$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/fa9d3924-067d-340a-8eca-545c13686f1b.roa File: fa9d3924-067d-340a-8eca-545c13686f1b.roa (raw, json) Hash identifier: Kgx2A9/PHMQHEPvhDI+h7poULk8wQZvH6/fvb+pQv9o= Subject key identifier: B8:61:BE:92:3C:B0:89:63:B2:49:BE:EF:A4:B4:BC:21:4A:B3:BC:B0 Certificate issuer: /CN=81b6f65d-ba30-4275-b918-46ded7381174 Certificate serial: 010D0C9F432858484C101B02EF8C207E04401BF4 Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/fa9d3924-067d-340a-8eca-545c13686f1b.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 399214 IP address blocks: 142.202.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:1b:02:ef:8c:20:7e:04:40:1b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=a93064fd-ca4a-429f-9b02-62b58aae23e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:5e:97:77:47:79:0e:0a:88:ef:16:20:52: 4b:5f:2a:8b:85:b0:82:82:23:3c:07:0d:2e:f5:8c: 6a:01:6b:f1:8a:c5:b0:25:ad:ac:d9:09:f8:c6:3d: 17:52:08:ba:74:10:49:2d:d5:40:29:63:67:70:83: c6:76:07:29:44:d3:56:d3:07:a1:59:7c:59:d8:5a: 07:8d:6a:a4:3b:be:03:d8:16:3c:1e:31:96:58:c9: 55:71:e3:8a:a9:17:93:28:b1:cf:35:1b:85:f1:7b: ea:dd:d3:99:ae:7b:4f:e8:20:72:02:55:69:a4:ac: c7:96:78:59:95:62:07:e3:31:89:fa:05:63:a3:3d: 06:ba:08:f5:70:77:c4:e5:46:50:db:68:58:6f:34: db:59:5e:7e:60:14:b7:0f:bc:bd:c4:97:00:e5:84: 9e:0d:13:3d:65:7d:73:29:cf:15:52:ed:07:af:89: ab:0a:ed:f9:f6:82:c8:48:83:02:6b:0b:3d:29:3f: e6:f6:54:f9:31:72:36:86:5e:32:6a:09:2a:25:50: 15:c8:2c:f2:5f:8f:00:b1:d9:ba:70:ad:3f:ed:5d: dc:d0:08:15:6a:89:99:a6:a1:04:77:d2:20:9d:67: c1:e1:03:3d:4c:15:f9:10:52:e4:f1:ce:21:89:c6: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:BE:92:3C:B0:89:63:B2:49:BE:EF:A4:B4:BC:21:4A:B3:BC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/fa9d3924-067d-340a-8eca-545c13686f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl X509v3 Authority Key Identifier: keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer sbgp-ipAddrBlock: critical IPv4: 142.202.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:50:2c:21:de:d3:23:df:7f:fb:a2:9f:76:99:7e:e5:5c:3d: 5b:5d:e3:f6:42:be:8e:d7:48:30:75:fd:fe:56:fe:c7:ad:16: cb:e0:65:0e:b1:e7:0c:45:68:2e:72:40:8f:7c:c4:27:26:24: 70:c0:06:2f:76:91:79:25:03:3b:a4:ca:e4:e1:2c:66:37:36: 4b:72:64:34:53:e0:07:12:d2:8d:e2:99:b0:1d:77:41:ec:b2: 7e:c5:21:b5:22:a4:0b:4d:74:76:64:e3:ea:13:38:b9:4b:e3: b4:a2:9f:5b:13:5c:fe:f2:b2:b0:e2:ed:25:36:57:31:59:b8: 83:3b:1b:c5:fb:11:6a:da:02:5b:bc:5f:7c:72:cb:c4:1d:9f: c8:5f:6b:31:ba:1f:cb:6c:32:1e:6d:28:f3:d8:98:21:37:66: 74:99:6f:f5:6c:33:d0:ad:39:6c:84:1f:fe:8f:1a:a2:d7:53: 14:26:c1:5d:22:f2:70:0e:13:d8:cc:5a:59:b4:45:48:8d:75: 9f:8e:6a:eb:c9:68:03:fb:fb:9a:90:65:fa:e3:f9:96:ae:91: 83:f0:93:79:77:f1:8a:3b:d2:ce:dc:5d:27:81:a6:1b:f2:04: 2d:e4:f9:1f:3f:41:d5:4a:f9:26:86:48:34:75:d3:e6:48:68: bb:bd:b7:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBsC74wgfgRAG/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFiNmY2NWQtYmEzMC00Mjc1LWI5MTgtNDZkZWQ3Mzgx MTc0MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk YTkzMDY0ZmQtY2E0YS00MjlmLTliMDItNjJiNThhYWUyM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rFel3dHeQ4KiO8WIFJLXyqLhbCCgiM8Bw0u 9YxqAWvxisWwJa2s2Qn4xj0XUgi6dBBJLdVAKWNncIPGdgcpRNNW0wehWXxZ2FoH jWqkO74D2BY8HjGWWMlVceOKqReTKLHPNRuF8Xvq3dOZrntP6CByAlVppKzHlnhZ lWIH4zGJ+gVjoz0Gugj1cHfE5UZQ22hYbzTbWV5+YBS3D7y9xJcA5YSeDRM9ZX1z Kc8VUu0Hr4mrCu359oLISIMCaws9KT/m9lT5MXI2hl4yagkqJVAVyCzyX48Asdm6 cK0/7V3c0AgVaomZpqEEd9IgnWfB4QM9TBX5EFLk8c4hicbNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhhvpI8sIljskm+76S0vCFKs7ywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MWI2 ZjY1ZC1iYTMwLTQyNzUtYjkxOC00NmRlZDczODExNzQvZmE5ZDM5MjQtMDY3ZC0z NDBhLThlY2EtNTQ1YzEzNjg2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODFiNmY2NWQtYmEzMC00Mjc1LWI5 MTgtNDZkZWQ3MzgxMTc0LzgxYjZmNjVkLWJhMzAtNDI3NS1iOTE4LTQ2ZGVkNzM4 MTE3NC5jcmwwHwYDVR0jBBgwFoAUCCWUNuOtAVxmfw8SEVoXSUezQU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MWI2ZjY1ZC1iYTMwLTQyNzUtYjkxOC00NmRl ZDczODExNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlQLCHe0yPff/uin3aZfuVcPVtd4/ZCvo7XSDB1/f5W/setFsvgZQ6x 5wxFaC5yQI98xCcmJHDABi92kXklAzukyuThLGY3NktyZDRT4AcS0o3imbAdd0Hs sn7FIbUipAtNdHZk4+oTOLlL47Sin1sTXP7ysrDi7SU2VzFZuIM7G8X7EWraAlu8 X3xyy8Qdn8hfazG6H8tsMh5tKPPYmCE3ZnSZb/VsM9CtOWyEH/6PGqLXUxQmwV0i 8nAOE9jMWlm0RUiNdZ+OauvJaAP7+5qQZfrj+ZaukYPwk3l38Yo70s7cXSeBphvy BC3k+R8/QdVK+SaGSDR10+ZIaLu9t78= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:56 2025 by rpki-client