$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cf4b34cd-a0fb-3943-b03d-f3acfcdf245f.roa File: cf4b34cd-a0fb-3943-b03d-f3acfcdf245f.roa (raw, json) Hash identifier: DpHSRUKtvOkGz8uYYzKmqm5axT/lZooBEVZCs/bnNyA= Subject key identifier: 44:D3:B8:EA:27:81:36:58:8A:66:BE:5B:FC:C4:31:CE:C2:F4:A2:72 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584965E9823FDD55DCDF7F703200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cf4b34cd-a0fb-3943-b03d-f3acfcdf245f.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 401152 IP address blocks: 142.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:82:3f:dd:55:dc:df:7f:70:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=c38e9336-b600-48b8-bcbd-7696a6c869b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:a5:88:3c:91:01:e5:fa:59:79:6d:25:41: 6b:72:ad:b1:44:90:9d:47:8b:ad:41:d5:9a:8f:d6: ee:65:b1:c5:f0:4c:28:99:37:f9:eb:86:8b:db:98: 40:42:db:5e:fd:0c:92:25:26:c0:d3:50:05:21:3d: 37:1b:87:7f:7d:a0:98:42:77:1f:99:47:eb:55:54: ce:6e:11:82:bd:9a:f8:10:84:4d:51:13:75:6d:32: 5b:04:2c:24:dd:fe:b5:e3:c5:21:f3:00:5c:94:fc: 19:35:4f:8a:e9:03:1d:45:13:fd:73:fd:64:9b:c9: 71:ce:dd:11:27:4f:37:8a:a7:49:d3:26:c0:2c:c8: 0c:c4:76:50:7c:dc:37:15:4f:7b:74:ee:00:08:b7: 9b:72:71:fc:33:df:9b:e8:f4:76:1d:67:a7:92:00: 76:0e:c0:a0:73:0c:e9:a3:fa:dc:2f:d0:5d:fe:df: 23:1d:f5:10:64:91:62:47:e9:ec:ed:b3:7b:82:d9: dd:e5:f4:d4:28:3b:49:ba:2b:22:10:79:66:cb:57: 11:d1:91:f4:3e:53:5a:95:f4:90:46:f2:47:6c:a0: 79:ac:2b:a2:5c:d5:7f:38:17:ee:92:57:eb:4f:71: 0f:66:ed:3e:cf:22:6c:cc:55:e2:7a:76:8f:f3:db: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D3:B8:EA:27:81:36:58:8A:66:BE:5B:FC:C4:31:CE:C2:F4:A2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cf4b34cd-a0fb-3943-b03d-f3acfcdf245f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ee:88:cc:4a:e8:8f:e5:ec:2c:e2:89:10:1c:0f:0c:04:46: 76:58:86:52:a4:04:18:a7:9c:0a:2f:30:a2:76:55:23:3a:15: bb:c7:ea:4d:e3:93:80:94:de:25:98:c1:f2:7a:c3:61:d0:11: 8a:15:89:c1:fd:08:37:45:57:b6:62:ee:e0:31:84:b2:4c:b8: 8c:09:da:16:a7:0f:3b:b9:25:27:ed:2a:a2:d6:90:19:28:27: 68:5f:44:e1:75:cc:1b:ba:57:e2:56:3a:c9:2d:f3:9a:f6:d3: d2:5f:cf:e6:bf:90:b7:81:ca:c4:a6:3b:f4:48:65:ed:ee:4d: 61:05:87:52:54:bd:e0:f8:2f:5a:2c:b0:32:9c:5a:0a:0a:4c: e6:f0:c9:ab:8f:55:97:29:df:4a:bd:01:f6:13:c3:6c:27:20: 15:e7:bc:76:60:7f:6b:f3:37:62:b9:eb:5c:b4:e6:37:ff:9e: 6b:ec:f3:ad:13:aa:11:e6:f5:66:7d:ec:b3:f7:a7:79:3d:a1: 37:4a:80:b5:6f:c7:8a:1c:30:b2:bc:3d:01:af:61:24:5c:7b: 35:12:60:ff:f5:4c:a3:c4:51:34:1b:cc:2e:fe:70:3d:0a:4f: e0:da:e1:5e:77:b8:f1:2b:de:0b:16:49:b4:34:42:48:74:0a: 85:2d:e7:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6YI/3VXc339wMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YzM4ZTkzMzYtYjYwMC00OGI4LWJjYmQtNzY5NmE2Yzg2OWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdqliDyRAeX6WXltJUFrcq2xRJCdR4utQdWa j9buZbHF8EwomTf564aL25hAQtte/QySJSbA01AFIT03G4d/faCYQncfmUfrVVTO bhGCvZr4EIRNURN1bTJbBCwk3f6148Uh8wBclPwZNU+K6QMdRRP9c/1km8lxzt0R J083iqdJ0ybALMgMxHZQfNw3FU97dO4ACLebcnH8M9+b6PR2HWenkgB2DsCgcwzp o/rcL9Bd/t8jHfUQZJFiR+ns7bN7gtnd5fTUKDtJuisiEHlmy1cR0ZH0PlNalfSQ RvJHbKB5rCuiXNV/OBfuklfrT3EPZu0+zyJszFXienaP89vdwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETTuOongTZYima+W/zEMc7C9KJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2Y0YjM0Y2QtYTBmYi0z OTQzLWIwM2QtZjNhY2ZjZGYyNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjuiMxK6I/l7CziiRAcDwwERnZYhlKkBBinnAovMKJ2VSM6FbvH6k3j k4CU3iWYwfJ6w2HQEYoVicH9CDdFV7Zi7uAxhLJMuIwJ2hanDzu5JSftKqLWkBko J2hfROF1zBu6V+JWOskt85r209Jfz+a/kLeBysSmO/RIZe3uTWEFh1JUveD4L1os sDKcWgoKTObwyauPVZcp30q9AfYTw2wnIBXnvHZgf2vzN2K561y05jf/nmvs860T qhHm9WZ97LP3p3k9oTdKgLVvx4ocMLK8PQGvYSRcezUSYP/1TKPEUTQbzC7+cD0K T+Da4V53uPEr3gsWSbQ0Qkh0CoUt53Y= -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:09 2025 by rpki-client