$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31daf63b-28c9-333b-8ef4-95fea118af11.roa File: 31daf63b-28c9-333b-8ef4-95fea118af11.roa (raw, json) Hash identifier: bXIBF5oXrfX8No5wKfgGorH2WG57rb1bueqK6NgHbLY= Subject key identifier: 31:3A:FA:2F:0D:3A:9B:18:B6:47:FE:60:8B:06:4E:59:D6:0D:EB:8B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858495D89740DFFBAF4C92204E6C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31daf63b-28c9-333b-8ef4-95fea118af11.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 50131 IP address blocks: 143.109.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:74:0d:ff:ba:f4:c9:22:04:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=744249e8-a33f-4220-86d7-545aea95eb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:ca:dd:21:d1:48:07:62:8b:6b:01:7c:9d: 71:44:b1:f4:51:e6:7b:e7:ee:31:3c:f7:98:ea:06: 10:93:51:c1:20:65:be:f0:83:04:96:bd:cd:bc:6f: 38:00:f5:51:8f:95:d7:6b:b4:58:29:3a:90:f4:30: 36:98:00:b9:16:ba:6b:b0:02:bf:9b:e9:ac:37:0a: 9d:0e:73:3c:0c:c3:91:06:1e:df:ac:ad:b1:a7:b9: fe:0d:41:43:90:45:8d:ea:3f:c3:e9:19:4e:12:43: 41:06:2d:78:1a:c6:53:66:72:e3:e1:e3:0c:82:5f: 0d:ab:8a:0d:60:e5:1e:18:66:a2:97:53:eb:51:b2: a0:f0:07:0b:36:51:f8:52:4d:97:35:6d:a0:50:c2: e0:aa:0a:d4:6b:56:e8:ab:82:17:e4:a6:e8:22:85: b9:8b:58:9f:7c:92:6b:1d:bf:6e:4a:5b:e9:67:28: 91:a4:87:20:38:ec:af:2e:45:08:b8:be:5a:f5:22: 3c:89:cf:df:34:e3:d0:f6:df:ab:83:02:7e:65:66: 91:fa:ac:34:28:5f:40:24:c0:ba:05:00:32:74:35: ce:b4:76:a1:c8:59:4d:37:3f:66:68:88:32:c3:4d: 7f:4f:c7:d6:a7:94:a4:8e:00:32:28:e4:76:62:f5: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:FA:2F:0D:3A:9B:18:B6:47:FE:60:8B:06:4E:59:D6:0D:EB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31daf63b-28c9-333b-8ef4-95fea118af11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 143.109.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:83:6d:6f:75:38:dd:c2:52:18:a0:e0:0d:39:48:46:f3:b4: 2c:94:9d:64:93:2f:01:6b:12:dd:ca:9d:bf:b7:e6:7f:05:d3: 0c:e1:1c:d0:f2:79:11:53:54:1a:33:02:9a:de:a5:ec:5a:9d: 01:d1:93:fb:36:c9:90:7e:82:45:77:93:f0:ae:53:b1:7f:28: 68:16:f0:af:22:30:a9:48:0a:20:d8:5a:a6:e0:da:79:94:51: c8:49:43:1e:8d:12:60:d5:f5:ef:e1:e5:2e:6b:c0:6d:c5:d1: 24:c5:7f:b8:7f:1b:48:f2:36:06:9f:f3:b3:43:3d:85:75:52: f4:a5:d9:a7:f2:0e:36:2f:ba:b6:d9:d0:0f:7d:80:74:be:41: 54:05:a5:59:b7:e6:90:42:ef:74:6a:d1:f9:55:e8:9c:1b:ff: ba:c0:23:ca:e6:00:b2:3c:52:57:70:30:a3:82:06:4e:96:44: 51:73:2c:0e:b5:95:e4:48:56:09:f0:62:fd:e2:30:e4:62:0a: 6a:e8:59:ce:ce:74:ea:6c:e9:a4:08:f5:40:2c:0e:f1:ed:bb: b1:74:8f:29:99:da:87:47:15:9a:0f:f0:96:82:70:30:a1:2c: 58:33:6d:3d:63:84:59:08:9b:e7:2c:3f:09:6b:ad:7b:98:32: 16:07:f8:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiXQN/7r0ySIE5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzQ0MjQ5ZTgtYTMzZi00MjIwLTg2ZDctNTQ1YWVhOTVlYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyvK3SHRSAdii2sBfJ1xRLH0UeZ75+4xPPeY 6gYQk1HBIGW+8IMElr3NvG84APVRj5XXa7RYKTqQ9DA2mAC5FrprsAK/m+msNwqd DnM8DMORBh7frK2xp7n+DUFDkEWN6j/D6RlOEkNBBi14GsZTZnLj4eMMgl8Nq4oN YOUeGGail1PrUbKg8AcLNlH4Uk2XNW2gUMLgqgrUa1boq4IX5KboIoW5i1iffJJr Hb9uSlvpZyiRpIcgOOyvLkUIuL5a9SI8ic/fNOPQ9t+rgwJ+ZWaR+qw0KF9AJMC6 BQAydDXOtHahyFlNNz9maIgyw01/T8fWp5SkjgAyKOR2YvUv4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE6+i8NOpsYtkf+YIsGTlnWDeuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzFkYWY2M2ItMjhjOS0z MzNiLThlZjQtOTVmZWExMThhZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj20oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyDbW91ON3CUhig4A05SEbztCyUnWSTLwFrEt3Knb+35n8F0wzhHNDy eRFTVBozAprepexanQHRk/s2yZB+gkV3k/CuU7F/KGgW8K8iMKlICiDYWqbg2nmU UchJQx6NEmDV9e/h5S5rwG3F0STFf7h/G0jyNgaf87NDPYV1UvSl2afyDjYvurbZ 0A99gHS+QVQFpVm35pBC73Rq0flV6Jwb/7rAI8rmALI8UldwMKOCBk6WRFFzLA61 leRIVgnwYv3iMORiCmroWc7OdOps6aQI9UAsDvHtu7F0jymZ2odHFZoP8JaCcDCh LFgzbT1jhFkIm+csPwlrrXuYMhYH+JY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:40:11 2025 by rpki-client