$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa File: 324dd731-3f7c-3953-9041-61e37dbe74af.roa (raw, json) Hash identifier: PGGY1OvAsj3ozV3FheQaEU1q4ERBYe9ZZ2jJyuFZCqE= Subject key identifier: 3F:3E:B1:4C:5A:EF:AB:9D:80:36:78:72:A4:A5:4D:F2:5F:5A:55:D3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A55130B3A6E660D698DDA5900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa Signing time: Fri 27 Jun 2025 17:02:51 +0000 ROA not before: Fri 27 Jun 2025 17:02:51 +0000 ROA not after: Thu 25 Sep 2025 17:02:51 +0000 asID: 7018 IP address blocks: 142.111.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:55:13:0b:3a:6e:66:0d:69:8d:da:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 27 17:02:51 2025 GMT Not After : Sep 25 17:02:51 2025 GMT Subject: CN=869e76c8-6d1c-47ea-abd8-2dbaf8c77448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:d3:bb:3e:a5:bc:46:56:26:bf:f6:7c:f9: 3d:ec:3b:23:ef:dd:95:32:1e:e7:06:ac:63:40:99: ae:d4:80:3f:b1:1b:96:1d:00:64:33:71:34:af:d2: ea:69:86:98:64:0c:be:d6:c5:9f:ce:ea:7b:f4:48: cb:e1:22:19:0f:e2:8b:16:1c:62:2a:a8:62:4a:4a: df:2b:b0:01:e2:01:d7:58:f3:cb:b0:1d:76:d7:d1: b4:e3:27:c9:44:01:f5:fd:34:7e:e3:a0:91:d7:f6: 18:08:eb:5f:d1:2e:93:cb:e6:e5:53:4d:f8:1e:12: 59:f6:be:6d:ea:96:45:b5:0b:66:7e:c3:45:1a:89: e2:32:e2:a5:d5:1b:21:13:e0:d9:ca:9a:de:22:73: 99:7a:ec:51:42:34:f8:d4:00:eb:a5:6f:a7:c2:22: b3:f1:d6:7f:da:5c:75:3f:b4:0d:2c:21:2b:23:6d: dd:63:83:b3:81:79:f0:85:41:3d:ea:d5:07:bd:3f: dc:0d:61:72:c4:5d:29:dd:a9:81:1a:a0:8f:d1:2e: dd:68:3a:ea:5b:1f:f2:5a:c3:e6:a5:16:14:3e:94: 7b:61:50:15:0f:d6:7d:e1:03:c9:28:19:03:c9:10: ae:3a:1b:11:bc:f3:1b:ac:a2:06:fd:c4:d3:15:af: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3E:B1:4C:5A:EF:AB:9D:80:36:78:72:A4:A5:4D:F2:5F:5A:55:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f2:8e:25:d0:5c:dc:44:26:93:5b:64:5b:15:e5:af:e1:da: f0:4c:b4:87:b1:be:07:10:f1:52:f4:a9:4e:e4:3a:08:dd:96: ac:18:f2:f5:bd:2e:96:fe:04:d3:1a:b4:d4:df:99:5d:52:72: f5:eb:92:6b:f9:89:a8:7f:58:74:f9:68:3c:9d:11:4d:62:27: 39:ab:fd:04:22:7f:c7:ba:b4:a5:e6:0d:b5:6c:64:bb:45:02: 70:41:72:55:48:2f:a7:bd:28:5b:f5:99:c1:ee:be:66:18:ab: 00:13:d7:71:0d:db:ad:4a:b0:77:18:8e:a6:58:53:cb:03:8a: 1c:d1:57:c8:c3:b3:b6:f1:da:f9:3f:22:0c:c2:c9:2b:bb:12: 6e:ae:22:fe:d5:4d:18:95:32:53:50:27:4c:3a:3e:dd:e1:6d: b1:02:c9:7a:ef:1d:8d:1f:8c:9f:2d:9b:fe:b9:0a:fe:80:27: 9d:94:d7:90:21:5e:c2:1d:ec:0a:3d:bd:07:c8:23:c8:12:34: c5:ae:5f:dd:5b:b5:8b:f0:80:0b:b2:0f:15:fa:52:10:cd:06: b3:dd:8f:f4:53:6a:71:76:c0:30:50:ec:6e:e7:10:a5:c9:d3: e1:70:d3:da:60:8b:56:d3:16:e6:99:86:58:60:af:ef:26:e8: 03:e4:18:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpVEws6bmYNaY3aWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYyNzE3MDI1MVoXDTI1MDkyNTE3MDI1MVowLzEtMCsGA1UEAxMk ODY5ZTc2YzgtNmQxYy00N2VhLWFiZDgtMmRiYWY4Yzc3NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR7Tuz6lvEZWJr/2fPk97Dsj792VMh7nBqxj QJmu1IA/sRuWHQBkM3E0r9LqaYaYZAy+1sWfzup79EjL4SIZD+KLFhxiKqhiSkrf K7AB4gHXWPPLsB1219G04yfJRAH1/TR+46CR1/YYCOtf0S6Ty+blU034HhJZ9r5t 6pZFtQtmfsNFGoniMuKl1RshE+DZypreInOZeuxRQjT41ADrpW+nwiKz8dZ/2lx1 P7QNLCErI23dY4OzgXnwhUE96tUHvT/cDWFyxF0p3amBGqCP0S7daDrqWx/yWsPm pRYUPpR7YVAVD9Z94QPJKBkDyRCuOhsRvPMbrKIG/cTTFa9jdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8+sUxa76udgDZ4cqSlTfJfWlXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzI0ZGQ3MzEtM2Y3Yy0z OTUzLTkwNDEtNjFlMzdkYmU3NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvyjiXQXNxEJpNbZFsV5a/h2vBMtIexvgcQ8VL0qU7kOgjdlqwY8vW9 Lpb+BNMatNTfmV1ScvXrkmv5iah/WHT5aDydEU1iJzmr/QQif8e6tKXmDbVsZLtF AnBBclVIL6e9KFv1mcHuvmYYqwAT13EN261KsHcYjqZYU8sDihzRV8jDs7bx2vk/ IgzCySu7Em6uIv7VTRiVMlNQJ0w6Pt3hbbECyXrvHY0fjJ8tm/65Cv6AJ52U15Ah XsId7Ao9vQfII8gSNMWuX91btYvwgAuyDxX6UhDNBrPdj/RTanF2wDBQ7G7nEKXJ 0+Fw09pgi1bTFuaZhlhgr+8m6APkGIk= -----END CERTIFICATE-----Generated at Mon Jun 30 16:09:46 2025 by rpki-client