$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa File: 99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa (raw, json) Hash identifier: 6TKbdwdPrh4G9ZdYT0rlGFEpQ0/E/K4Wcbe/PVGQEwI= Subject key identifier: F8:D4:AA:66:27:91:61:F1:FC:1D:7B:59:EC:75:7E:A3:9F:35:83:AF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B5EC6F9F3D0E1DFF3F00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 142.111.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b5:ec:6f:9f:3d:0e:1d:ff:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=121ecf28-0bfc-4d22-a49d-1fc5793b09bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:d7:37:87:6f:74:da:77:9a:a5:02:07:85: a7:43:8e:07:18:94:e3:6b:7e:ef:a0:ad:2b:ac:02: c1:d4:cf:f8:4e:42:83:2f:fd:90:1c:77:37:06:aa: 92:54:31:3a:08:1f:4a:a5:9e:43:1f:c0:b1:25:9b: 9e:59:eb:fc:2d:70:63:f9:02:a8:4e:b7:8d:14:2f: 6b:9d:19:84:5d:32:6f:e2:ad:28:6b:64:82:d2:b9: 24:b8:bd:dd:7a:fd:df:28:b9:d3:06:bb:69:3f:18: 93:e7:d8:6f:b1:f3:0e:99:fb:52:eb:7e:85:64:95: 06:2a:73:a2:57:47:08:9d:00:22:dc:82:a1:92:77: 1e:fa:19:9f:b8:52:35:8a:14:6d:63:5b:ef:55:7f: ae:2d:06:95:67:ec:fa:bd:80:66:5c:74:48:38:35: 38:9c:9b:0b:8f:0b:cd:bf:a5:76:27:a8:42:f5:9a: 9f:c8:77:1a:2a:dd:1d:fd:3b:ff:c9:be:27:27:22: f0:77:10:69:c7:4e:d9:39:a6:a4:3e:d4:f8:6f:ac: 29:00:3e:9b:b5:30:7f:07:4a:22:06:46:e6:cf:96: 82:3d:37:29:80:0a:91:a8:e8:db:9d:45:a3:b6:4e: 66:03:dc:ae:32:6e:c9:d9:39:e8:f8:52:11:05:4d: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:AA:66:27:91:61:F1:FC:1D:7B:59:EC:75:7E:A3:9F:35:83:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:27:2f:7a:2d:52:49:d2:c9:d6:30:00:aa:ee:35:92:e2:af: cc:23:53:2f:2e:58:db:c5:3d:3c:86:21:9b:d0:d7:5c:4a:9c: c1:35:27:f8:5e:b7:62:14:32:aa:46:2c:8e:4b:e0:6c:f0:94: b5:87:5a:4d:b4:b4:9c:e1:6b:77:18:38:cd:19:f2:fb:87:40: a4:6c:2e:ba:63:d9:86:d0:8d:47:22:00:2d:02:4d:19:ce:47: 86:60:48:da:65:3f:7b:5f:e7:1c:24:c6:ca:0b:23:3b:db:3a: b3:cd:a7:5a:48:10:c7:13:82:46:52:86:23:ac:7f:8b:16:95: 40:76:12:a0:f4:06:90:7e:98:1b:8c:98:73:8c:10:71:89:25: bb:42:9c:4c:14:f7:b8:fe:67:a9:83:e4:22:74:31:e8:6f:eb: 00:f4:5b:8e:16:7c:e6:a9:6c:15:b2:ee:39:8d:be:36:43:da: f0:00:ef:e4:95:db:2b:fa:12:da:fa:bc:94:2c:72:cb:76:13: bf:39:fd:d4:00:8e:57:7e:48:66:66:b5:53:93:9b:6a:b1:3b: 6b:72:ca:69:2e:c4:14:6f:a4:46:b2:74:24:a4:d6:a4:ba:1d: 40:d7:45:7e:d0:05:ec:05:36:11:da:35:1c:5e:68:a0:88:e1: 27:68:4d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLXsb589Dh3/PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MTIxZWNmMjgtMGJmYy00ZDIyLWE0OWQtMWZjNTc5M2IwOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwDXN4dvdNp3mqUCB4WnQ44HGJTja37voK0r rALB1M/4TkKDL/2QHHc3BqqSVDE6CB9KpZ5DH8CxJZueWev8LXBj+QKoTreNFC9r nRmEXTJv4q0oa2SC0rkkuL3dev3fKLnTBrtpPxiT59hvsfMOmftS636FZJUGKnOi V0cInQAi3IKhknce+hmfuFI1ihRtY1vvVX+uLQaVZ+z6vYBmXHRIODU4nJsLjwvN v6V2J6hC9ZqfyHcaKt0d/Tv/yb4nJyLwdxBpx07ZOaakPtT4b6wpAD6btTB/B0oi Bkbmz5aCPTcpgAqRqOjbnUWjtk5mA9yuMm7J2Tno+FIRBU1a/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjUqmYnkWHx/B17Wex1fqOfNYOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTlmM2NmZWEtOWNiNi0z NWI2LTgyNmUtNGRmYTE2YjIxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYnL3otUknSydYwAKruNZLir8wjUy8uWNvFPTyGIZvQ11xKnME1J/he t2IUMqpGLI5L4GzwlLWHWk20tJzha3cYOM0Z8vuHQKRsLrpj2YbQjUciAC0CTRnO R4ZgSNplP3tf5xwkxsoLIzvbOrPNp1pIEMcTgkZShiOsf4sWlUB2EqD0BpB+mBuM mHOMEHGJJbtCnEwU97j+Z6mD5CJ0Mehv6wD0W44WfOapbBWy7jmNvjZD2vAA7+SV 2yv6Etr6vJQscst2E785/dQAjld+SGZmtVOTm2qxO2tyymkuxBRvpEaydCSk1qS6 HUDXRX7QBewFNhHaNRxeaKCI4SdoTZM= -----END CERTIFICATE-----Generated at Sun Jun 15 05:12:51 2025 by rpki-client