$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa File: b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa (raw, json) Hash identifier: hCjPXGIMLncHzuXqKkeR5h07eYO3vKDfNMSOBuCl8fs= Subject key identifier: 1A:36:BC:20:65:46:A3:1E:EC:1C:81:D2:88:CE:A6:CD:82:A3:B7:99 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E649E965B3945BFF6497680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 142.111.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9e:96:5b:39:45:bf:f6:49:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=e7a7447d-d7b3-4f70-bdaf-22400e43428a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:5f:cd:22:f5:69:20:bc:71:8b:e5:32:c7: 08:fd:80:fa:e6:f4:64:ff:3d:15:c9:0a:dc:15:38: 7c:0b:b7:78:d0:fc:64:27:12:7d:7e:a1:70:ae:77: 66:86:06:4a:98:8f:ad:59:33:da:af:da:d1:f1:32: 51:cc:b2:8f:4f:08:d3:4f:64:1f:9c:3d:e3:c7:86: 06:55:01:2e:88:2a:2e:70:df:e5:00:d8:43:5a:e1: 63:02:91:11:67:c6:8a:4f:e3:d1:bc:80:1d:74:bd: 39:57:f0:fe:45:8c:d9:99:56:7b:13:ec:ad:e2:98: d5:62:6a:bc:95:52:05:74:93:53:ed:41:85:e6:01: 2e:de:5f:84:51:15:fc:d3:35:08:db:2b:21:a4:25: 84:0e:c2:3e:b4:47:e4:de:7a:01:e8:a2:59:ea:0d: 46:f5:dc:8a:45:12:50:41:f6:b9:b1:1f:24:07:10: 8d:69:69:46:9f:86:d5:cd:ba:8c:7f:29:09:cf:2c: 85:36:1c:5d:b7:e0:68:47:e0:04:c9:be:90:ff:29: 7d:00:f7:86:27:bb:c1:7a:e4:e2:4c:05:f8:e9:1e: b2:74:cc:be:ab:57:61:cb:9a:e2:c6:97:d8:79:41: 8b:63:20:c9:a1:89:60:63:53:17:07:a3:7f:fb:2a: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:36:BC:20:65:46:A3:1E:EC:1C:81:D2:88:CE:A6:CD:82:A3:B7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9cb651e-e6a4-3778-8b35-0f16ad3354b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6d:c0:31:70:c4:9a:8a:30:04:44:7f:ff:6d:f0:61:93:38: a3:4c:2d:5f:9d:0a:45:c8:63:1c:c7:ad:55:80:8c:31:54:8b: 7b:36:0f:b3:93:f1:d6:88:9b:6b:3b:b5:67:35:95:c7:cc:d0: a1:ba:bb:84:ef:10:bf:63:1c:35:86:08:20:51:a4:80:fd:e3: 67:b0:bf:cd:09:00:9f:0b:0d:e8:00:fb:9d:c8:d0:06:81:35: 4a:95:1b:04:a2:35:f1:5b:de:52:c9:78:8c:6c:36:2b:92:78: 3c:db:27:bf:f0:7a:bd:70:80:ab:3f:c4:1a:50:4f:67:eb:11: 0a:f3:18:23:30:e4:eb:7d:29:3d:60:10:cd:7f:58:27:76:37: ac:67:29:9a:f1:85:f8:ae:0c:c3:fa:1a:4e:9b:08:58:fc:62: ab:77:af:ec:a6:f4:db:34:d8:d8:30:6e:76:42:06:a4:c7:cf: f8:2c:ec:e2:76:e1:44:e9:94:6f:86:8d:07:f4:47:74:ff:9c: ff:83:52:1d:bb:d3:92:ab:25:f5:36:9f:ff:db:0d:49:d8:c1: e3:aa:0c:51:18:9e:52:27:38:b1:2b:b1:c5:d4:25:48:b9:d2: fc:41:ad:ab:7b:6b:1a:91:3f:92:dd:b6:6a:26:36:f4:04:93: 36:54:e7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJ6WWzlFv/ZJdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTdhNzQ0N2QtZDdiMy00ZjcwLWJkYWYtMjI0MDBlNDM0MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx31fzSL1aSC8cYvlMscI/YD65vRk/z0VyQrc FTh8C7d40PxkJxJ9fqFwrndmhgZKmI+tWTPar9rR8TJRzLKPTwjTT2QfnD3jx4YG VQEuiCoucN/lANhDWuFjApERZ8aKT+PRvIAddL05V/D+RYzZmVZ7E+yt4pjVYmq8 lVIFdJNT7UGF5gEu3l+EURX80zUI2yshpCWEDsI+tEfk3noB6KJZ6g1G9dyKRRJQ Qfa5sR8kBxCNaWlGn4bVzbqMfykJzyyFNhxdt+BoR+AEyb6Q/yl9APeGJ7vBeuTi TAX46R6ydMy+q1dhy5rixpfYeUGLYyDJoYlgY1MXB6N/+yq0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo2vCBlRqMe7ByB0ojOps2Co7eZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjljYjY1MWUtZTZhNC0z Nzc4LThiMzUtMGYxNmFkMzM1NGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdtwDFwxJqKMAREf/9t8GGTOKNMLV+dCkXIYxzHrVWAjDFUi3s2D7OT 8daIm2s7tWc1lcfM0KG6u4TvEL9jHDWGCCBRpID942ewv80JAJ8LDegA+53I0AaB NUqVGwSiNfFb3lLJeIxsNiuSeDzbJ7/wer1wgKs/xBpQT2frEQrzGCMw5Ot9KT1g EM1/WCd2N6xnKZrxhfiuDMP6Gk6bCFj8Yqt3r+ym9Ns02NgwbnZCBqTHz/gs7OJ2 4UTplG+GjQf0R3T/nP+DUh2705KrJfU2n//bDUnYweOqDFEYnlInOLErscXUJUi5 0vxBrat7axqRP5LdtmomNvQEkzZU5+A= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:35 2025 by rpki-client