$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa File: 3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa (raw, json) Hash identifier: R6724AX8dRU63RhG27WTmvxE4ZD/qvCWX4vqfbkQNjw= Subject key identifier: 38:C1:41:20:FA:BC:42:54:AF:1D:30:B9:36:21:05:7A:49:53:16:42 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A331B0596AB2F69F49B4DCF80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 9009 IP address blocks: 142.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:05:96:ab:2f:69:f4:9b:4d:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=5370dd5d-318f-464b-9777-a7fd4801f6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:4b:93:67:ec:ba:6e:a6:8d:4c:94:12:b9: cf:fc:97:7a:4a:99:c3:06:6e:1c:fe:ed:4c:a8:72: a6:80:7a:c9:9c:90:7d:57:66:1e:cb:20:8f:f3:3f: 5f:95:25:88:7e:ea:12:bf:d0:09:cd:0e:5f:05:35: b7:84:c2:29:67:25:bc:17:d9:9c:6f:ed:31:df:87: be:a8:76:66:1c:d3:06:60:4d:09:f4:77:4d:c5:2a: ec:a8:e0:4c:36:64:55:4b:f7:59:08:3a:2d:80:19: 2b:98:22:81:92:39:54:c1:2c:64:70:af:94:fc:4c: 3f:d0:cb:0b:38:ea:3a:b0:04:03:83:52:67:ec:a7: 17:b6:64:3a:8a:cc:ac:96:3c:f9:0c:7b:b3:39:d7: 33:ad:99:6c:6f:74:09:a2:5a:dd:e3:49:ad:60:be: b3:66:50:23:9e:37:1b:6a:45:cc:da:b7:e5:50:88: 33:c4:af:63:b2:c3:30:74:55:7d:63:88:d0:a8:d4: 13:d7:fe:30:f9:e5:ae:33:ab:87:1b:85:9c:29:3c: 92:5e:51:0d:3c:ed:51:87:d4:ba:1e:d6:b1:14:a2: 02:ed:e3:a6:ff:30:14:39:f6:d2:b0:f5:98:fb:82: cc:73:08:87:12:55:ef:60:51:cf:0c:44:20:c2:1c: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C1:41:20:FA:BC:42:54:AF:1D:30:B9:36:21:05:7A:49:53:16:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:65:df:25:02:ca:3b:1d:08:9f:72:7a:48:05:2d:c9:53:e0: b7:8a:09:0d:35:00:da:c8:9b:58:ce:a0:85:95:b1:89:33:82: ef:ce:7b:3a:ff:02:b2:12:e0:30:ab:b4:8d:98:22:5b:18:be: 07:3c:07:21:53:04:c0:57:22:36:45:64:f5:0b:57:76:85:7f: 98:cf:1b:dd:07:79:74:72:b7:c5:63:8f:2c:f0:ac:56:c9:f7: 07:f4:b1:81:86:a4:74:d0:f8:32:63:84:db:db:f6:3d:1a:f2: c4:51:1c:74:1e:e5:6a:d3:74:34:da:26:19:67:e3:85:7b:e9: c8:26:13:a7:2a:38:11:58:d7:2c:3b:fb:dc:9b:91:f3:85:05: 37:31:a5:16:ed:0f:d7:79:29:f0:f7:e0:29:64:65:42:f4:10: bd:e1:14:ba:11:17:cd:5b:35:ee:d1:41:64:ed:c1:40:b9:98: 03:5c:79:28:00:55:66:3d:24:b6:ee:74:ef:5d:a8:2d:2f:38: 2b:3a:79:e5:96:70:36:01:67:79:ac:0d:1e:1d:17:36:11:72: cf:a9:77:ec:94:04:df:4e:d9:44:f5:32:ab:11:2a:8a:76:38: 93:34:94:d9:46:c1:dc:0a:ba:ce:b1:bf:7c:f0:96:fa:3e:b3: 46:50:d8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGwWWqy9p9JtNz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NTM3MGRkNWQtMzE4Zi00NjRiLTk3NzctYTdmZDQ4MDFmNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuRLk2fsum6mjUyUErnP/Jd6SpnDBm4c/u1M qHKmgHrJnJB9V2YeyyCP8z9flSWIfuoSv9AJzQ5fBTW3hMIpZyW8F9mcb+0x34e+ qHZmHNMGYE0J9HdNxSrsqOBMNmRVS/dZCDotgBkrmCKBkjlUwSxkcK+U/Ew/0MsL OOo6sAQDg1Jn7KcXtmQ6isysljz5DHuzOdczrZlsb3QJolrd40mtYL6zZlAjnjcb akXM2rflUIgzxK9jssMwdFV9Y4jQqNQT1/4w+eWuM6uHG4WcKTySXlENPO1Rh9S6 HtaxFKIC7eOm/zAUOfbSsPWY+4LMcwiHElXvYFHPDEQgwhzijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjBQSD6vEJUrx0wuTYhBXpJUxZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EyYzYzYzQtNDZlNy0z YjI0LWFlNTctMGVhYTM5NjliMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJl3yUCyjsdCJ9yekgFLclT4LeKCQ01ANrIm1jOoIWVsYkzgu/Oezr/ ArIS4DCrtI2YIlsYvgc8ByFTBMBXIjZFZPULV3aFf5jPG90HeXRyt8VjjyzwrFbJ 9wf0sYGGpHTQ+DJjhNvb9j0a8sRRHHQe5WrTdDTaJhln44V76cgmE6cqOBFY1yw7 +9ybkfOFBTcxpRbtD9d5KfD34ClkZUL0EL3hFLoRF81bNe7RQWTtwUC5mANceSgA VWY9JLbudO9dqC0vOCs6eeWWcDYBZ3msDR4dFzYRcs+pd+yUBN9O2UT1MqsRKop2 OJM0lNlGwdwKus6xv3zwlvo+s0ZQ2EM= -----END CERTIFICATE-----Generated at Sun Jun 29 01:42:55 2025 by rpki-client