$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7aed5354-4238-3440-8ea5-f4fe2e05182a.roa File: 7aed5354-4238-3440-8ea5-f4fe2e05182a.roa (raw, json) Hash identifier: FrcwZ6ZmNeBz3V9SnEam5EciQw045AX4dWwUjU4TMKc= Subject key identifier: 24:A0:A2:D2:DD:AD:5A:86:00:33:BB:0E:DE:81:9D:70:B5:7F:CD:8B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A15CA90500EC9795B314DAA00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7aed5354-4238-3440-8ea5-f4fe2e05182a.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 3561 IP address blocks: 142.111.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:90:50:0e:c9:79:5b:31:4d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=c0e00a2a-da76-4f2f-8f35-f4828b0cdf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:0b:90:a9:40:08:a6:42:16:89:fb:66:22: f1:a6:48:41:8a:ba:7e:18:24:04:a1:12:64:d1:41: b4:ef:60:d2:a7:71:0f:c3:bb:25:45:b5:3d:c6:c8: 8d:f8:a6:c3:76:ae:80:ee:ef:69:f3:c8:e3:c9:70: f8:ad:e4:53:ea:cb:b1:d4:f9:23:3a:3a:62:00:ad: c7:da:6d:a6:ba:4e:83:4e:7a:2f:bd:65:a1:7b:a6: 6e:a4:22:da:c0:c5:f9:3c:5a:96:94:d9:cf:d8:52: 5c:e2:10:9f:d1:eb:5c:10:b0:0b:ed:21:39:3e:1a: 89:7c:18:a1:71:b7:3b:de:42:4c:56:99:e3:e4:5e: 92:32:b3:0c:51:89:67:17:a3:5a:9a:8f:dc:f8:12: ad:f1:d1:f9:fb:fd:9e:a3:c9:04:18:3a:c5:4c:d5: 54:6f:e2:c2:03:e7:f0:3b:93:d0:0e:a7:bb:53:37: 0a:db:27:b9:aa:85:fc:a8:04:02:6d:41:76:12:62: cf:7d:5f:2d:09:c3:92:69:43:5a:61:a6:0e:70:62: 78:5b:d3:86:f2:1c:a3:59:f5:88:0e:48:0d:a9:f6: 51:72:e4:d4:39:98:9d:1e:c2:81:b9:17:aa:ab:8f: cd:ed:f6:fd:ca:b0:fb:a2:53:37:c8:2b:ee:67:25: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:A2:D2:DD:AD:5A:86:00:33:BB:0E:DE:81:9D:70:B5:7F:CD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7aed5354-4238-3440-8ea5-f4fe2e05182a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6c:c2:92:66:1a:55:f6:ca:98:4f:5d:8c:d1:30:d2:4c:d8: 4d:79:eb:b4:a4:7e:05:36:fa:1a:b9:ed:42:ce:ed:d5:b2:7e: 46:35:8c:91:38:71:be:c2:06:64:db:f0:61:a3:19:b4:3a:e9: 3c:6a:f1:1b:52:d0:67:8c:70:fd:2a:43:3d:b1:a5:26:ab:e6: 7b:ce:6c:54:3a:bc:9c:e2:79:b5:54:12:7a:50:03:25:e2:a4: a3:ee:5d:3b:17:be:c0:02:e0:61:d4:1a:9c:a0:33:df:de:fb: c6:95:3d:8f:fc:31:14:ac:bf:8f:38:56:45:75:62:94:33:20: 52:ce:02:28:35:d3:a5:af:91:fb:0c:93:65:85:71:12:85:5c: 45:81:02:ad:48:68:46:7a:e4:b3:e0:9e:c7:0b:f0:93:0c:61: 11:a4:26:a6:56:28:ab:4d:9c:97:92:7d:85:d4:8d:d4:2a:dd: cf:5a:70:22:38:ec:de:8e:18:a8:78:eb:79:2e:0a:b4:ca:9f: bf:b1:eb:5a:40:45:35:f1:48:49:e2:05:36:c3:45:fe:d1:9d: 47:cd:fd:37:32:91:1a:f0:db:fe:8d:e6:a0:05:39:74:37:6a: e3:1b:7b:51:a5:67:66:cc:62:42:71:06:e7:09:8a:ad:10:08: 7f:f5:bb:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypBQDsl5WzFNqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk YzBlMDBhMmEtZGE3Ni00ZjJmLThmMzUtZjQ4MjhiMGNkZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheULkKlACKZCFon7ZiLxpkhBirp+GCQEoRJk 0UG072DSp3EPw7slRbU9xsiN+KbDdq6A7u9p88jjyXD4reRT6sux1PkjOjpiAK3H 2m2muk6DTnovvWWhe6ZupCLawMX5PFqWlNnP2FJc4hCf0etcELAL7SE5PhqJfBih cbc73kJMVpnj5F6SMrMMUYlnF6Namo/c+BKt8dH5+/2eo8kEGDrFTNVUb+LCA+fw O5PQDqe7UzcK2ye5qoX8qAQCbUF2EmLPfV8tCcOSaUNaYaYOcGJ4W9OG8hyjWfWI DkgNqfZRcuTUOZidHsKBuReqq4/N7fb9yrD7olM3yCvuZyXJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSgotLdrVqGADO7Dt6BnXC1f82LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2FlZDUzNTQtNDIzOC0z NDQwLThlYTUtZjRmZTJlMDUxODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJswpJmGlX2yphPXYzRMNJM2E1567SkfgU2+hq57ULO7dWyfkY1jJE4 cb7CBmTb8GGjGbQ66Txq8RtS0GeMcP0qQz2xpSar5nvObFQ6vJziebVUEnpQAyXi pKPuXTsXvsAC4GHUGpygM9/e+8aVPY/8MRSsv484VkV1YpQzIFLOAig106WvkfsM k2WFcRKFXEWBAq1IaEZ65LPgnscL8JMMYRGkJqZWKKtNnJeSfYXUjdQq3c9acCI4 7N6OGKh463kuCrTKn7+x61pARTXxSEniBTbDRf7RnUfN/TcykRrw2/6N5qAFOXQ3 auMbe1GlZ2bMYkJxBucJiq0QCH/1u50= -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:34 2025 by rpki-client