$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/067149e8-7d94-35f0-9462-97a1143b3303.roa File: 067149e8-7d94-35f0-9462-97a1143b3303.roa (raw, json) Hash identifier: xSvjbXSfF3mK3+ksAECs82J/FB5aBFEHYjS9ML3FFA0= Subject key identifier: 3D:80:1B:D5:BC:14:51:60:A8:7B:13:2A:CE:0A:43:AD:55:FC:E4:BE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772ED3D9EA5982382D3280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/067149e8-7d94-35f0-9462-97a1143b3303.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 142.111.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2e:d3:d9:ea:59:82:38:2d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=5c03cb86-d1bd-45e8-aeef-b88b67606c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:fc:cd:d9:ef:d8:ba:90:66:44:a8:81:1c: 5e:74:18:6b:f1:60:70:dd:14:3a:20:c3:d0:75:42: b4:9a:3e:16:e2:d6:b8:7c:9e:fc:3c:36:fe:55:97: ff:a9:ca:21:ee:fc:d5:36:54:ec:45:8c:3b:f0:a7: 2a:d3:62:d3:cb:2b:d4:63:2a:96:16:e7:f7:ba:f7: a0:0d:87:dc:f7:ea:7a:ed:0c:ea:37:4b:8f:46:1e: 3f:48:c7:3f:45:5f:66:8a:8d:57:f4:bc:86:fe:8b: 21:60:82:dd:85:55:c7:16:61:e2:f9:21:32:74:70: 17:28:b8:90:71:81:95:a5:35:60:e9:f2:d1:39:7e: fc:b7:89:e9:a4:00:b9:d5:d2:9d:90:8f:b3:a9:66: 46:31:cf:14:cd:1c:e5:fd:5b:a4:1e:d9:fa:9c:53: ca:2f:76:44:fe:cf:3a:9d:81:02:87:35:5a:f8:f2: f2:14:2a:dd:33:2c:0c:c7:c8:42:86:d6:26:2d:83: 12:ef:10:1d:61:bc:8e:04:9f:5d:6c:3b:65:30:df: 09:7b:a3:5d:e7:89:00:3f:92:3d:c2:9e:f3:c1:cd: de:f2:79:18:c6:bb:ac:9e:ed:4c:41:1b:86:11:03: 1b:cc:8c:f2:ca:5d:7b:10:fe:4e:f5:e8:af:ca:33: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:1B:D5:BC:14:51:60:A8:7B:13:2A:CE:0A:43:AD:55:FC:E4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/067149e8-7d94-35f0-9462-97a1143b3303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ea:69:66:3d:8d:e9:3b:7a:6e:46:73:ba:d1:b7:b7:63:10: 29:86:8d:cb:72:9d:95:4d:3c:2b:42:c3:10:6e:db:eb:ba:e0: 8e:7d:75:60:f1:4e:db:b4:28:19:40:86:1a:2a:44:c9:8e:33: 80:5a:3c:87:de:7e:28:ad:34:76:c0:3c:a2:8b:cc:48:4a:31: d7:b2:c1:0e:81:59:41:52:90:b3:1f:9b:a6:29:fb:13:73:2a: b2:bf:f0:71:fd:94:a6:e9:fd:8b:83:ba:e0:af:58:e7:b0:7a: 84:87:29:78:86:ec:54:b5:d9:cc:52:97:ae:3b:f6:5b:3d:d0: d5:37:9a:c6:c9:05:84:90:b4:f0:49:d1:eb:fb:f0:4b:d7:3b: f0:7c:44:0c:e4:cf:7b:2b:a4:1b:31:13:4f:09:67:17:34:78: 5c:a0:3b:2b:99:61:27:d7:97:59:38:ba:05:26:13:82:89:95: ab:af:28:12:ec:7c:e4:e0:32:d0:c8:55:cd:d7:e8:59:37:00: 95:20:09:8f:7d:d8:97:19:f6:5c:e9:2f:a3:7e:b0:f8:fe:5e: 61:68:11:98:56:a4:be:ac:f8:2f:0f:60:8e:74:26:16:37:52: 5d:7e:e9:f2:72:b0:4e:d8:3a:28:60:36:23:38:b1:b2:7f:df: 3c:93:b6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy7T2epZgjgtMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NWMwM2NiODYtZDFiZC00NWU4LWFlZWYtYjg4YjY3NjA2Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvT8zdnv2LqQZkSogRxedBhr8WBw3RQ6IMPQ dUK0mj4W4ta4fJ78PDb+VZf/qcoh7vzVNlTsRYw78Kcq02LTyyvUYyqWFuf3uveg DYfc9+p67QzqN0uPRh4/SMc/RV9mio1X9LyG/oshYILdhVXHFmHi+SEydHAXKLiQ cYGVpTVg6fLROX78t4nppAC51dKdkI+zqWZGMc8UzRzl/VukHtn6nFPKL3ZE/s86 nYEChzVa+PLyFCrdMywMx8hChtYmLYMS7xAdYbyOBJ9dbDtlMN8Je6Nd54kAP5I9 wp7zwc3e8nkYxrusnu1MQRuGEQMbzIzyyl17EP5O9eivyjOe5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2AG9W8FFFgqHsTKs4KQ61V/OS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDY3MTQ5ZTgtN2Q5NC0z NWYwLTk0NjItOTdhMTE0M2IzMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDqaWY9jek7em5Gc7rRt7djECmGjctynZVNPCtCwxBu2+u64I59dWDx Ttu0KBlAhhoqRMmOM4BaPIfefiitNHbAPKKLzEhKMdeywQ6BWUFSkLMfm6Yp+xNz KrK/8HH9lKbp/YuDuuCvWOeweoSHKXiG7FS12cxSl6479ls90NU3msbJBYSQtPBJ 0ev78EvXO/B8RAzkz3srpBsxE08JZxc0eFygOyuZYSfXl1k4ugUmE4KJlauvKBLs fOTgMtDIVc3X6Fk3AJUgCY992JcZ9lzpL6N+sPj+XmFoEZhWpL6s+C8PYI50JhY3 Ul1+6fJysE7YOihgNiM4sbJ/3zyTtjc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:22 2025 by rpki-client