$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28741138-1b05-3095-9601-5ffd810c6190.roa File: 28741138-1b05-3095-9601-5ffd810c6190.roa (raw, json) Hash identifier: BKQJqCK4kePC0pzYols3ZEbfxJFmi4IlEbqCvTrMcBo= Subject key identifier: E2:2D:77:28:C9:D5:27:E6:66:17:FD:5D:D1:AF:74:5F:CD:02:74:83 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75DE4AA8A7D6CCC6B9D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28741138-1b05-3095-9601-5ffd810c6190.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 142.111.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5d:e4:aa:8a:7d:6c:cc:6b:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d4805ed6-85a3-47ef-a68e-cc5d960b1680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:d8:66:a5:93:79:6a:93:b4:ce:fb:19:9c: d3:bf:e5:cb:10:8c:52:fb:fa:76:3f:a1:ba:37:67: e8:2b:d0:11:63:b2:52:07:e8:49:4d:6e:3e:74:4d: 2b:0f:95:3b:26:83:65:30:c6:8a:d0:1a:34:f9:d1: 80:f8:b3:87:d2:e4:ba:ff:16:ca:25:e1:15:8e:10: 8f:35:c9:ff:06:54:3d:e4:b7:be:83:ef:ef:99:22: 7a:f8:a1:6e:d0:69:3d:e7:38:78:c3:44:dc:83:52: 0c:22:7f:85:ad:ab:b9:08:de:39:e8:1b:18:34:da: bc:50:8e:5d:b6:b3:f6:cb:97:91:83:13:70:94:cc: 72:d0:b4:4a:71:58:41:db:21:45:fb:cd:04:89:19: f1:5a:9b:51:a2:e8:fb:97:6d:b2:60:b0:70:3f:08: 8d:fc:dd:99:ee:ef:5d:94:fd:36:f4:b7:a2:d4:6b: 94:c0:10:ed:45:77:b3:46:dd:7a:70:d7:32:be:3a: dd:92:5d:16:5a:89:40:1e:44:fb:55:cd:3e:6c:41: ee:1c:12:61:af:92:1d:20:da:79:9c:17:68:5d:ab: 44:43:3b:93:0d:93:a3:84:43:35:7b:a6:1d:67:1d: d1:28:ce:1d:c9:fe:4f:3c:e5:ee:a8:be:75:f9:30: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2D:77:28:C9:D5:27:E6:66:17:FD:5D:D1:AF:74:5F:CD:02:74:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28741138-1b05-3095-9601-5ffd810c6190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:72:0a:3a:23:02:a2:85:ab:5c:41:89:b5:57:b0:35:eb:e1: f5:dc:4a:5d:d1:b4:cb:cb:4e:0a:46:7e:94:b8:18:13:b4:f9: 65:f9:15:61:50:77:7d:3c:76:eb:57:6e:b9:3a:a7:9d:6d:92: b7:1c:b4:9f:04:33:b9:2d:f8:ad:d1:c1:be:bb:17:0c:c0:f8: e6:6a:1c:b5:ba:a0:db:1e:a8:9a:00:ad:96:88:ba:9b:2e:12: 03:d0:f7:89:e0:c1:b5:1a:a2:1c:24:ca:2f:30:3e:78:84:57: 1f:17:cc:0e:9d:36:85:ec:c1:57:cc:b3:c2:e8:37:13:86:65: bb:43:37:1e:02:e0:16:2c:86:10:5a:0d:b0:62:0c:e2:15:7f: 2f:c3:88:7b:af:29:d7:31:ab:a6:ff:2e:36:1a:4b:3d:62:aa: ae:45:16:76:f9:86:a5:e4:b1:0d:08:ea:7b:b3:47:70:3e:9c: 69:74:b6:2a:ae:e5:aa:12:e0:38:49:10:7d:a1:d5:b3:2b:4b: ca:ee:91:c6:62:d2:83:b1:cf:00:fe:d2:b7:92:a8:12:15:3d: 9d:32:ce:54:99:9c:dc:26:d0:28:a9:c9:7d:41:67:21:af:8f: 39:cd:7a:19:a9:4f:f8:e1:4b:6f:43:9a:27:99:c9:f2:f4:68: 6d:c7:c0:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp13kqop9bMxrnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDQ4MDVlZDYtODVhMy00N2VmLWE2OGUtY2M1ZDk2MGIxNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp3YZqWTeWqTtM77GZzTv+XLEIxS+/p2P6G6 N2foK9ARY7JSB+hJTW4+dE0rD5U7JoNlMMaK0Bo0+dGA+LOH0uS6/xbKJeEVjhCP Ncn/BlQ95Le+g+/vmSJ6+KFu0Gk95zh4w0Tcg1IMIn+Frau5CN456BsYNNq8UI5d trP2y5eRgxNwlMxy0LRKcVhB2yFF+80EiRnxWptRouj7l22yYLBwPwiN/N2Z7u9d lP029Lei1GuUwBDtRXezRt16cNcyvjrdkl0WWolAHkT7Vc0+bEHuHBJhr5IdINp5 nBdoXatEQzuTDZOjhEM1e6YdZx3RKM4dyf5PPOXuqL51+TAEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOItdyjJ1SfmZhf9XdGvdF/NAnSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjg3NDExMzgtMWIwNS0z MDk1LTk2MDEtNWZmZDgxMGM2MTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9yCjojAqKFq1xBibVXsDXr4fXcSl3RtMvLTgpGfpS4GBO0+WX5FWFQ d308dutXbrk6p51tkrcctJ8EM7kt+K3Rwb67FwzA+OZqHLW6oNseqJoArZaIupsu EgPQ94ngwbUaohwkyi8wPniEVx8XzA6dNoXswVfMs8LoNxOGZbtDNx4C4BYshhBa DbBiDOIVfy/DiHuvKdcxq6b/LjYaSz1iqq5FFnb5hqXksQ0I6nuzR3A+nGl0tiqu 5aoS4DhJEH2h1bMrS8rukcZi0oOxzwD+0reSqBIVPZ0yzlSZnNwm0CipyX1BZyGv jznNehmpT/jhS29DmieZyfL0aG3HwH4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:32 2025 by rpki-client