$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa File: e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa (raw, json) Hash identifier: SK29A2HdDKtL+HJ/gNYw/3j9wsgJ7S1m00DXBtMp6QY= Subject key identifier: 92:B8:6B:C6:5D:E2:94:47:F4:B8:FF:F5:00:38:F2:FF:78:67:AC:96 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849A354871B612F70D8AB40E900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 212238 IP address blocks: 142.111.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:87:1b:61:2f:70:d8:ab:40:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=84c1e676-cbf7-4fb7-8074-aa47e857d654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:af:93:ce:81:fc:e0:54:1b:f2:6e:92:e1: bd:00:0b:36:fb:07:0f:4d:b3:36:15:c8:b1:f8:ac: 1c:b6:8e:5a:03:e8:58:4e:2f:93:08:21:c5:b3:ef: 3c:c5:89:f6:ea:f8:9c:bb:20:12:f6:21:a7:93:aa: 7a:7f:b1:b6:92:0d:e9:dc:13:ca:f4:21:c7:89:ee: 16:78:aa:81:83:9b:7b:2d:8f:78:e4:3b:b6:72:3f: 35:e5:28:5a:29:22:fd:62:ef:85:a7:1e:18:bd:7c: b6:b7:f7:29:62:8a:f1:26:6f:26:c6:f7:15:24:bf: 84:5d:ae:26:a8:f9:cc:15:c1:44:6e:e7:cd:69:69: 54:19:9a:a1:6c:a3:d0:8a:26:bc:9f:22:7a:cc:24: 30:d4:aa:28:fb:ae:1d:7f:08:5f:37:f2:4d:c7:b4: 07:cb:b5:87:73:76:30:03:f9:e6:f7:26:92:1a:33: 08:e6:bf:ae:6b:27:4c:e1:ce:55:6c:0b:b1:c1:38: 9a:1c:8e:9f:1b:e2:11:c5:ee:8c:01:8a:c1:39:70: 33:5a:5d:b6:d6:59:fa:ea:61:86:83:a6:e2:f8:e6: 6c:06:30:7a:d7:aa:25:25:22:56:33:c7:f6:80:6b: 26:ff:2b:ac:3e:ed:38:3b:6f:3a:36:e7:d6:5f:98: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B8:6B:C6:5D:E2:94:47:F4:B8:FF:F5:00:38:F2:FF:78:67:AC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c9:84:d5:fb:06:59:7f:a2:06:a2:ba:64:af:be:85:dc:ba: b9:cf:21:a0:df:49:c1:e8:b9:98:b4:2a:75:34:be:c6:96:fd: 4f:5a:fd:48:c4:56:43:40:15:b4:75:8c:38:ec:df:d9:c8:da: 30:74:40:9a:a6:96:e2:ca:b2:a2:80:78:92:56:44:68:fb:76: b3:a1:62:23:11:3c:4a:03:50:ec:b9:d1:92:82:20:37:93:c7: 27:09:65:20:e6:a0:71:ba:02:8c:ee:9a:ba:20:40:bc:55:f1: e8:0c:61:af:cb:a9:a7:0d:3f:b1:a1:3f:7f:76:e5:71:9e:3e: 88:ca:d0:7e:8c:5a:77:36:1a:29:74:c2:32:a1:19:33:f7:46: 25:16:a4:c0:0e:98:08:17:6d:1f:8b:f1:34:9d:b5:b5:f7:70: a1:b6:5b:d3:ea:ad:ee:7e:65:8b:5d:af:f8:bb:ce:4a:f1:de: f8:c0:ca:89:bd:8b:2c:25:cc:cc:11:8c:c0:b1:f0:fc:1c:18: eb:50:ca:9d:e2:0b:d7:e5:ea:78:be:d0:7d:57:02:16:f0:da: f7:ac:68:c7:ac:0b:17:b6:b2:83:5d:01:b8:99:f8:0f:a1:bd: b8:6a:73:62:84:c5:0b:03:5d:9b:6b:ef:4c:5b:a9:9c:d4:84: ed:1a:17:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIcbYS9w2KtA6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk ODRjMWU2NzYtY2JmNy00ZmI3LTgwNzQtYWE0N2U4NTdkNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oyvk86B/OBUG/JukuG9AAs2+wcPTbM2Fcix +Kwcto5aA+hYTi+TCCHFs+88xYn26vicuyAS9iGnk6p6f7G2kg3p3BPK9CHHie4W eKqBg5t7LY945Du2cj815ShaKSL9Yu+Fpx4YvXy2t/cpYorxJm8mxvcVJL+EXa4m qPnMFcFEbufNaWlUGZqhbKPQiia8nyJ6zCQw1Koo+64dfwhfN/JNx7QHy7WHc3Yw A/nm9yaSGjMI5r+uaydM4c5VbAuxwTiaHI6fG+IRxe6MAYrBOXAzWl221ln66mGG g6bi+OZsBjB616olJSJWM8f2gGsm/yusPu04O286NufWX5jUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK4a8Zd4pRH9Lj/9QA48v94Z6yWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTE3YmQ0YjQtMzFlZC0z MjBjLThiMTYtYjVhMDZhYjA4MGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrJhNX7Bll/ogaiumSvvoXcurnPIaDfScHouZi0KnU0vsaW/U9a/UjE VkNAFbR1jDjs39nI2jB0QJqmluLKsqKAeJJWRGj7drOhYiMRPEoDUOy50ZKCIDeT xycJZSDmoHG6AozumrogQLxV8egMYa/LqacNP7GhP3925XGePojK0H6MWnc2Gil0 wjKhGTP3RiUWpMAOmAgXbR+L8TSdtbX3cKG2W9Pqre5+ZYtdr/i7zkrx3vjAyom9 iywlzMwRjMCx8PwcGOtQyp3iC9fl6ni+0H1XAhbw2vesaMesCxe2soNdAbiZ+A+h vbhqc2KExQsDXZtr70xbqZzUhO0aFzw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:19 2025 by rpki-client