$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa File: 9825f336-3da9-3d61-ab77-7695e2a1309e.roa (raw, json) Hash identifier: aKxYVfnOD0z94Ypr7NYoHIyhxVs8q4355XuiPNXy2bU= Subject key identifier: E8:43:FD:D9:13:43:9F:06:9E:35:81:7F:6C:E6:9C:F7:BB:1F:1C:1C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2B9F7BC4ACC284A0387800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 142.111.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9f:7b:c4:ac:c2:84:a0:38:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=0cd16a11-f07b-411e-a551-a7ddd0427632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:4f:d8:92:1e:d8:45:3f:0a:c4:2b:4c:1e: 54:1b:40:5e:af:94:49:7d:ff:30:81:ba:c1:71:e8: 92:3d:de:ae:1d:6b:4a:68:9d:14:0a:60:ac:62:e2: e3:3b:c2:21:dd:3f:b4:1e:0e:88:25:35:1e:ca:cd: 86:9f:ea:40:64:cc:10:e4:f7:2d:d2:54:3a:fe:a2: 38:05:d2:27:a2:93:2a:22:01:71:5a:be:fe:b3:96: dc:0a:09:72:7a:91:3a:34:c9:74:aa:29:56:cc:24: 1a:ab:1f:7e:33:e4:c1:ad:61:04:11:26:a2:57:84: ee:5c:4d:dc:d3:e7:6f:89:ae:d1:45:36:e4:c1:f1: 89:ad:8f:d8:d2:43:47:89:a9:e3:d2:56:fe:64:aa: 54:32:08:99:c7:54:9e:74:63:ec:8b:93:65:77:42: 8f:8d:05:5f:19:27:6c:6c:51:de:cc:47:cc:1c:d3: c4:d7:a9:7d:c6:3d:ff:fe:0b:07:f1:2d:07:a8:a3: fc:b7:05:54:95:54:68:0c:07:69:9a:1b:5d:48:67: 65:fb:11:2f:af:30:8e:5c:b2:6d:bd:37:0e:e7:a2: 67:8a:91:bc:74:2c:1e:7a:c8:93:af:70:11:76:4c: 6f:f1:79:15:11:d0:c1:53:d8:bd:6d:fb:59:35:82: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:43:FD:D9:13:43:9F:06:9E:35:81:7F:6C:E6:9C:F7:BB:1F:1C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:26:9f:d2:19:48:ae:58:46:bc:1d:cc:2c:16:62:d3:52:b2: 77:44:65:1b:27:1e:40:d4:b2:13:c4:71:cc:5e:1d:7f:96:d4: bb:f6:8d:0a:85:6b:ef:30:c6:f5:6b:13:b8:50:0e:80:6f:22: a1:dc:cd:41:9d:d0:12:64:d3:6c:35:22:1b:d9:e2:67:5f:bb: 5f:f5:c9:36:a2:83:ca:45:3d:22:0d:59:58:36:35:c3:d2:d2: 73:58:23:f7:04:09:91:2d:57:e0:a6:9b:7b:09:d2:9f:3c:62: 17:91:d3:5a:c7:54:96:23:92:59:a0:60:e3:9c:00:3b:ed:b8: 84:87:62:4d:63:92:38:f0:b6:80:8f:cb:d7:1d:9e:fb:cc:c1: fe:fa:50:a0:5e:60:4f:45:83:48:7c:64:ae:78:35:c5:8a:fe: 5a:13:b0:50:7e:2c:b6:2b:8b:03:2f:ba:a1:2c:fe:60:eb:fd: 2f:29:7b:67:1f:c7:86:c7:c6:d7:e7:f6:1e:9e:bf:67:d5:09: 27:dd:f6:f2:6f:03:ee:b3:34:86:94:1b:74:b1:5b:23:1e:12: 76:a4:53:dd:26:3d:80:26:49:20:97:2d:fc:44:f4:48:7e:82: 1a:a2:89:3c:9c:57:12:e8:78:eb:19:b6:ba:45:23:1d:d6:a4: 19:df:7b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK597xKzChKA4eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MGNkMTZhMTEtZjA3Yi00MTFlLWE1NTEtYTdkZGQwNDI3NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfFP2JIe2EU/CsQrTB5UG0Ber5RJff8wgbrB ceiSPd6uHWtKaJ0UCmCsYuLjO8Ih3T+0Hg6IJTUeys2Gn+pAZMwQ5Pct0lQ6/qI4 BdInopMqIgFxWr7+s5bcCglyepE6NMl0qilWzCQaqx9+M+TBrWEEESaiV4TuXE3c 0+dvia7RRTbkwfGJrY/Y0kNHianj0lb+ZKpUMgiZx1SedGPsi5Nld0KPjQVfGSds bFHezEfMHNPE16l9xj3//gsH8S0HqKP8twVUlVRoDAdpmhtdSGdl+xEvrzCOXLJt vTcO56JnipG8dCweesiTr3ARdkxv8XkVEdDBU9i9bftZNYJN/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhD/dkTQ58GnjWBf2zmnPe7HxwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTgyNWYzMzYtM2RhOS0z ZDYxLWFiNzctNzY5NWUyYTEzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkmn9IZSK5YRrwdzCwWYtNSsndEZRsnHkDUshPEccxeHX+W1Lv2jQqF a+8wxvVrE7hQDoBvIqHczUGd0BJk02w1IhvZ4mdfu1/1yTaig8pFPSINWVg2NcPS 0nNYI/cECZEtV+Cmm3sJ0p88YheR01rHVJYjklmgYOOcADvtuISHYk1jkjjwtoCP y9cdnvvMwf76UKBeYE9Fg0h8ZK54NcWK/loTsFB+LLYriwMvuqEs/mDr/S8pe2cf x4bHxtfn9h6ev2fVCSfd9vJvA+6zNIaUG3SxWyMeEnakU90mPYAmSSCXLfxE9Eh+ ghqiiTycVxLoeOsZtrpFIx3WpBnfe9o= -----END CERTIFICATE-----Generated at Sat Apr 5 00:31:42 2025 by rpki-client