$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8561ed7-4672-37df-9c13-fa9db464b29a.roa File: b8561ed7-4672-37df-9c13-fa9db464b29a.roa (raw, json) Hash identifier: mjcHPW2gVFLGOnu8OVv9J3ZSQa1Slg1M/sp7SpG+yrU= Subject key identifier: FD:9B:87:EE:19:84:E3:A7:3A:D4:3B:9B:D5:75:AB:57:7C:5B:51:22 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294AE006402134CF2C77A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8561ed7-4672-37df-9c13-fa9db464b29a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 142.111.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ae:00:64:02:13:4c:f2:c7:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=58659c86-1eec-46a8-b235-c3131b8e4617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:48:ae:38:f4:96:01:87:c5:3b:24:73:b5:24: 7e:df:85:98:9a:58:da:d0:ba:9d:7c:56:6b:f1:f3: c1:c3:15:25:01:5b:96:0a:87:d9:83:b4:aa:be:b6: 1e:80:f1:53:5c:eb:79:4a:df:53:16:08:79:4a:58: fa:21:3b:2d:2f:06:a8:66:0b:45:43:34:c4:50:65: 40:02:c0:04:80:75:0c:c6:a9:54:18:fc:37:e1:00: 5f:80:19:dc:27:6f:54:d6:cc:5e:f1:26:a1:64:94: ce:85:9a:b6:3c:71:60:01:69:3c:c7:d8:d7:10:aa: 93:9e:18:00:91:22:0e:ab:12:a3:6b:e6:ed:60:e0: 3e:1b:6b:c8:69:56:ef:f6:4d:3f:d4:e4:9d:88:d2: 7e:90:fd:4f:7f:59:54:f1:15:90:b5:37:ff:55:2c: 42:28:8f:28:69:23:5e:16:30:6e:e6:72:62:c3:1a: ba:9c:6d:c0:0f:7d:d6:09:9e:5e:64:63:dc:11:09: b7:52:b1:70:95:a2:b7:80:89:ef:57:29:2c:54:a3: f5:0a:22:cf:6b:86:e1:89:f6:02:4f:88:e0:f6:8d: 77:be:65:ae:90:84:f2:0a:4f:d9:6e:78:4d:a0:78: 24:8f:83:ba:9b:c5:5d:b4:7c:71:11:f0:dd:a0:4a: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9B:87:EE:19:84:E3:A7:3A:D4:3B:9B:D5:75:AB:57:7C:5B:51:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8561ed7-4672-37df-9c13-fa9db464b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:61:3a:bf:e1:95:e5:21:e2:b5:da:4f:76:c9:ff:46:d7:aa: cb:c5:9c:f8:a9:da:2b:6f:a5:cd:4b:f3:81:97:71:18:94:70: 29:5b:1a:82:94:d0:42:13:cf:80:a0:0a:6b:da:a5:97:f1:07: 98:1e:59:f6:48:5e:1c:90:54:db:b7:55:33:e3:d7:4f:bc:6c: b9:04:24:6d:a5:c4:b2:d7:0b:fc:36:fd:98:a5:44:5e:fd:33: 9b:2a:be:26:7f:57:19:4d:9d:d8:fb:9d:6d:98:f0:4c:4c:2e: 8a:e3:9f:e5:2f:c1:32:aa:cf:d0:30:76:62:1f:f7:13:60:19: ca:89:bc:90:b6:9b:46:82:e4:c5:1f:9b:0e:d5:0b:31:4b:2f: ff:e5:40:99:f5:4b:86:d1:a6:9e:00:78:14:6b:27:8c:18:75: 83:f9:2a:e8:bf:be:21:4c:f0:31:89:c7:4e:a9:c7:24:0a:41: 01:f0:b9:02:ad:16:02:1d:35:ed:63:3f:4b:ab:19:a8:2e:e2: 49:70:4d:ad:66:59:3b:5c:df:11:2d:da:48:23:19:93:81:52: a3:9a:9d:36:87:0a:b0:e4:b8:3a:89:b1:b6:60:0a:75:7e:3d: 8f:36:d2:61:f6:4d:dd:97:38:b1:1b:96:66:33:28:fb:51:d7: 95:cc:73:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlK4AZAITTPLHeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTg2NTljODYtMWVlYy00NmE4LWIyMzUtYzMxMzFiOGU0NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0iuOPSWAYfFOyRztSR+34WYmlja0LqdfFZr 8fPBwxUlAVuWCofZg7SqvrYegPFTXOt5St9TFgh5Slj6ITstLwaoZgtFQzTEUGVA AsAEgHUMxqlUGPw34QBfgBncJ29U1sxe8SahZJTOhZq2PHFgAWk8x9jXEKqTnhgA kSIOqxKja+btYOA+G2vIaVbv9k0/1OSdiNJ+kP1Pf1lU8RWQtTf/VSxCKI8oaSNe FjBu5nJiwxq6nG3AD33WCZ5eZGPcEQm3UrFwlaK3gInvVyksVKP1CiLPa4bhifYC T4jg9o13vmWukITyCk/ZbnhNoHgkj4O6m8VdtHxxEfDdoErwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2bh+4ZhOOnOtQ7m9V1q1d8W1EiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjg1NjFlZDctNDY3Mi0z N2RmLTljMTMtZmE5ZGI0NjRiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxhOr/hleUh4rXaT3bJ/0bXqsvFnPip2itvpc1L84GXcRiUcClbGoKU 0EITz4CgCmvapZfxB5geWfZIXhyQVNu3VTPj10+8bLkEJG2lxLLXC/w2/ZilRF79 M5sqviZ/VxlNndj7nW2Y8ExMLorjn+UvwTKqz9AwdmIf9xNgGcqJvJC2m0aC5MUf mw7VCzFLL//lQJn1S4bRpp4AeBRrJ4wYdYP5Kui/viFM8DGJx06pxyQKQQHwuQKt FgIdNe1jP0urGagu4klwTa1mWTtc3xEt2kgjGZOBUqOanTaHCrDkuDqJsbZgCnV+ PY820mH2Td2XOLEblmYzKPtR15XMczE= -----END CERTIFICATE-----Generated at Sun Apr 27 13:08:08 2025 by rpki-client