$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa File: 1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa (raw, json) Hash identifier: W4SjSXS0J/W4+AqlkF+4uFvk8eC5sul9EA0z+hfE37E= Subject key identifier: 39:DC:8F:E6:D6:72:EE:B9:C2:C0:83:31:8E:B8:CF:8A:D7:DF:0A:F7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D7397B47D94B1F9DF7E760 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 3257 IP address blocks: 142.111.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:39:7b:47:d9:4b:1f:9d:f7:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=71917bfc-d970-46ec-befa-04f5d70796f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:c4:a4:e2:9c:9b:19:d3:98:4a:5a:70:fc: 85:f7:79:6d:00:9e:02:26:5a:d1:f3:af:63:81:99: a5:38:dc:62:96:ea:1a:7a:3c:d4:7d:1e:36:ca:40: 90:29:45:0a:9f:b7:1b:ec:81:70:f0:99:38:eb:02: 77:c6:b7:1e:c4:7e:b8:b8:10:b7:38:3e:6b:bc:5f: b7:ce:4d:37:e9:4f:b7:01:2e:e9:3a:c7:0e:68:73: 76:13:58:c7:71:a9:8e:8d:7e:eb:25:7a:9b:8e:fa: 91:a9:8a:f7:4f:a2:f5:1f:48:11:e0:e2:bf:ab:39: 9a:b2:07:1b:61:4c:84:73:87:db:ca:96:2b:55:ff: 8b:f9:ec:9c:be:e0:00:c0:a1:8c:e9:c8:f9:34:a8: 15:8c:ad:a6:fa:62:1b:50:13:5b:24:63:35:14:74: 10:c2:f9:3e:8f:b1:c8:d1:e3:30:a9:20:35:b7:2a: fe:ea:9a:9f:a6:3a:23:2c:1a:60:c2:1e:6d:bf:28: 5c:f2:d3:14:26:28:91:70:5a:56:91:f7:72:c9:f8: 42:d4:b4:1e:d3:a1:96:23:30:93:2b:c7:57:48:99: 33:b2:a9:7a:88:10:43:f8:c2:a4:b8:4d:95:6e:fa: f9:ef:5b:c1:06:3b:c9:94:a1:c0:e8:f5:38:b4:23: 7c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DC:8F:E6:D6:72:EE:B9:C2:C0:83:31:8E:B8:CF:8A:D7:DF:0A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:79:9d:37:e1:1b:73:c6:d4:75:90:c9:41:91:cb:24:be:af: 12:85:39:ff:ec:82:dc:bc:88:3a:78:91:33:4c:04:11:af:a3: 1a:12:50:c4:46:be:0e:40:4f:c3:4c:3b:4b:df:3d:0e:80:71: 85:52:f7:03:6a:2b:8f:4f:55:3b:23:ad:cf:d0:f7:78:f6:05: b1:5c:35:14:01:1a:ff:b0:77:70:e1:8a:ba:94:a5:d8:22:25: 91:44:1b:5b:6c:e6:59:71:49:6d:e8:c7:8e:3c:c0:73:95:53: 62:f5:17:85:63:bb:0c:ad:b2:3b:ff:af:a5:0a:42:0c:18:f3: 5a:39:74:e4:0a:a8:e0:94:b2:57:59:be:d5:68:78:82:c3:8a: ee:2d:c8:53:9a:45:4c:94:90:9a:d3:6b:81:1f:4b:98:43:c1: 9a:ac:1a:94:35:1c:c8:a3:84:ba:96:22:84:4d:6d:ba:b4:e0: 01:02:f7:d6:4d:af:3d:36:44:2b:07:d0:ad:94:df:f5:a2:d9: dd:72:60:76:15:57:ba:3c:16:30:10:23:47:57:5a:b9:d1:51: 6a:43:bc:67:30:db:72:62:46:73:1c:c5:ec:40:dc:af:a2:82: 01:25:77:7c:cb:f9:d8:7e:aa:46:b8:bb:cd:61:c9:96:06:ca: 22:df:62:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zl7R9lLH53352AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NzE5MTdiZmMtZDk3MC00NmVjLWJlZmEtMDRmNWQ3MDc5NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7PEpOKcmxnTmEpacPyF93ltAJ4CJlrR869j gZmlONxiluoaejzUfR42ykCQKUUKn7cb7IFw8Jk46wJ3xrcexH64uBC3OD5rvF+3 zk036U+3AS7pOscOaHN2E1jHcamOjX7rJXqbjvqRqYr3T6L1H0gR4OK/qzmasgcb YUyEc4fbypYrVf+L+eycvuAAwKGM6cj5NKgVjK2m+mIbUBNbJGM1FHQQwvk+j7HI 0eMwqSA1tyr+6pqfpjojLBpgwh5tvyhc8tMUJiiRcFpWkfdyyfhC1LQe06GWIzCT K8dXSJkzsql6iBBD+MKkuE2Vbvr571vBBjvJlKHA6PU4tCN8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDncj+bWcu65wsCDMY64z4rX3wr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWRjM2ZkMzYtMDVmNC0z ZTVmLWE3YzAtNGExMGJmODI3N2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ5nTfhG3PG1HWQyUGRyyS+rxKFOf/sgty8iDp4kTNMBBGvoxoSUMRG vg5AT8NMO0vfPQ6AcYVS9wNqK49PVTsjrc/Q93j2BbFcNRQBGv+wd3DhirqUpdgi JZFEG1ts5llxSW3ox448wHOVU2L1F4Vjuwytsjv/r6UKQgwY81o5dOQKqOCUsldZ vtVoeILDiu4tyFOaRUyUkJrTa4EfS5hDwZqsGpQ1HMijhLqWIoRNbbq04AEC99ZN rz02RCsH0K2U3/Wi2d1yYHYVV7o8FjAQI0dXWrnRUWpDvGcw23JiRnMcxexA3K+i ggEld3zL+dh+qka4u81hyZYGyiLfYlA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:49 2025 by rpki-client