$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa File: afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa (raw, json) Hash identifier: 2WTUctTi8kGcMp7agJSZsRHDzPAd5aKKPo7lCcn+FhY= Subject key identifier: 22:2F:FE:8D:48:C7:DF:1D:43:CC:08:AD:47:B6:44:CE:1F:22:98:A0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849F5E1B471F99281765E641E80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa Signing time: Sat 24 May 2025 14:41:38 +0000 ROA not before: Sat 24 May 2025 14:41:38 +0000 ROA not after: Fri 22 Aug 2025 14:41:38 +0000 asID: 214238 IP address blocks: 142.111.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:e1:b4:71:f9:92:81:76:5e:64:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 24 14:41:38 2025 GMT Not After : Aug 22 14:41:38 2025 GMT Subject: CN=e207c8e9-885a-4303-9c0f-0bca38ea2ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:36:03:9c:e0:d0:c4:62:85:d3:f9:69:9f: 00:41:3b:9a:d1:71:97:f3:dc:71:1f:74:f7:54:8e: 8b:22:99:60:b2:4a:64:9a:ff:54:33:e7:8b:cc:a0: 54:1d:38:fb:46:e5:be:06:5d:27:09:fd:ac:16:3b: 5c:ee:43:2b:6b:7e:a2:5f:0a:64:79:ca:23:ea:cf: 3e:f7:da:70:1a:06:45:7e:c8:f7:62:4f:0a:0e:a8: c8:5f:de:08:db:9e:04:42:7a:03:a7:ef:2f:3e:fc: 06:4c:17:1c:87:59:90:6c:b4:f8:29:9b:25:9a:2a: 92:3a:97:94:03:29:76:4c:05:9f:38:b2:f9:a7:02: c6:87:1b:b5:53:02:4c:8f:24:3d:66:ca:cb:c7:2f: 28:f3:c5:a6:ab:35:18:d5:eb:e4:36:8e:57:44:8d: 5f:69:e9:7c:2a:c4:59:b2:49:4b:81:d0:d7:a4:bb: eb:fd:0a:eb:f0:d8:21:08:cb:59:ee:dd:ec:31:b1: 93:0d:b5:99:69:6f:a6:d5:1d:e4:0c:b1:93:ca:ee: 71:3f:f5:6a:ea:68:67:6b:b3:df:c9:de:ca:24:68: 10:54:ba:0c:7e:50:30:1d:e8:c8:c7:49:21:54:9c: 11:21:63:6a:cf:26:b3:b4:e4:2d:e4:2e:9b:a0:71: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2F:FE:8D:48:C7:DF:1D:43:CC:08:AD:47:B6:44:CE:1F:22:98:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:97:c5:28:cf:e1:25:62:db:ea:4f:c7:f2:95:d8:ba:93:9f: 0b:e0:04:76:9f:c1:e6:89:5d:fe:f3:2a:7a:b2:8a:79:af:06: 7f:27:9a:2a:4a:44:74:15:13:46:da:fc:be:8d:dd:76:b7:44: 91:91:ea:f1:e8:75:2e:d4:02:91:8d:64:18:8e:92:b4:9e:95: 28:46:cd:53:4b:5d:ff:cc:5f:69:76:c8:df:12:1c:16:b7:eb: c1:f3:58:08:15:77:ed:45:6a:8d:73:aa:43:d5:49:0e:f9:59: b0:ce:01:c5:b1:be:2b:6f:06:df:11:1d:14:e5:ee:44:1a:ec: 6e:f8:99:f8:60:d1:ff:4b:ee:2c:83:c8:18:60:be:57:91:5c: 6c:bf:43:d4:17:f1:0e:28:14:9c:5c:8e:ce:a1:20:fa:35:4e: bd:b0:71:67:e3:68:5c:08:88:0e:7e:eb:27:91:21:3d:23:a0: 09:56:d0:40:6b:81:42:48:61:ba:43:23:d5:36:4c:f9:aa:1c: 7d:e4:6e:27:ee:e5:8c:90:62:be:0a:13:f6:8a:46:56:b0:e1: 26:ec:14:a1:10:46:de:80:53:1f:ee:c2:bc:45:8e:3c:24:92: 29:08:23:a5:4e:3f:5c:5d:cf:06:c2:ea:48:e2:34:c7:2a:73: 72:db:53:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn14bRx+ZKBdl5kHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUyNDE0NDEzOFoXDTI1MDgyMjE0NDEzOFowLzEtMCsGA1UEAxMk ZTIwN2M4ZTktODg1YS00MzAzLTljMGYtMGJjYTM4ZWEyZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs42A5zg0MRihdP5aZ8AQTua0XGX89xxH3T3 VI6LIplgskpkmv9UM+eLzKBUHTj7RuW+Bl0nCf2sFjtc7kMra36iXwpkecoj6s8+ 99pwGgZFfsj3Yk8KDqjIX94I254EQnoDp+8vPvwGTBcch1mQbLT4KZslmiqSOpeU Ayl2TAWfOLL5pwLGhxu1UwJMjyQ9ZsrLxy8o88WmqzUY1evkNo5XRI1fael8KsRZ sklLgdDXpLvr/Qrr8NghCMtZ7t3sMbGTDbWZaW+m1R3kDLGTyu5xP/Vq6mhna7Pf yd7KJGgQVLoMflAwHejIx0khVJwRIWNqzyaztOQt5C6boHGGFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIv/o1Ix98dQ8wIrUe2RM4fIpigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWZhNDZjYjktM2FlMi0z Yjg0LTlhNzAtMmMzYjBkODhmYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACXxSjP4SVi2+pPx/KV2LqTnwvgBHafweaJXf7zKnqyinmvBn8nmipK RHQVE0ba/L6N3Xa3RJGR6vHodS7UApGNZBiOkrSelShGzVNLXf/MX2l2yN8SHBa3 68HzWAgVd+1Fao1zqkPVSQ75WbDOAcWxvitvBt8RHRTl7kQa7G74mfhg0f9L7iyD yBhgvleRXGy/Q9QX8Q4oFJxcjs6hIPo1Tr2wcWfjaFwIiA5+6yeRIT0joAlW0EBr gUJIYbpDI9U2TPmqHH3kbifu5YyQYr4KE/aKRlaw4SbsFKEQRt6AUx/uwrxFjjwk kikII6VOP1xdzwbC6kjiNMcqc3LbU3U= -----END CERTIFICATE-----Generated at Sat Jun 7 04:10:50 2025 by rpki-client