldqe1Wchlpy IOIoEIqvp4BDhtbRZhaLNxFkJgRRd5WV6H8ab9QsgMmM6d6oMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKypwAGiC/DMkiAdkZKMD1655YLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjUyYWFiZjYtNGRiNC0z MTY5LTk0NTktNDAyNzY3MWI1MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDLYfUikqN9UOtFqmZ2JINwirtzxvCvL618VinJaRxw2Gs2BSsu5prg Wsy9QpQyIKzeAyms8iLrHGtv6YdB/I/VYS3kKjKRjWTRoM73drG9DBoRWvIYG8bx f3BAzY+eiwUBARHhvAVgFs6UWZq0196lxAYkIcS+YsdS7g19+rIzQNHEgrgk5iOD bLBbUYPX45ZmQx/MPVYomA5GMYCz0tF8Ot/tPNjUPkZQrAu3qzDWr/a8MxfPQMGs MEKkDLVx2xl/oOI/uhZqmMZcT/l9SEd/sl4NKv3Wecojnwc9NoSEPhXIZUC+EWV6 +NL5Tv+c9ExwCaZUMkLbiRPHAh4xnfg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:29 2025 by rpki-client