$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b596a15f-1fca-3b4c-afe6-06b1293db100.roa File: b596a15f-1fca-3b4c-afe6-06b1293db100.roa (raw, json) Hash identifier: zMXIzMt3GIyoYFLWALXfo+RZAQZURsIsFKT/c3PnB7o= Subject key identifier: 43:B1:DB:E8:92:35:68:17:2D:03:0E:16:53:FC:16:EA:59:F7:03:B6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A42758CAA2D41C5284D608500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b596a15f-1fca-3b4c-afe6-06b1293db100.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 142.111.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8c:aa:2d:41:c5:28:4d:60:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=44bcff7a-cf75-4bdd-b22d-01371b464f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:56:c7:86:d0:7e:73:ba:cc:dc:10:ad:c0: 97:f8:e0:2e:ce:3a:a2:a3:48:46:63:fe:68:92:5d: 3f:68:34:97:92:8f:5e:e6:73:59:46:d8:58:87:ed: 08:7c:f3:73:2d:7c:15:aa:24:cf:76:92:40:95:3c: 6f:a9:1a:e6:2a:a7:2d:56:d1:78:87:d2:9e:50:e5: 2a:5c:15:0f:6f:2a:66:98:11:d4:9c:f6:22:9e:4e: bd:fa:22:6a:cb:53:9d:4b:74:b7:51:11:63:58:a4: c9:d7:1a:70:70:ca:65:a6:fc:24:11:56:ba:0d:35: b4:d3:79:e0:28:08:b9:a7:ac:16:a0:9d:e0:15:5b: f3:a4:50:cc:a1:d7:b7:b6:17:c5:19:3c:5d:30:22: 57:77:64:26:72:27:17:e4:78:ab:36:b2:a2:3f:04: 2a:0e:27:20:5b:16:c3:de:72:e9:b1:39:f8:5a:fa: ca:32:41:7a:f8:e4:76:cb:2d:3e:cb:ff:0a:cf:ef: ab:d8:18:93:8a:44:91:4a:0c:32:bc:0d:f2:23:4e: 1e:3f:36:dd:77:de:af:4b:e6:6e:6b:41:17:b0:1d: f0:5a:bf:ff:93:26:cb:8b:72:01:fa:71:47:b6:c5: 90:ad:16:89:b7:8e:6c:08:bf:70:84:51:79:b8:5e: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B1:DB:E8:92:35:68:17:2D:03:0E:16:53:FC:16:EA:59:F7:03:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b596a15f-1fca-3b4c-afe6-06b1293db100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f9:28:37:20:37:d3:51:b4:16:e6:de:63:8b:44:73:82:b9: 3e:7a:c8:ba:5f:df:3f:3e:4e:e5:f5:c6:0f:50:5e:65:79:aa: bf:5d:aa:42:37:9a:24:dc:b3:67:86:d0:9b:11:85:8a:e5:30: 14:c5:57:a6:15:70:11:10:3a:a8:6b:95:3d:c6:92:53:e9:4a: d7:f0:36:5b:ec:08:e2:7d:ea:b3:1d:ab:ea:78:56:a6:4d:27: 93:e3:1a:c5:65:1a:b3:67:78:d7:7a:f4:da:31:44:1a:4b:ad: 0a:a9:8d:15:ae:2f:1a:8a:47:3e:78:6f:5b:bb:a2:b2:3d:63: a3:96:0b:dc:10:0b:b5:72:e1:ba:65:57:62:4d:a7:b8:55:c7: cb:ce:25:4b:ab:16:40:de:b0:93:06:be:08:67:5d:a6:87:2d: b4:02:17:90:b7:60:68:d1:3d:01:1d:db:03:6a:fe:c7:2a:fd: d7:67:8a:b1:70:1e:dc:b7:e4:d5:87:21:84:26:a5:45:f3:d0: 4c:db:50:62:d1:fb:d8:cb:42:a2:9d:43:f4:59:ca:a4:2e:ff: 85:4d:1d:18:24:f1:8d:c2:68:9c:76:2b:0b:a1:bb:7e:67:78: c8:d7:80:d4:48:25:ea:6e:06:2b:75:8a:27:9c:f8:e7:36:d7: bc:61:53:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYyqLUHFKE1ghQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NDRiY2ZmN2EtY2Y3NS00YmRkLWIyMmQtMDEzNzFiNDY0Zjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ohWx4bQfnO6zNwQrcCX+OAuzjqio0hGY/5o kl0/aDSXko9e5nNZRthYh+0IfPNzLXwVqiTPdpJAlTxvqRrmKqctVtF4h9KeUOUq XBUPbypmmBHUnPYink69+iJqy1OdS3S3URFjWKTJ1xpwcMplpvwkEVa6DTW003ng KAi5p6wWoJ3gFVvzpFDMode3thfFGTxdMCJXd2QmcicX5HirNrKiPwQqDicgWxbD 3nLpsTn4WvrKMkF6+OR2yy0+y/8Kz++r2BiTikSRSgwyvA3yI04ePzbdd96vS+Zu a0EXsB3wWr//kybLi3IB+nFHtsWQrRaJt45sCL9whFF5uF5O1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOx2+iSNWgXLQMOFlP8FupZ9wO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjU5NmExNWYtMWZjYS0z YjRjLWFmZTYtMDZiMTI5M2RiMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj5KDcgN9NRtBbm3mOLRHOCuT56yLpf3z8+TuX1xg9QXmV5qr9dqkI3 miTcs2eG0JsRhYrlMBTFV6YVcBEQOqhrlT3GklPpStfwNlvsCOJ96rMdq+p4VqZN J5PjGsVlGrNneNd69NoxRBpLrQqpjRWuLxqKRz54b1u7orI9Y6OWC9wQC7Vy4bpl V2JNp7hVx8vOJUurFkDesJMGvghnXaaHLbQCF5C3YGjRPQEd2wNq/scq/ddnirFw Hty35NWHIYQmpUXz0EzbUGLR+9jLQqKdQ/RZyqQu/4VNHRgk8Y3CaJx2Kwuhu35n eMjXgNRIJepuBit1iiec+Oc217xhU1o= -----END CERTIFICATE-----Generated at Sun Jun 29 16:51:07 2025 by rpki-client