$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d066f70b-d063-366c-b423-5d1a25aa11c6.roa File: d066f70b-d063-366c-b423-5d1a25aa11c6.roa (raw, json) Hash identifier: kfdLXXskplaitb+Z5sLCcO2ogSC58uqeT+b0oqVfhCA= Subject key identifier: AB:D4:6F:3A:A1:18:93:E3:8E:0D:B3:81:67:91:69:ED:EA:33:C9:E9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294ADC17E358517EDD56F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d066f70b-d063-366c-b423-5d1a25aa11c6.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 142.111.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ad:c1:7e:35:85:17:ed:d5:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=595fdf1b-4fd7-4476-ac37-b57f91502032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:2c:3d:b6:fe:6c:e9:af:39:ac:3e:be:4b: a3:36:03:8f:c9:0e:28:0e:e5:4c:8c:66:f0:30:0b: 36:6e:a9:ca:e4:5f:e5:ef:aa:8d:4c:64:15:ef:f3: f0:96:b1:b4:bd:c9:74:70:ae:25:fe:15:60:75:56: 72:18:bb:c3:13:54:ac:73:74:04:0e:02:8e:9b:bf: 43:74:60:13:25:65:2a:c0:67:dc:96:e1:ec:55:04: f9:90:b6:65:3b:0c:ad:86:a2:cf:f6:f6:5c:4c:2a: 96:93:a1:5a:f3:5e:f7:3a:be:3a:69:25:4e:0b:ab: dc:57:e8:37:8f:a5:cc:76:5f:52:7d:eb:df:cd:d1: 6c:6c:42:15:e0:01:46:fc:9c:6c:df:9f:a4:c2:2c: 9b:27:9b:07:ec:d2:07:5a:4c:8a:45:e2:99:d3:21: ca:41:6c:8b:c9:ae:44:bb:71:9e:41:0c:9f:9c:c3: 2e:2f:2d:01:46:d0:4a:88:a0:8a:5c:be:8a:e8:44: a3:f3:27:bd:d7:6e:dd:03:50:d6:e3:0f:91:92:b4: 59:5f:4c:59:cb:e0:56:ed:0b:ac:93:18:ea:65:f3: 4a:1d:b6:60:27:d7:11:67:c5:2f:89:7f:58:28:c2: d3:cc:0d:17:4f:f4:2e:e8:a0:75:fb:13:04:62:ce: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:6F:3A:A1:18:93:E3:8E:0D:B3:81:67:91:69:ED:EA:33:C9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d066f70b-d063-366c-b423-5d1a25aa11c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d9:cd:cd:8d:32:aa:46:5a:df:c0:54:b4:3a:d7:8e:a8:b7: 6c:2d:fd:6d:84:5c:91:e0:e6:69:bf:65:31:4c:2c:58:39:cb: fa:b6:0f:df:5d:1b:17:b1:a0:b2:2d:af:3b:7b:78:ac:36:84: 0e:ab:c8:98:ea:c5:94:4c:bb:59:36:6b:7f:a6:85:97:39:3b: f0:5e:eb:2e:11:5e:de:d2:b8:bd:09:d7:f4:b2:f1:54:ab:71: 56:d1:96:6f:7e:d7:c2:34:e0:cf:2a:75:2b:bf:10:0a:0d:b6: 3b:19:e4:2d:c0:f7:5f:9e:81:94:ae:2b:2a:f1:91:ce:69:4d: 4a:36:c0:ae:21:2f:f7:2b:76:6b:40:c0:b5:99:3e:ff:9c:9a: 7a:38:d5:6d:31:58:f2:df:53:87:05:ae:10:05:a8:31:84:09: 67:1b:9f:5b:37:28:f1:4c:92:87:57:d0:be:b2:5e:ca:8a:12: 28:43:31:3a:94:e5:b0:86:9b:b9:ae:dc:af:7f:d8:81:18:57: 66:b1:5a:14:e4:ee:4c:83:3e:09:7a:af:bf:94:21:c1:44:c0: 87:b1:53:6d:a4:0f:35:03:5e:65:06:9d:c9:df:3d:41:cd:d1: 88:27:fa:d7:ab:7e:4c:a7:18:4e:91:eb:8d:fd:32:dd:74:42: 14:eb:9e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlK3BfjWFF+3Vb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTk1ZmRmMWItNGZkNy00NDc2LWFjMzctYjU3ZjkxNTAyMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHIsPbb+bOmvOaw+vkujNgOPyQ4oDuVMjGbw MAs2bqnK5F/l76qNTGQV7/PwlrG0vcl0cK4l/hVgdVZyGLvDE1Ssc3QEDgKOm79D dGATJWUqwGfcluHsVQT5kLZlOwythqLP9vZcTCqWk6Fa8173Or46aSVOC6vcV+g3 j6XMdl9SfevfzdFsbEIV4AFG/Jxs35+kwiybJ5sH7NIHWkyKReKZ0yHKQWyLya5E u3GeQQyfnMMuLy0BRtBKiKCKXL6K6ESj8ye9127dA1DW4w+RkrRZX0xZy+BW7Qus kxjqZfNKHbZgJ9cRZ8UviX9YKMLTzA0XT/Qu6KB1+xMEYs4SEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvUbzqhGJPjjg2zgWeRae3qM8npMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDA2NmY3MGItZDA2My0z NjZjLWI0MjMtNWQxYTI1YWExMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbZzc2NMqpGWt/AVLQ6146ot2wt/W2EXJHg5mm/ZTFMLFg5y/q2D99d GxexoLItrzt7eKw2hA6ryJjqxZRMu1k2a3+mhZc5O/Be6y4RXt7SuL0J1/Sy8VSr cVbRlm9+18I04M8qdSu/EAoNtjsZ5C3A91+egZSuKyrxkc5pTUo2wK4hL/crdmtA wLWZPv+cmno41W0xWPLfU4cFrhAFqDGECWcbn1s3KPFMkodX0L6yXsqKEihDMTqU 5bCGm7mu3K9/2IEYV2axWhTk7kyDPgl6r7+UIcFEwIexU22kDzUDXmUGncnfPUHN 0Ygn+terfkynGE6R6439Mt10QhTrnpA= -----END CERTIFICATE-----Generated at Tue May 6 06:17:34 2025 by rpki-client