$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa File: 3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa (raw, json) Hash identifier: +dSYequG4td058WHQ6rJYXtWaoPHNe2nEx4LuJz3miM= Subject key identifier: D4:A4:AA:E9:FC:05:FE:2E:2E:EF:BF:E0:33:17:C5:8F:B3:28:91:5D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584953C421B854FA94811B500800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 142.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:21:b8:54:fa:94:81:1b:50:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=69f53941-cb68-4ff4-bba0-79df1a8d9c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:0d:93:fe:fc:57:1c:9f:56:77:a2:27:6d: 5a:29:63:33:3f:5c:37:29:09:c7:41:4b:9c:03:89: f4:24:12:d8:4b:d7:d3:08:fc:03:2b:bb:08:da:15: 6d:ff:3a:90:c7:d0:9c:fd:b2:51:f8:a1:ee:e8:b6: db:9d:d4:09:24:1d:a7:10:47:7e:e2:17:57:7c:56: ec:dd:4e:8b:42:04:60:0a:22:1a:85:a2:37:7f:86: 24:b4:4b:f0:08:c6:c6:1f:83:e2:57:05:98:6b:ca: 52:9a:e5:c7:68:26:90:a0:d9:47:ce:b2:98:5f:b0: 9b:22:ab:0f:a7:02:50:46:77:04:80:6d:5d:47:7d: ba:d6:26:93:46:e2:3d:69:25:c7:90:21:55:69:6b: 46:2d:05:01:8e:75:62:09:ec:75:2e:a4:02:36:2c: f5:4b:53:d2:82:79:82:57:d7:85:23:b9:aa:2b:e3: 58:70:bc:dd:62:66:6d:27:81:96:2e:fc:4e:04:3f: a3:2f:4a:7a:ea:df:4f:7a:7c:4e:c8:66:1a:1c:f7: 0f:c9:69:2d:1f:c8:cc:56:bf:45:7c:8d:ed:0a:0d: 12:7f:d9:1a:ba:53:46:8a:75:46:35:18:0a:e4:7c: fb:90:a8:59:49:38:f3:65:34:6a:90:78:17:f9:dc: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A4:AA:E9:FC:05:FE:2E:2E:EF:BF:E0:33:17:C5:8F:B3:28:91:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b0:20:9c:bd:ea:a4:16:8b:69:bf:71:f5:46:73:99:6c:8d: 21:97:eb:b5:b6:30:9d:a5:31:c0:43:0a:cd:50:5f:cf:5d:f1: dc:aa:d6:55:9a:66:50:ea:02:96:73:df:a0:a0:d4:4e:49:a0: 55:5b:08:ea:64:1a:7f:e1:86:d3:50:c9:02:95:18:b8:85:4e: 2f:44:a4:fd:f9:ec:b5:d0:be:c3:bd:94:02:ab:00:a8:10:18: bb:ec:82:d8:26:0d:c9:5c:02:82:ae:b9:bb:9e:72:4e:11:25: ed:97:f7:20:a2:51:50:db:4e:fe:66:d2:d0:75:cc:8d:b7:2e: cd:f9:8e:de:84:f7:dc:11:e7:7b:5a:5d:8f:d2:90:8f:55:b0: cc:f1:a6:d3:8a:be:3e:48:da:d4:d5:48:f5:53:8a:88:1b:a0: 29:97:8f:ef:c2:46:3c:08:d7:fc:d8:8b:06:92:0f:c1:a5:fe: f9:94:dd:9e:48:f5:ac:54:2c:db:74:ba:d7:5b:f1:e6:97:91: a8:54:ca:0c:a0:c7:f3:95:ed:ff:f9:ae:26:e7:c7:68:49:6c: ed:d2:af:8a:e6:a7:35:bc:f6:fa:e0:85:90:57:80:d9:f2:26: 3e:c8:30:da:29:ef:be:6a:f7:1b:d2:05:47:cf:a4:d6:00:09: e9:0d:3a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCG4VPqUgRtQCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjlmNTM5NDEtY2I2OC00ZmY0LWJiYTAtNzlkZjFhOGQ5YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDUNk/78VxyfVneiJ21aKWMzP1w3KQnHQUuc A4n0JBLYS9fTCPwDK7sI2hVt/zqQx9Cc/bJR+KHu6LbbndQJJB2nEEd+4hdXfFbs 3U6LQgRgCiIahaI3f4YktEvwCMbGH4PiVwWYa8pSmuXHaCaQoNlHzrKYX7CbIqsP pwJQRncEgG1dR3261iaTRuI9aSXHkCFVaWtGLQUBjnViCex1LqQCNiz1S1PSgnmC V9eFI7mqK+NYcLzdYmZtJ4GWLvxOBD+jL0p66t9PenxOyGYaHPcPyWktH8jMVr9F fI3tCg0Sf9kaulNGinVGNRgK5Hz7kKhZSTjzZTRqkHgX+dwoswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSkqun8Bf4uLu+/4DMXxY+zKJFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EyYzYzYzQtNDZlNy0z YjI0LWFlNTctMGVhYTM5NjliMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2wIJy96qQWi2m/cfVGc5lsjSGX67W2MJ2lMcBDCs1QX89d8dyq1lWa ZlDqApZz36Cg1E5JoFVbCOpkGn/hhtNQyQKVGLiFTi9EpP357LXQvsO9lAKrAKgQ GLvsgtgmDclcAoKuubueck4RJe2X9yCiUVDbTv5m0tB1zI23Ls35jt6E99wR53ta XY/SkI9VsMzxptOKvj5I2tTVSPVTiogboCmXj+/CRjwI1/zYiwaSD8Gl/vmU3Z5I 9axULNt0utdb8eaXkahUygygx/OV7f/5ribnx2hJbO3Sr4rmpzW89vrghZBXgNny Jj7IMNop775q9xvSBUfPpNYACekNOh0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:45 2025 by rpki-client