$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/49a5313b-06d2-3553-bf1c-3a91c93b3dcb.roa File: 49a5313b-06d2-3553-bf1c-3a91c93b3dcb.roa (raw, json) Hash identifier: aG+rVMsYbvgziua+GgC284Jd3+wqIZ71gp/jkO4faTs= Subject key identifier: 1F:E8:CA:0F:B5:BE:13:6C:87:D1:25:54:4C:7C:A7:CD:4D:AF:AE:34 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858497F09AAAFBB78C458A28DA180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/49a5313b-06d2-3553-bf1c-3a91c93b3dcb.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7018 IP address blocks: 142.111.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:aa:af:bb:78:c4:58:a2:8d:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=45f41bbb-d6f0-491d-a109-dcff62becdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:01:40:79:9d:61:bc:f4:51:45:e3:32:e9: 12:73:76:e4:72:b7:e9:be:c4:2d:d8:09:e9:5a:95: ac:e7:da:8d:dd:a8:03:ef:f3:08:ed:55:9c:6f:38: 36:23:d3:1e:a6:b8:9d:99:88:dd:f3:0f:6b:09:93: d9:8a:64:09:05:6c:cc:12:4c:b0:47:b7:49:71:87: cc:e4:a3:18:6b:01:01:da:fb:cc:5f:80:75:4c:a5: 1a:22:27:a9:71:29:b2:12:93:a2:69:d0:44:23:d2: 21:8b:28:1a:fa:24:bc:e7:f2:70:78:71:90:f0:29: 86:be:1e:f6:dd:6c:8f:48:9d:59:d5:26:c1:f0:97: d8:65:c3:79:96:e1:40:76:94:db:d4:25:b9:07:5c: 90:9a:a2:40:5c:68:b6:a9:dc:a0:d6:62:73:ff:a9: 0f:a2:b9:d5:12:d8:d7:c6:13:bc:37:69:21:ff:b0: 7a:10:cc:ba:91:bc:0a:34:54:a6:30:51:7a:c2:a8: 3c:ff:ee:8c:c7:85:6f:f6:3c:1a:1d:f9:0b:cd:a3: de:8a:96:54:56:6f:7e:91:be:26:cc:12:db:aa:26: 04:c1:f4:9d:75:2a:c5:ef:b6:00:83:bc:60:97:17: 86:6f:2b:a2:5a:60:bb:b3:ef:de:0f:58:53:7e:dc: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:CA:0F:B5:BE:13:6C:87:D1:25:54:4C:7C:A7:CD:4D:AF:AE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/49a5313b-06d2-3553-bf1c-3a91c93b3dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f5:64:a1:73:a0:5d:b0:3b:d0:cc:78:21:71:bf:8b:af:af: c1:7c:f6:ce:45:87:18:e9:46:d0:26:42:62:11:4c:8e:18:3b: 73:f9:b1:44:b6:4f:4b:01:83:ce:16:6b:d5:6c:71:af:40:e5: 93:20:a3:80:47:fd:fe:c3:5a:2d:47:0a:25:c6:d7:c8:c5:c8: dd:ef:8a:aa:79:e4:fc:82:5f:de:9d:a7:b9:6d:9a:cd:f7:26: 39:9c:40:22:0b:a6:e2:e3:60:87:96:30:75:0f:60:5e:2e:82: 36:36:ab:77:1b:40:50:33:8b:76:c4:c6:5c:27:1b:bd:b1:aa: 2a:8f:3f:47:a8:f8:e2:36:7b:a7:e6:84:b7:6d:80:b7:07:98: 94:a2:e6:ca:c5:20:99:bf:3d:3e:b5:d2:ad:0b:7a:c7:6d:32: 98:91:8a:07:db:ea:86:4e:bc:6c:20:9d:17:e9:1a:52:52:5f: b0:b1:11:5d:9b:87:7c:bd:cb:c9:a7:1d:f0:e9:e4:27:19:52: 1e:bc:9d:35:0e:d2:a9:08:9f:48:51:b8:19:53:49:3d:ee:8a: db:bc:a4:82:91:22:65:2c:45:be:37:92:1d:d4:7f:ba:a4:be: 47:45:1a:88:2c:43:56:1d:29:a3:8e:3b:1d:48:1d:e2:e4:d1: 9e:ed:0a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/Caqvu3jEWKKNoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk NDVmNDFiYmItZDZmMC00OTFkLWExMDktZGNmZjYyYmVjZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycMBQHmdYbz0UUXjMukSc3bkcrfpvsQt2Anp WpWs59qN3agD7/MI7VWcbzg2I9MepridmYjd8w9rCZPZimQJBWzMEkywR7dJcYfM 5KMYawEB2vvMX4B1TKUaIiepcSmyEpOiadBEI9Ihiyga+iS85/JweHGQ8CmGvh72 3WyPSJ1Z1SbB8JfYZcN5luFAdpTb1CW5B1yQmqJAXGi2qdyg1mJz/6kPornVEtjX xhO8N2kh/7B6EMy6kbwKNFSmMFF6wqg8/+6Mx4Vv9jwaHfkLzaPeipZUVm9+kb4m zBLbqiYEwfSddSrF77YAg7xglxeGbyuiWmC7s+/eD1hTftzfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/oyg+1vhNsh9ElVEx8p81Nr640MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDlhNTMxM2ItMDZkMi0z NTUzLWJmMWMtM2E5MWM5M2IzZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI31ZKFzoF2wO9DMeCFxv4uvr8F89s5FhxjpRtAmQmIRTI4YO3P5sUS2 T0sBg84Wa9Vsca9A5ZMgo4BH/f7DWi1HCiXG18jFyN3viqp55PyCX96dp7ltms33 JjmcQCILpuLjYIeWMHUPYF4ugjY2q3cbQFAzi3bExlwnG72xqiqPP0eo+OI2e6fm hLdtgLcHmJSi5srFIJm/PT610q0LesdtMpiRigfb6oZOvGwgnRfpGlJSX7CxEV2b h3y9y8mnHfDp5CcZUh68nTUO0qkIn0hRuBlTST3uitu8pIKRImUsRb43kh3Uf7qk vkdFGogsQ1YdKaOOOx1IHeLk0Z7tCgQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:39 2025 by rpki-client