$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7e2deff-a92c-3bef-8292-87271ddf3e0a.roa File: f7e2deff-a92c-3bef-8292-87271ddf3e0a.roa (raw, json) Hash identifier: ilTyBgG8ItRx2gALKpEoW7OsOOgsOL/YOewWKhoUpaE= Subject key identifier: 0A:A0:3A:15:86:F9:8A:70:2F:4D:42:D2:99:E8:16:A8:0C:F2:01:E2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABBC75649EF3A5C04AD800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7e2deff-a92c-3bef-8292-87271ddf3e0a.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 142.111.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bc:75:64:9e:f3:a5:c0:4a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=dc71c35d-b8e7-4882-a413-b98563c020e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:0c:20:4e:c4:ea:b4:82:d2:c2:ec:0b:8a: 0d:a2:b4:d6:82:10:9f:10:c6:16:41:ee:02:66:8b: de:83:71:5c:6f:06:05:a9:af:46:cf:3d:17:9e:3c: 2f:53:ce:58:6c:7f:58:82:32:74:fd:1b:6a:1e:9a: 2b:16:9c:b8:ca:33:de:db:95:ad:1e:82:34:24:49: 31:3c:61:27:0f:af:d9:83:3c:8a:18:ba:28:d7:45: 65:64:36:c0:0e:49:f4:fc:36:97:df:24:ba:80:91: 5f:58:a6:58:fc:42:73:36:a5:a9:a4:62:24:1c:bf: bf:7b:31:d5:70:a6:44:c2:67:7c:fc:05:f7:d6:d8: 3d:a3:40:c5:7c:36:da:be:6d:44:68:6f:0e:ee:d8: 8e:02:35:44:21:a0:4b:52:99:29:13:54:56:46:dc: 91:15:a8:52:43:f8:0b:d2:6e:34:e4:29:1c:78:bc: 8a:8e:98:8f:2e:d4:05:b1:92:50:f3:2e:fc:91:e8: 9f:23:6e:f6:df:1b:94:f5:c9:0f:94:2b:e2:f8:1c: c1:f6:8f:09:0c:e7:1d:17:f4:80:95:f9:d7:88:3f: 33:17:50:b8:09:47:a9:78:12:96:73:77:21:ae:07: 3b:76:75:1f:37:62:2e:8a:16:1c:1b:93:3d:16:24: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:3A:15:86:F9:8A:70:2F:4D:42:D2:99:E8:16:A8:0C:F2:01:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7e2deff-a92c-3bef-8292-87271ddf3e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:05:51:47:0d:c8:11:af:66:67:40:5b:a0:ba:dd:65:15:b0: ec:b7:6a:2a:54:d0:aa:c8:c6:12:e8:09:18:49:39:f3:03:ab: 04:85:22:69:97:dc:66:5d:a4:0a:e1:8a:bd:fa:4f:38:09:60: e9:a0:78:70:20:6d:08:35:dd:df:ae:7c:2b:c7:ae:e8:ff:e5: 99:07:99:13:31:ed:06:1d:37:c2:e5:31:c5:dd:02:d4:28:c5: 84:de:fa:81:1e:86:e9:00:f8:aa:82:b7:74:f5:ec:05:de:3c: d7:a5:45:d8:e0:57:1c:5a:4a:70:f8:8c:f8:c9:c6:12:a7:2c: eb:cc:2f:3d:3a:c1:ad:20:31:a9:0c:c1:1f:22:d9:61:91:6f: 3e:aa:ea:52:40:a8:da:8f:db:ed:08:e8:b3:5a:4b:94:43:c4: df:35:7f:59:e8:4e:ba:fc:44:55:6f:cb:1a:70:ee:6f:a8:56: 35:e2:0c:a0:45:d1:eb:22:d1:9a:b8:b4:34:3b:0f:a7:79:09: f3:02:17:b2:46:d2:b7:83:36:fb:13:c7:96:70:5f:a6:4b:5a: d4:dc:89:f3:cb:43:75:bd:cb:e4:1e:e4:23:d6:45:15:9f:77: e8:04:9b:34:8e:2a:a4:be:f6:bb:28:cb:5b:fd:9c:90:0d:62: f0:5b:e8:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7x1ZJ7zpcBK2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGM3MWMzNWQtYjhlNy00ODgyLWE0MTMtYjk4NTYzYzAyMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDEMIE7E6rSC0sLsC4oNorTWghCfEMYWQe4C Zoveg3FcbwYFqa9Gzz0XnjwvU85YbH9YgjJ0/RtqHporFpy4yjPe25WtHoI0JEkx PGEnD6/ZgzyKGLoo10VlZDbADkn0/DaX3yS6gJFfWKZY/EJzNqWppGIkHL+/ezHV cKZEwmd8/AX31tg9o0DFfDbavm1EaG8O7tiOAjVEIaBLUpkpE1RWRtyRFahSQ/gL 0m405CkceLyKjpiPLtQFsZJQ8y78keifI2723xuU9ckPlCvi+BzB9o8JDOcdF/SA lfnXiD8zF1C4CUepeBKWc3chrgc7dnUfN2IuihYcG5M9FiR4bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqgOhWG+YpwL01C0pnoFqgM8gHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjdlMmRlZmYtYTkyYy0z YmVmLTgyOTItODcyNzFkZGYzZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUFUUcNyBGvZmdAW6C63WUVsOy3aipU0KrIxhLoCRhJOfMDqwSFImmX 3GZdpArhir36TzgJYOmgeHAgbQg13d+ufCvHruj/5ZkHmRMx7QYdN8LlMcXdAtQo xYTe+oEehukA+KqCt3T17AXePNelRdjgVxxaSnD4jPjJxhKnLOvMLz06wa0gMakM wR8i2WGRbz6q6lJAqNqP2+0I6LNaS5RDxN81f1noTrr8RFVvyxpw7m+oVjXiDKBF 0esi0Zq4tDQ7D6d5CfMCF7JG0reDNvsTx5ZwX6ZLWtTcifPLQ3W9y+Qe5CPWRRWf d+gEmzSOKqS+9rsoy1v9nJANYvBb6DQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:00 2025 by rpki-client