$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cdfc87e1-dd07-3028-acf7-ed25da85e2be.roa File: cdfc87e1-dd07-3028-acf7-ed25da85e2be.roa (raw, json) Hash identifier: /WohTnr8hYPxafNSyrHnOEOYEeAxga9ZNFqB77HGWfs= Subject key identifier: 1D:29:2D:B6:47:DE:27:8E:D4:93:E8:8D:24:2E:94:A5:24:D1:31:78 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E649CFD961CA6A72DF5F040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cdfc87e1-dd07-3028-acf7-ed25da85e2be.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 142.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9c:fd:96:1c:a6:a7:2d:f5:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=624b310c-c07f-4029-b808-c73ecc69e60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:a2:a5:13:5e:20:27:78:5d:c7:c2:47:36: f4:65:72:58:24:d8:19:82:2e:11:a4:e5:da:f9:6f: 8c:e7:56:f6:53:be:d1:a9:80:a9:9e:cd:34:4c:dd: 1a:ca:5b:58:5a:70:4f:27:69:3c:2d:75:61:21:8d: bd:2e:06:fc:a4:26:85:24:42:29:53:da:57:35:66: 52:99:bc:32:00:c7:04:39:66:fb:27:78:69:00:a2: df:e9:05:c1:76:b9:c0:09:de:b5:d8:70:86:67:0d: 3f:4d:da:3a:85:42:2e:50:ea:17:d1:83:12:35:ff: 5e:13:75:15:c9:1a:e6:b8:56:eb:13:c8:5f:a0:54: 1b:b1:91:95:c8:ae:43:ff:01:71:b9:6b:be:e9:65: 84:62:49:ca:ed:01:da:ef:c8:83:85:92:7d:4d:24: 4b:a9:7d:76:fa:09:14:0a:87:7e:4f:b8:ce:e9:1e: b1:4f:18:48:3b:5b:9c:e5:f0:02:f1:fa:8e:8b:68: 26:e7:11:fd:db:b4:ec:b2:0d:6a:e3:e6:42:46:43: 3d:59:68:38:e5:bb:e1:6f:d3:de:a4:ae:55:06:83: 43:7c:e8:63:6c:60:c0:5e:4f:9a:ae:7d:7a:55:e3: 53:17:bb:4b:c4:dc:c7:81:c0:5f:79:3d:b5:74:a0: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:29:2D:B6:47:DE:27:8E:D4:93:E8:8D:24:2E:94:A5:24:D1:31:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cdfc87e1-dd07-3028-acf7-ed25da85e2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ed:13:ed:18:e5:30:12:96:96:39:24:41:3f:a0:9a:54:93: 0b:45:7b:e2:a7:74:e5:35:45:0c:88:f9:2e:5d:4e:c0:7b:a7: 11:1d:f7:13:a1:97:53:69:a0:a4:21:b4:7b:8f:03:3f:50:12: 41:37:c9:f8:69:9c:66:f3:47:d2:b6:d5:af:42:dd:fe:1e:b4: 6f:12:fc:28:b4:21:02:65:7f:41:34:58:35:59:d3:a4:8b:83: 74:50:77:07:8b:51:af:ef:78:78:4f:dd:d8:96:39:22:a2:1a: a6:51:3a:b9:17:49:94:1d:b1:65:f6:e6:03:a2:2d:40:e2:11: e1:05:2c:89:e8:58:8c:69:86:7a:33:e1:53:dd:73:67:27:fc: ae:a6:d7:32:a1:61:72:b7:92:7d:98:0f:00:02:01:a9:3e:4e: f2:3a:bb:c4:10:d8:c8:c5:99:ab:f5:5f:dd:71:fa:d9:72:74: e2:20:f0:95:6d:e2:9b:73:0d:33:02:5d:5a:d9:2b:9c:a9:96: d5:d5:45:ee:b4:40:73:c2:58:20:bc:fc:e4:71:b1:8a:66:6b: 06:09:67:48:eb:21:d2:41:65:1c:cd:92:b6:ac:29:03:04:00: 75:c5:0e:ee:e1:cd:ea:8f:3b:b5:22:57:ed:25:cc:ab:45:19: 83:61:2d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJz9lhympy318EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NjI0YjMxMGMtYzA3Zi00MDI5LWI4MDgtYzczZWNjNjllNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgeipRNeICd4XcfCRzb0ZXJYJNgZgi4RpOXa +W+M51b2U77RqYCpns00TN0ayltYWnBPJ2k8LXVhIY29Lgb8pCaFJEIpU9pXNWZS mbwyAMcEOWb7J3hpAKLf6QXBdrnACd612HCGZw0/Tdo6hUIuUOoX0YMSNf9eE3UV yRrmuFbrE8hfoFQbsZGVyK5D/wFxuWu+6WWEYknK7QHa78iDhZJ9TSRLqX12+gkU Cod+T7jO6R6xTxhIO1uc5fAC8fqOi2gm5xH927Tssg1q4+ZCRkM9WWg45bvhb9Pe pK5VBoNDfOhjbGDAXk+arn16VeNTF7tLxNzHgcBfeT21dKCVhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0pLbZH3ieO1JPojSQulKUk0TF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2RmYzg3ZTEtZGQwNy0z MDI4LWFjZjctZWQyNWRhODVlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/tE+0Y5TASlpY5JEE/oJpUkwtFe+KndOU1RQyI+S5dTsB7pxEd9xOh l1NpoKQhtHuPAz9QEkE3yfhpnGbzR9K21a9C3f4etG8S/Ci0IQJlf0E0WDVZ06SL g3RQdweLUa/veHhP3diWOSKiGqZROrkXSZQdsWX25gOiLUDiEeEFLInoWIxphnoz 4VPdc2cn/K6m1zKhYXK3kn2YDwACAak+TvI6u8QQ2MjFmav1X91x+tlydOIg8JVt 4ptzDTMCXVrZK5ypltXVRe60QHPCWCC8/ORxsYpmawYJZ0jrIdJBZRzNkrasKQME AHXFDu7hzeqPO7UiV+0lzKtFGYNhLXA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:58 2025 by rpki-client