$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9bab9b5-8bdc-3aaa-8d28-dda6b7fd1c3e.roa File: c9bab9b5-8bdc-3aaa-8d28-dda6b7fd1c3e.roa (raw, json) Hash identifier: dYgG48a2ASgQYldXBaPuNP4k+QzOKolkB7k8XMH8KZc= Subject key identifier: 1B:19:4D:F8:23:6D:92:49:D9:06:E3:37:73:B7:EE:A6:75:7B:C4:60 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B68ABD669B276948F940 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9bab9b5-8bdc-3aaa-8d28-dda6b7fd1c3e.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 398252 IP address blocks: 142.111.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b6:8a:bd:66:9b:27:69:48:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=be005157-9abe-4754-8da8-b2235c2a7503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:62:dc:d9:f4:0e:82:42:19:94:56:fb:b4: 3b:27:e4:d3:f7:f3:81:27:aa:79:f4:5b:f7:b9:48: 0d:98:c2:3b:87:72:08:f8:8b:22:59:d2:e5:4d:b1: f6:5d:a1:12:1a:06:b8:e6:6b:e7:4e:63:63:7d:41: 91:a4:6e:5a:ec:9c:5b:00:60:de:99:da:63:41:2f: 2a:1c:6f:ab:58:67:0e:ff:9d:3c:00:1e:b9:d3:e0: 49:53:d5:2b:52:4d:f0:61:78:c3:f1:df:66:cb:ec: 5a:6c:74:f2:7f:ae:8f:c6:55:1a:9b:ac:91:a1:11: 54:c8:95:c9:ad:76:f7:c9:2b:20:73:c7:7b:fe:10: 40:b5:f4:33:de:c3:34:79:54:81:13:82:7a:4c:06: 52:88:08:ee:65:09:91:67:c1:24:ac:01:8b:be:43: 4f:24:82:f7:3b:81:8f:7c:33:a1:ae:e8:c0:6d:4d: 06:ae:ac:2e:70:33:72:6b:20:14:c5:40:a2:74:07: 7b:3c:90:a4:8c:ef:57:52:42:06:0a:8f:0b:46:72: c0:11:9e:05:da:62:b1:cf:20:0c:65:6a:cb:43:a1: b5:99:c2:d1:27:17:8e:81:3c:95:14:0a:6f:50:18: 7d:8c:93:80:cf:9a:27:ea:00:30:bd:d1:aa:2c:3e: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:4D:F8:23:6D:92:49:D9:06:E3:37:73:B7:EE:A6:75:7B:C4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9bab9b5-8bdc-3aaa-8d28-dda6b7fd1c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0d:92:90:d4:b1:1c:e6:0e:5d:64:83:b2:ef:aa:51:ad:fb: 47:36:26:d9:79:6a:9a:9f:a9:1f:91:4a:ad:57:50:27:5c:75: 92:45:57:66:8c:09:22:b5:b7:97:57:53:b2:19:92:bb:72:ad: 3a:53:31:65:98:bd:8c:37:9b:34:74:39:b0:67:83:f7:de:fb: 1b:ce:38:f6:a8:54:5c:18:ed:ae:1a:a9:78:06:40:6e:b5:7b: 23:07:c8:9c:e7:77:96:66:14:d9:87:d7:cf:51:8c:0b:8d:bf: 61:ae:ca:7b:c7:c4:49:07:3b:7c:74:86:8f:08:ba:10:d4:1a: e8:9b:b3:d6:66:b2:2a:b1:fb:54:a0:8d:8d:d9:dd:ab:78:4d: 53:82:11:53:75:0c:16:7f:5d:6c:76:e6:cf:68:a3:bb:50:4e: 43:a3:1a:67:c9:08:ab:d5:1b:71:c8:24:84:da:1e:a4:70:0b: 4e:21:1c:11:56:1a:5e:f1:e6:b0:de:d4:07:79:1a:f3:17:d2: e4:38:7a:89:be:d7:a2:2d:1f:90:94:7e:78:87:75:b1:d6:b9: c1:e7:90:10:4a:e2:eb:0a:3b:04:96:aa:3d:8e:5d:8b:1b:84: 8e:5d:f8:90:b5:8f:ce:74:f0:83:26:22:87:4c:b5:26:96:2c: 74:be:6f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLaKvWabJ2lI+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YmUwMDUxNTctOWFiZS00NzU0LThkYTgtYjIyMzVjMmE3NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru9i3Nn0DoJCGZRW+7Q7J+TT9/OBJ6p59Fv3 uUgNmMI7h3II+IsiWdLlTbH2XaESGga45mvnTmNjfUGRpG5a7JxbAGDemdpjQS8q HG+rWGcO/508AB650+BJU9UrUk3wYXjD8d9my+xabHTyf66PxlUam6yRoRFUyJXJ rXb3ySsgc8d7/hBAtfQz3sM0eVSBE4J6TAZSiAjuZQmRZ8EkrAGLvkNPJIL3O4GP fDOhrujAbU0GrqwucDNyayAUxUCidAd7PJCkjO9XUkIGCo8LRnLAEZ4F2mKxzyAM ZWrLQ6G1mcLRJxeOgTyVFApvUBh9jJOAz5on6gAwvdGqLD6i3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsZTfgjbZJJ2QbjN3O37qZ1e8RgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzliYWI5YjUtOGJkYy0z YWFhLThkMjgtZGRhNmI3ZmQxYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADANkpDUsRzmDl1kg7LvqlGt+0c2Jtl5apqfqR+RSq1XUCdcdZJFV2aM CSK1t5dXU7IZkrtyrTpTMWWYvYw3mzR0ObBng/fe+xvOOPaoVFwY7a4aqXgGQG61 eyMHyJznd5ZmFNmH189RjAuNv2GuynvHxEkHO3x0ho8IuhDUGuibs9Zmsiqx+1Sg jY3Z3at4TVOCEVN1DBZ/XWx25s9oo7tQTkOjGmfJCKvVG3HIJITaHqRwC04hHBFW Gl7x5rDe1Ad5GvMX0uQ4eom+16ItH5CUfniHdbHWucHnkBBK4usKOwSWqj2OXYsb hI5d+JC1j8508IMmIodMtSaWLHS+byE= -----END CERTIFICATE-----Generated at Sun Jun 15 04:47:21 2025 by rpki-client