$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f9f4e61-f7ca-3eed-9891-551356088f2b.roa File: 0f9f4e61-f7ca-3eed-9891-551356088f2b.roa (raw, json) Hash identifier: jLfIk4agm+OMo6TIPAyD6kmQb02MNgoNKtnhDWnP/48= Subject key identifier: 9C:8F:BB:21:DD:DD:ED:9D:9F:BF:5C:40:BE:99:60:D0:F0:AE:B8:1E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E649EE461DF2123FB434A90 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f9f4e61-f7ca-3eed-9891-551356088f2b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 142.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9e:e4:61:df:21:23:fb:43:4a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=136dfbbd-9243-4a53-a75b-a6f313fc4bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:42:ce:80:26:89:70:a7:a3:3f:f5:68:2d: d1:d6:05:b7:b3:4d:8c:03:03:21:95:d3:e4:7d:9f: c8:34:73:69:f7:00:6b:e7:db:be:54:75:b3:f4:7c: 68:b2:ac:da:0d:94:b8:e1:8f:d4:b0:08:df:b9:eb: aa:ac:6b:c3:bc:37:c2:c7:07:16:60:6c:3c:6b:9a: 0f:73:c5:cc:4d:54:e3:58:17:3d:07:c8:fd:e2:0c: 38:ef:2f:f6:f3:c4:38:48:38:43:db:76:93:64:cf: 89:e3:94:51:d7:52:c0:39:49:71:dc:3a:c4:20:57: 94:f5:2b:f8:4b:d0:27:bc:c5:47:01:b7:57:1f:e2: ab:3a:32:25:31:8c:dd:de:f2:b6:0b:fc:44:66:81: 88:4c:51:5e:71:5b:da:49:26:df:bc:dd:9a:5a:15: 74:cd:80:cf:8b:0c:ae:9c:ca:ba:99:26:57:79:2e: 85:01:f5:f1:b5:05:a2:b8:a6:e7:a8:e9:56:f8:b9: 50:ca:d9:80:8c:be:00:38:77:e1:67:26:1f:fe:47: ae:92:e2:c6:05:f6:21:72:a9:dd:12:9e:d2:36:09: 69:75:f8:b3:10:84:1f:9b:1f:75:05:4a:93:50:08: 8d:7d:e8:ff:6b:2f:b8:a3:f7:8b:e0:f7:e2:f9:61: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8F:BB:21:DD:DD:ED:9D:9F:BF:5C:40:BE:99:60:D0:F0:AE:B8:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f9f4e61-f7ca-3eed-9891-551356088f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:bc:79:a4:0d:5a:b1:f8:a1:e2:54:1a:9e:3d:fb:81:a7:22: ff:c4:bc:cc:7b:5d:12:94:c7:e2:08:b2:88:7a:fe:91:d8:9d: eb:45:ff:07:0f:fd:e3:ed:bb:6a:3a:6c:35:bb:bf:11:30:ea: a3:37:15:35:c1:c3:0c:bf:00:be:9d:95:37:92:26:50:1a:53: 19:7c:4f:66:ea:68:a5:7a:f3:f3:30:8b:98:76:75:a4:42:78: 89:54:b5:c9:f4:91:e9:72:d5:a7:09:b6:03:16:d1:cb:28:82: 1c:c0:a4:85:80:5f:f5:4d:cf:95:41:64:aa:e7:9e:d6:df:3a: 09:ea:0a:30:c5:a9:3c:ad:1f:b6:5e:4a:19:87:29:66:62:0c: 74:94:ef:17:55:bc:ca:21:fb:07:36:b4:f6:2b:60:43:38:c1: 26:7b:ae:53:08:58:02:7c:09:10:03:5f:0d:a3:18:35:d0:85: 43:ef:cc:23:e3:2c:0b:23:05:8b:1b:b9:f9:a9:1b:19:4e:26: bf:e0:dc:e8:bd:ca:9b:ff:bf:e9:ba:38:53:95:23:b2:e5:7d: 9e:33:b3:a9:b1:5a:4b:ad:13:92:9d:34:79:1d:de:fa:11:0b: b6:5a:42:de:d8:0d:26:13:f5:ac:91:c5:ed:ea:f2:20:4d:bd: 59:49:94:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJ7kYd8hI/tDSpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MTM2ZGZiYmQtOTI0My00YTUzLWE3NWItYTZmMzEzZmM0YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnRCzoAmiXCnoz/1aC3R1gW3s02MAwMhldPk fZ/INHNp9wBr59u+VHWz9HxosqzaDZS44Y/UsAjfueuqrGvDvDfCxwcWYGw8a5oP c8XMTVTjWBc9B8j94gw47y/288Q4SDhD23aTZM+J45RR11LAOUlx3DrEIFeU9Sv4 S9AnvMVHAbdXH+KrOjIlMYzd3vK2C/xEZoGITFFecVvaSSbfvN2aWhV0zYDPiwyu nMq6mSZXeS6FAfXxtQWiuKbnqOlW+LlQytmAjL4AOHfhZyYf/keukuLGBfYhcqnd Ep7SNglpdfizEIQfmx91BUqTUAiNfej/ay+4o/eL4Pfi+WEx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyPuyHd3e2dn79cQL6ZYNDwrrgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGY5ZjRlNjEtZjdjYS0z ZWVkLTk4OTEtNTUxMzU2MDg4ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq8eaQNWrH4oeJUGp49+4GnIv/EvMx7XRKUx+IIsoh6/pHYnetF/wcP /ePtu2o6bDW7vxEw6qM3FTXBwwy/AL6dlTeSJlAaUxl8T2bqaKV68/Mwi5h2daRC eIlUtcn0kely1acJtgMW0csoghzApIWAX/VNz5VBZKrnntbfOgnqCjDFqTytH7Ze ShmHKWZiDHSU7xdVvMoh+wc2tPYrYEM4wSZ7rlMIWAJ8CRADXw2jGDXQhUPvzCPj LAsjBYsbufmpGxlOJr/g3Oi9ypv/v+m6OFOVI7LlfZ4zs6mxWkutE5KdNHkd3voR C7ZaQt7YDSYT9ayRxe3q8iBNvVlJlJc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:12:50 2025 by rpki-client