$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa File: fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa (raw, json) Hash identifier: cN7vw3IkWFMdI045BKKjUTmxx/ew57EhoPQXUbmC3HU= Subject key identifier: 91:94:AD:2A:75:3D:C2:FF:D5:27:64:17:A6:DD:55:B2:20:74:22:3F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF76DC86D29E721304AB00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 44477 IP address blocks: 142.111.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:76:dc:86:d2:9e:72:13:04:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=1e36d1e4-9a64-4cd7-aede-3758d04d0ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:d8:12:8c:63:5e:72:09:04:17:f4:42:9f: 2f:a9:cb:b1:ba:18:27:1a:9f:73:28:ab:3a:9e:e0: 61:3b:7f:47:85:a5:49:0f:d1:9c:e9:f8:72:7b:f4: 4a:e4:aa:31:b1:f1:f7:6c:35:6f:1f:8a:e0:c4:2e: 75:31:b0:59:b6:70:d4:c1:63:71:1e:00:c1:d7:e3: 8d:77:20:d5:95:27:7b:96:fc:41:6c:7f:21:5a:3c: a7:05:1b:f2:7e:79:3b:a3:f8:65:a0:f1:f0:96:94: 0e:25:28:a1:a4:74:f1:2a:59:e4:a7:c6:79:c1:00: 0a:1c:15:63:e2:60:dd:81:20:71:20:88:d2:2e:29: 84:b0:2d:ea:b4:9c:d1:37:70:4f:7f:cc:b7:66:5c: 10:f1:ca:50:0f:8b:f7:1c:18:40:65:59:5e:89:c5: 7a:3c:c3:38:15:57:8c:29:4d:9e:9e:96:a9:7a:14: 3e:f2:15:c3:d1:92:e1:8e:8a:7e:2f:d5:d4:37:bd: e7:49:39:c3:9a:28:7b:30:ab:ee:a3:82:82:54:39: c1:dc:e5:97:d2:31:38:40:20:26:7b:49:7e:46:ef: 65:2e:6c:03:ce:ed:9b:b9:8e:d9:4b:cd:63:c6:25: 05:ab:b9:64:36:26:ea:f3:cc:60:b3:10:c0:5a:12: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:AD:2A:75:3D:C2:FF:D5:27:64:17:A6:DD:55:B2:20:74:22:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f3:b0:7a:bc:be:fb:16:2e:f5:d0:1b:29:30:2d:90:40:85: b4:86:25:62:7b:65:fd:c5:64:ed:8a:39:cd:8f:4c:e5:80:e8: c1:87:62:d0:00:81:c4:41:4c:4a:a1:11:ed:af:6f:a9:14:de: 0d:1d:de:dd:c9:69:5a:d4:25:fc:57:cc:1b:a6:ae:39:45:7a: d8:63:ed:66:f5:81:21:20:4b:1a:d7:a0:31:22:cc:0b:a3:8e: 14:1f:be:1f:bb:3d:8f:8a:3b:7d:0e:5b:fe:90:fb:f8:16:28: 71:51:c7:a0:5a:65:90:99:2f:4d:d7:e2:da:1a:cb:c4:21:2c: 5c:70:a2:8f:4e:1a:95:0b:42:a8:a4:58:c2:5e:e9:50:20:f0: 57:78:0f:6d:5d:51:fd:57:04:52:37:90:35:eb:ca:58:99:31: bd:bf:c8:96:71:d9:71:5b:57:25:2b:c5:09:1c:63:a0:71:f2: 73:d0:1d:8c:7f:c0:46:43:8d:86:9e:72:5a:ab:29:c9:9d:eb: 0b:35:ff:5b:1d:e7:e6:a7:d2:34:36:f8:48:f8:ff:ca:75:3d: f4:3a:6c:11:3a:f2:3f:31:2b:a8:8c:0d:ad:47:9a:5e:9b:c7: 7d:58:49:fd:02:d3:a2:bd:07:22:94:60:d8:b1:6c:59:df:01: f5:f2:a7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3bchtKechMEqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk MWUzNmQxZTQtOWE2NC00Y2Q3LWFlZGUtMzc1OGQwNGQwY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2HYEoxjXnIJBBf0Qp8vqcuxuhgnGp9zKKs6 nuBhO39HhaVJD9Gc6fhye/RK5KoxsfH3bDVvH4rgxC51MbBZtnDUwWNxHgDB1+ON dyDVlSd7lvxBbH8hWjynBRvyfnk7o/hloPHwlpQOJSihpHTxKlnkp8Z5wQAKHBVj 4mDdgSBxIIjSLimEsC3qtJzRN3BPf8y3ZlwQ8cpQD4v3HBhAZVleicV6PMM4FVeM KU2enpapehQ+8hXD0ZLhjop+L9XUN73nSTnDmih7MKvuo4KCVDnB3OWX0jE4QCAm e0l+Ru9lLmwDzu2buY7ZS81jxiUFq7lkNibq88xgsxDAWhIwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGUrSp1PcL/1SdkF6bdVbIgdCI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmExYTRhMzUtNWQzNC0z NGY4LTgxNjItM2Y4OGRlODM2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTzsHq8vvsWLvXQGykwLZBAhbSGJWJ7Zf3FZO2KOc2PTOWA6MGHYtAA gcRBTEqhEe2vb6kU3g0d3t3JaVrUJfxXzBumrjlFethj7Wb1gSEgSxrXoDEizAuj jhQfvh+7PY+KO30OW/6Q+/gWKHFRx6BaZZCZL03X4toay8QhLFxwoo9OGpULQqik WMJe6VAg8Fd4D21dUf1XBFI3kDXryliZMb2/yJZx2XFbVyUrxQkcY6Bx8nPQHYx/ wEZDjYaeclqrKcmd6ws1/1sd5+an0jQ2+Ej4/8p1PfQ6bBE68j8xK6iMDa1Hml6b x31YSf0C06K9ByKUYNixbFnfAfXyp3g= -----END CERTIFICATE-----Generated at Sun May 11 09:07:27 2025 by rpki-client