$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48a11a6c-524c-3301-9d25-d0a2b413f4d3.roa File: 48a11a6c-524c-3301-9d25-d0a2b413f4d3.roa (raw, json) Hash identifier: c/T7soeYjb1BYQ3J/KcwO0QVbUjiuX5PW+/kHHCdJjQ= Subject key identifier: A9:A3:34:37:ED:DA:AE:AB:D8:7B:6F:FF:D3:7E:0A:A6:05:9C:24:8F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B624494C200CFD66C5279A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48a11a6c-524c-3301-9d25-d0a2b413f4d3.roa Signing time: Thu 01 May 2025 18:44:03 +0000 ROA not before: Thu 01 May 2025 18:44:03 +0000 ROA not after: Wed 30 Jul 2025 18:44:03 +0000 asID: 401152 IP address blocks: 142.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:24:49:4c:20:0c:fd:66:c5:27:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 18:44:03 2025 GMT Not After : Jul 30 18:44:03 2025 GMT Subject: CN=11caf3ef-48a5-42aa-b50d-d30f0db2c7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:36:62:88:36:91:99:13:47:4c:34:78:88: 71:74:2b:11:27:4a:d5:31:0e:f1:c9:05:2c:8d:4e: a1:bf:8c:ae:b8:92:6a:01:1b:fd:3b:80:34:09:8e: 94:93:c1:65:0b:f5:6c:4b:34:79:b0:d8:74:fd:58: 3d:01:39:91:d0:86:80:f8:8d:a9:d4:e2:4c:9a:f2: 85:69:98:7d:da:c5:33:62:ab:63:e6:db:11:57:00: 35:86:40:5d:1e:d3:ff:fd:bf:53:e1:66:8b:5d:db: 10:db:5b:5f:7b:b5:0b:51:91:ca:ca:b4:fe:a8:b7: ed:f2:cf:2a:cf:58:cc:9d:7d:44:ec:ce:37:07:1a: 11:e8:1f:b4:69:44:94:f0:49:82:ec:52:31:95:d4: a1:0c:a2:7c:2b:47:e9:5b:ff:1f:31:8d:fe:47:a4: 0e:ee:9f:50:f6:2c:ed:57:3c:ab:8f:2c:f5:1f:81: 16:45:9d:cf:79:17:68:e2:46:c2:dd:8a:b9:87:f1: b9:e8:10:18:2c:f1:c9:8d:0a:c4:82:c8:51:b0:d8: f1:0a:a8:79:19:68:0c:81:27:70:cc:60:a3:ad:49: 4b:b5:1c:5b:84:50:ef:27:c2:f9:01:2e:44:82:c4: 78:d3:78:28:58:fa:38:5c:a2:1b:a0:ee:52:d2:cb: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:34:37:ED:DA:AE:AB:D8:7B:6F:FF:D3:7E:0A:A6:05:9C:24:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48a11a6c-524c-3301-9d25-d0a2b413f4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:83:01:2b:10:e0:ed:46:66:4b:da:d1:5d:e3:f3:74:56:67: 88:aa:de:24:81:63:10:46:4d:a6:58:d0:27:79:ac:52:51:fc: 9b:36:1f:31:78:c8:06:3a:75:43:9f:f7:32:2b:15:8c:44:4d: 6b:93:cf:ad:9c:a5:85:19:02:c9:82:94:7f:23:57:12:15:ec: 57:10:fe:cf:95:e8:ba:ef:19:9c:94:d7:48:fb:5c:5e:16:e9: 00:49:be:b5:91:bc:b4:a9:c2:c5:1b:91:32:12:0f:08:1d:49: 85:be:43:c0:29:6e:7f:c7:06:0f:dc:4f:52:61:1b:89:08:4b: 59:79:6d:95:ff:75:53:9e:da:ba:04:71:b2:f0:01:2f:d8:44: 51:d5:3c:02:09:ab:5d:d6:96:45:45:fb:ee:23:8a:c5:22:f0: 8c:d2:25:87:90:36:ac:48:8f:30:10:c7:c7:e8:3f:3d:55:2b: ee:cc:be:a6:a8:7a:7a:fb:11:f6:98:3a:6a:41:5b:af:bb:65: 4e:ff:13:fc:ed:d1:c7:bf:d6:23:dd:c4:3d:9e:13:f3:20:6c: 44:7a:a9:49:dd:ad:ea:e5:e2:8a:ce:63:ba:12:21:f9:3d:8e: a5:95:f6:9b:c9:58:42:d0:fc:c1:05:c6:3d:62:5c:f1:9e:ef: 8a:86:4a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2JElMIAz9ZsUnmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTE4NDQwM1oXDTI1MDczMDE4NDQwM1owLzEtMCsGA1UEAxMk MTFjYWYzZWYtNDhhNS00MmFhLWI1MGQtZDMwZjBkYjJjN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDw2Yog2kZkTR0w0eIhxdCsRJ0rVMQ7xyQUs jU6hv4yuuJJqARv9O4A0CY6Uk8FlC/VsSzR5sNh0/Vg9ATmR0IaA+I2p1OJMmvKF aZh92sUzYqtj5tsRVwA1hkBdHtP//b9T4WaLXdsQ21tfe7ULUZHKyrT+qLft8s8q z1jMnX1E7M43BxoR6B+0aUSU8EmC7FIxldShDKJ8K0fpW/8fMY3+R6QO7p9Q9izt Vzyrjyz1H4EWRZ3PeRdo4kbC3Yq5h/G56BAYLPHJjQrEgshRsNjxCqh5GWgMgSdw zGCjrUlLtRxbhFDvJ8L5AS5EgsR403goWPo4XKIboO5S0suM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmjNDft2q6r2Htv/9N+CqYFnCSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDhhMTFhNmMtNTI0Yy0z MzAxLTlkMjUtZDBhMmI0MTNmNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2DASsQ4O1GZkva0V3j83RWZ4iq3iSBYxBGTaZY0Cd5rFJR/Js2HzF4 yAY6dUOf9zIrFYxETWuTz62cpYUZAsmClH8jVxIV7FcQ/s+V6LrvGZyU10j7XF4W 6QBJvrWRvLSpwsUbkTISDwgdSYW+Q8Apbn/HBg/cT1JhG4kIS1l5bZX/dVOe2roE cbLwAS/YRFHVPAIJq13WlkVF++4jisUi8IzSJYeQNqxIjzAQx8foPz1VK+7Mvqao enr7EfaYOmpBW6+7ZU7/E/zt0ce/1iPdxD2eE/MgbER6qUndrerl4orOY7oSIfk9 jqWV9pvJWELQ/MEFxj1iXPGe74qGStg= -----END CERTIFICATE-----Generated at Thu May 8 11:27:16 2025 by rpki-client