$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a316f13-02de-324c-9ae7-a23e87e021f6.roa File: 7a316f13-02de-324c-9ae7-a23e87e021f6.roa (raw, json) Hash identifier: yUSyb2Exd015MXVxYKC9/i5FC6E4vpuUh6cjDJyMqAU= Subject key identifier: 9F:6A:0B:C5:51:28:16:AD:30:AC:6B:51:53:66:86:B5:25:2A:FC:D4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294ADF476CBB53085253880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a316f13-02de-324c-9ae7-a23e87e021f6.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 142.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ad:f4:76:cb:b5:30:85:25:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=2b39c405-4338-4cf0-815d-178c1e6db001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:03:dc:4c:c2:3e:49:02:1f:22:21:59:13: ab:8b:ef:c3:cb:40:f1:16:c8:ea:9c:8e:36:2a:ca: 9a:2f:73:b0:bf:92:55:d5:4b:a4:cf:ab:44:c8:1a: 06:6f:59:c3:c4:27:5b:d0:f5:b3:2f:35:c7:58:45: 2a:5c:7a:b3:0e:33:4e:e2:25:21:7e:e4:39:e3:cd: 85:6c:8a:ce:37:7d:f1:d1:d5:1b:86:35:d5:f8:4e: f7:5d:57:44:80:ca:73:2f:ef:c0:f4:5a:3b:4c:89: d2:59:d0:9f:01:b3:c9:7a:9a:72:56:a6:9f:1a:b6: 52:35:3f:0d:28:42:b9:a1:f3:22:a5:c9:8d:d3:0a: 40:3a:ea:cf:b9:18:c0:d1:b7:74:77:2d:38:15:8c: a7:24:1a:0e:3d:9b:da:d7:25:f1:81:17:75:08:74: bc:e6:88:37:15:6d:e6:f2:cd:e3:8d:8b:9c:6e:01: 69:4c:bc:6b:98:92:c1:a9:d6:03:7d:71:08:02:37: 29:25:7b:9a:78:fd:11:8f:98:99:e4:87:61:62:d5: b4:55:54:16:6a:d4:f9:d6:75:a3:85:37:1f:99:10: ee:6a:4e:0b:62:bc:49:9a:af:90:c1:83:49:4e:d0: b9:e4:39:3c:fe:7b:d0:a9:07:0d:07:3a:cf:0d:78: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:0B:C5:51:28:16:AD:30:AC:6B:51:53:66:86:B5:25:2A:FC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a316f13-02de-324c-9ae7-a23e87e021f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e0:33:1b:c9:b2:63:5a:cf:d1:aa:c6:14:b8:63:38:56:d2: 6e:42:e3:80:bd:b6:e7:e3:cb:68:72:09:32:bd:f7:3c:29:82: 80:59:20:a1:fb:90:5a:76:5c:d8:cb:5b:a0:5e:81:4a:86:0a: 15:7a:0b:c6:00:af:bb:17:f6:56:06:c8:67:61:76:7b:76:b5: 9d:03:8b:2e:51:9f:68:cd:84:3e:d1:cd:8f:20:cd:86:fe:0b: eb:26:54:f4:bf:62:68:c6:ee:00:1e:48:ea:bb:75:ed:af:af: 72:0e:ed:02:4a:7e:22:ec:a8:29:e5:d5:d2:f2:c6:2a:95:c4: e1:22:d5:a0:7a:52:61:9c:18:7b:21:f7:77:ee:73:02:ed:7c: 9a:b4:5d:00:ed:3e:f3:14:70:80:08:79:b8:d7:65:8d:4f:34: e5:65:12:e7:e5:bf:dc:d4:5a:99:6c:7d:b2:c8:79:0a:d8:a1: db:2d:1b:03:56:76:2d:06:b4:21:9f:b1:b0:d5:d6:17:43:f1: 80:ca:e6:22:60:c2:50:12:a9:6e:82:b3:f0:85:2e:55:31:aa: 76:a1:c5:31:76:c5:4b:d7:e6:34:cb:77:21:d7:3b:4b:4c:59: e4:43:4f:c1:4f:10:83:8e:07:c1:72:d9:a6:18:b9:2d:d3:2f: 08:04:e3:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlK30dsu1MIUlOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MmIzOWM0MDUtNDMzOC00Y2YwLTgxNWQtMTc4YzFlNmRiMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxcD3EzCPkkCHyIhWROri+/Dy0DxFsjqnI42 KsqaL3Owv5JV1Uukz6tEyBoGb1nDxCdb0PWzLzXHWEUqXHqzDjNO4iUhfuQ5482F bIrON33x0dUbhjXV+E73XVdEgMpzL+/A9Fo7TInSWdCfAbPJeppyVqafGrZSNT8N KEK5ofMipcmN0wpAOurPuRjA0bd0dy04FYynJBoOPZva1yXxgRd1CHS85og3FW3m 8s3jjYucbgFpTLxrmJLBqdYDfXEIAjcpJXuaeP0Rj5iZ5IdhYtW0VVQWatT51nWj hTcfmRDuak4LYrxJmq+QwYNJTtC55Dk8/nvQqQcNBzrPDXjvEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9qC8VRKBatMKxrUVNmhrUlKvzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2EzMTZmMTMtMDJkZS0z MjRjLTlhZTctYTIzZTg3ZTAyMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvgMxvJsmNaz9GqxhS4YzhW0m5C44C9tufjy2hyCTK99zwpgoBZIKH7 kFp2XNjLW6BegUqGChV6C8YAr7sX9lYGyGdhdnt2tZ0Diy5Rn2jNhD7RzY8gzYb+ C+smVPS/YmjG7gAeSOq7de2vr3IO7QJKfiLsqCnl1dLyxiqVxOEi1aB6UmGcGHsh 93fucwLtfJq0XQDtPvMUcIAIebjXZY1PNOVlEuflv9zUWplsfbLIeQrYodstGwNW di0GtCGfsbDV1hdD8YDK5iJgwlASqW6Cs/CFLlUxqnahxTF2xUvX5jTLdyHXO0tM WeRDT8FPEIOOB8Fy2aYYuS3TLwgE46E= -----END CERTIFICATE-----Generated at Sun Apr 27 14:15:37 2025 by rpki-client