$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa File: a25adc19-0b0f-3e58-9770-caf9c965b218.roa (raw, json) Hash identifier: fsQ1A/7v69FKS1aBX9haPw2KWugm5KghUAx7vvO2gsY= Subject key identifier: B6:3B:EE:CA:AB:A5:6C:4B:44:D5:C0:05:F9:A1:38:4A:5E:B9:6E:EF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B65256899ADAF9D81470 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 142.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b6:52:56:89:9a:da:f9:d8:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=a4bab5c1-0ffd-4ead-8b87-d03e5bb5cffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:50:ad:a9:78:3f:32:1a:eb:81:00:c8:26: 42:02:e0:ee:22:29:91:ce:1b:2f:7c:61:e3:27:91: 74:6c:41:08:35:b2:9e:94:02:3a:a9:16:f7:ae:cb: 58:5e:9b:5e:d5:07:42:eb:70:ed:21:58:12:49:5a: 1a:7b:e0:af:e3:c5:35:03:d5:fb:5e:77:b2:88:06: 01:11:53:12:f7:56:ce:6a:5c:be:ab:04:d7:eb:7d: 28:ac:d2:4b:3e:3c:1d:00:b1:26:cd:81:76:5c:32: cb:a4:e3:ae:20:d5:18:78:18:ed:e3:6b:be:1c:84: fb:01:e3:34:86:96:7a:88:e2:f0:eb:c8:28:60:1b: 2a:bb:b4:20:ff:73:8b:89:2b:74:97:1c:7c:17:da: 2e:e1:f8:cb:b0:7b:16:1e:4a:ac:4c:8b:ed:d1:b8: 7e:51:5a:81:33:91:f3:31:f3:fd:59:aa:98:39:bd: 52:9e:ab:95:82:1f:37:c7:af:93:54:a6:92:9d:cf: 80:f3:e1:9f:9d:8f:07:d8:0d:59:04:16:0c:70:60: 03:36:7c:d4:70:d0:06:53:67:88:ed:24:0b:70:34: f8:04:f7:e1:7c:f2:a8:7e:5e:7e:04:08:f4:a1:fe: 51:ba:e4:ed:53:2d:5a:bb:bf:fc:4b:5f:43:b1:43: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3B:EE:CA:AB:A5:6C:4B:44:D5:C0:05:F9:A1:38:4A:5E:B9:6E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a0:43:86:12:4e:f4:06:9f:9d:37:13:34:af:ac:10:9b:3b: 91:a7:b5:0e:c7:4d:d5:84:29:7f:cc:83:36:be:cd:d7:f9:c5: 47:91:68:25:ea:f4:ef:ee:82:b4:30:23:b9:e1:34:b0:3d:5f: 38:af:40:bb:2d:68:96:13:a2:2e:45:c9:85:5e:e9:c0:fb:5f: 65:72:0d:7d:d7:e4:35:c6:72:8c:4e:28:7a:30:7e:0d:5f:d8: 3c:f8:e4:f6:69:d8:71:62:bd:7d:0e:98:95:30:9b:23:07:61: 46:ca:32:b6:78:10:9a:18:e7:6f:9f:26:98:5a:85:09:f9:b8: e4:61:92:41:89:4f:6e:b7:1d:2c:8b:69:d7:57:78:02:dd:cd: 99:21:9f:1e:af:2a:d8:86:44:3a:80:82:31:eb:01:57:41:6d: c5:f4:d2:f2:a2:2d:04:83:a0:9b:54:38:ed:d7:3a:e0:bc:b6: b0:b7:b7:15:cb:75:a8:02:99:69:40:d0:91:61:f2:fe:73:c2: 20:64:64:5d:fb:18:e8:7a:2b:3b:15:5d:82:1c:70:19:8e:a5: 01:2d:7e:6c:16:77:1f:83:c3:bd:21:81:b3:81:bb:7c:94:a5: f1:9c:03:50:41:ba:26:a5:90:e6:f6:b2:cd:c0:00:fc:1a:e9: b5:50:9f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLZSVoma2vnYFHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YTRiYWI1YzEtMGZmZC00ZWFkLThiODctZDAzZTViYjVjZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltRQral4PzIa64EAyCZCAuDuIimRzhsvfGHj J5F0bEEINbKelAI6qRb3rstYXpte1QdC63DtIVgSSVoae+Cv48U1A9X7XneyiAYB EVMS91bOaly+qwTX630orNJLPjwdALEmzYF2XDLLpOOuINUYeBjt42u+HIT7AeM0 hpZ6iOLw68goYBsqu7Qg/3OLiSt0lxx8F9ou4fjLsHsWHkqsTIvt0bh+UVqBM5Hz MfP9WaqYOb1SnquVgh83x6+TVKaSnc+A8+GfnY8H2A1ZBBYMcGADNnzUcNAGU2eI 7SQLcDT4BPfhfPKofl5+BAj0of5RuuTtUy1au7/8S19DsUNK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY77sqrpWxLRNXABfmhOEpeuW7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTI1YWRjMTktMGIwZi0z ZTU4LTk3NzAtY2FmOWM5NjViMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJigQ4YSTvQGn503EzSvrBCbO5GntQ7HTdWEKX/Mgza+zdf5xUeRaCXq 9O/ugrQwI7nhNLA9XzivQLstaJYToi5FyYVe6cD7X2VyDX3X5DXGcoxOKHowfg1f 2Dz45PZp2HFivX0OmJUwmyMHYUbKMrZ4EJoY52+fJphahQn5uORhkkGJT263HSyL addXeALdzZkhnx6vKtiGRDqAgjHrAVdBbcX00vKiLQSDoJtUOO3XOuC8trC3txXL dagCmWlA0JFh8v5zwiBkZF37GOh6KzsVXYIccBmOpQEtfmwWdx+Dw70hgbOBu3yU pfGcA1BBuialkOb2ss3AAPwa6bVQn6w= -----END CERTIFICATE-----Generated at Tue May 6 06:21:12 2025 by rpki-client