$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b577ac03-5918-38d5-afa5-c0a13d681bd8.roa File: b577ac03-5918-38d5-afa5-c0a13d681bd8.roa (raw, json) Hash identifier: uJbEZxlWaFTn5A8bGCKgSOXU5TQYQ6sXlYRnMp4LijA= Subject key identifier: D6:D3:AE:31:98:9A:35:1D:1A:08:0F:E0:9C:A9:2E:B5:67:60:52:32 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF76839F509B1C1D755800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b577ac03-5918-38d5-afa5-c0a13d681bd8.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 44477 IP address blocks: 142.111.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:76:83:9f:50:9b:1c:1d:75:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=bceccb09-1ef2-4825-80b9-ca7d34dfc451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:b0:3a:b2:a3:a0:2a:1b:cc:49:49:12:8e: 02:1f:1e:f1:bf:06:d3:65:e6:0e:6d:32:16:a7:b2: d4:ad:31:16:65:ee:70:24:2a:74:9b:2e:33:0e:83: 74:46:d9:c7:72:df:12:f7:7c:31:84:f1:66:30:83: 3c:3e:d6:c5:17:e8:97:95:0d:2c:03:62:08:af:52: d5:cb:4c:2c:0c:52:77:1b:64:07:5c:ee:3c:4e:e1: f4:da:2e:ee:ce:40:3e:ab:11:71:2b:a4:9a:22:70: bc:ef:1d:63:bd:ce:49:78:34:e2:69:80:6c:37:ec: f1:e2:85:e1:db:93:02:40:16:c0:72:50:67:89:9a: 45:db:38:7d:30:55:3a:08:92:63:24:de:ea:69:b3: 1f:a9:bc:48:b1:40:95:86:82:32:70:7b:43:b4:e5: 8e:08:a8:f3:d2:27:28:01:e5:21:77:cb:b7:57:4c: 39:73:08:48:d3:ab:9f:1b:e6:a4:ca:95:6f:b3:8c: 20:84:97:1d:be:e4:c3:6b:8d:27:0e:aa:b5:4c:de: e5:8b:9c:c8:9a:1b:2f:93:df:b5:5c:c6:58:ea:7b: 3f:25:1a:8b:b1:28:6f:5b:46:b3:17:a1:99:3b:38: e9:d0:7a:d9:9c:a8:fe:4d:08:a4:20:50:ec:7e:d2: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:AE:31:98:9A:35:1D:1A:08:0F:E0:9C:A9:2E:B5:67:60:52:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b577ac03-5918-38d5-afa5-c0a13d681bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:19:6e:f1:1e:fd:0d:c3:c7:f0:7c:1d:d0:9c:0b:f2:a9:6a: 93:5a:73:6c:a3:05:21:3f:11:59:61:4a:60:cf:46:28:6c:a9: ca:d6:0b:61:5d:17:10:80:b0:84:93:99:1f:36:9e:e0:c3:75: 35:58:25:ff:99:b0:cd:5e:64:96:56:6a:48:64:09:8a:32:01: 24:09:5e:ba:56:10:13:5f:3f:90:6c:02:cd:b7:d8:62:f8:ca: 43:f4:e6:33:ee:3e:23:bc:7c:16:66:01:dd:81:6f:64:b7:bc: 2d:d3:ca:81:0e:8c:ea:b7:4a:fd:8c:eb:4c:c8:c5:98:fc:b3: ab:e6:51:5a:67:b2:41:27:e9:2a:99:fa:a4:8d:0a:dd:5d:7e: 6d:ca:cf:4d:a6:67:57:63:9b:1e:16:95:36:e6:c7:ca:52:01: d3:71:53:4c:b7:80:1d:2a:44:bb:f8:58:06:51:d0:78:ed:63: fc:a4:1e:bb:b6:07:fd:47:67:c8:3a:9f:3a:52:a2:d3:28:ab: 1b:24:73:ff:02:de:9b:ac:b3:90:65:00:b4:07:52:60:94:65: 4a:cd:5d:d3:9d:f7:d9:c9:24:db:74:1a:e9:70:02:b3:aa:87: 9a:76:d9:2a:b1:e3:66:03:26:6c:c8:05:23:73:41:04:e6:9a: 3b:b9:2b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3aDn1CbHB11WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk YmNlY2NiMDktMWVmMi00ODI1LTgwYjktY2E3ZDM0ZGZjNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3GwOrKjoCobzElJEo4CHx7xvwbTZeYObTIW p7LUrTEWZe5wJCp0my4zDoN0RtnHct8S93wxhPFmMIM8PtbFF+iXlQ0sA2IIr1LV y0wsDFJ3G2QHXO48TuH02i7uzkA+qxFxK6SaInC87x1jvc5JeDTiaYBsN+zx4oXh 25MCQBbAclBniZpF2zh9MFU6CJJjJN7qabMfqbxIsUCVhoIycHtDtOWOCKjz0ico AeUhd8u3V0w5cwhI06ufG+akypVvs4wghJcdvuTDa40nDqq1TN7li5zImhsvk9+1 XMZY6ns/JRqLsShvW0azF6GZOzjp0HrZnKj+TQikIFDsftLM1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbTrjGYmjUdGggP4JypLrVnYFIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjU3N2FjMDMtNTkxOC0z OGQ1LWFmYTUtYzBhMTNkNjgxYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkZbvEe/Q3Dx/B8HdCcC/KpapNac2yjBSE/EVlhSmDPRihsqcrWC2Fd FxCAsISTmR82nuDDdTVYJf+ZsM1eZJZWakhkCYoyASQJXrpWEBNfP5BsAs232GL4 ykP05jPuPiO8fBZmAd2Bb2S3vC3TyoEOjOq3Sv2M60zIxZj8s6vmUVpnskEn6SqZ +qSNCt1dfm3Kz02mZ1djmx4WlTbmx8pSAdNxU0y3gB0qRLv4WAZR0HjtY/ykHru2 B/1HZ8g6nzpSotMoqxskc/8C3puss5BlALQHUmCUZUrNXdOd99nJJNt0GulwArOq h5p22Sqx42YDJmzIBSNzQQTmmju5K/k= -----END CERTIFICATE-----Generated at Sun Jun 15 05:07:48 2025 by rpki-client