$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa File: 324dd731-3f7c-3953-9041-61e37dbe74af.roa (raw, json) Hash identifier: 5WJMF6NoI3qf4mymRyXcU6JnlQYJ3yKCVyL8fSpRIaY= Subject key identifier: CB:15:D9:21:15:AD:B9:D0:35:E8:D7:39:10:8C:17:CD:E8:58:52:69 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B3557083263F683393FEF7580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 142.111.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:08:32:63:f6:83:39:3f:ef:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ae176e3e-92cc-4c34-af02-649694ee6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:19:ed:69:23:63:25:6b:28:77:7d:2c:5e: c4:37:32:f8:2f:82:7d:26:ed:ad:78:aa:aa:fb:46: 50:ca:1c:52:48:99:a3:dc:5b:4a:2b:7a:5c:23:c3: 1f:51:d2:96:2b:2c:71:ed:98:6b:9c:eb:b0:13:50: 13:47:37:a2:7b:d6:05:dc:a0:d1:7e:f6:4d:7e:82: 82:6f:26:e5:9e:b8:74:2c:cc:5c:8f:09:69:5f:a1: e4:9f:d9:05:5e:b8:f1:c7:d1:6f:26:bc:90:d8:c1: fc:4c:51:1a:06:ba:19:b0:6c:5b:7e:a9:d0:06:13: c8:61:5f:10:ae:6f:03:37:9f:ce:9d:46:f0:96:63: 42:4e:85:38:52:54:85:08:f4:a8:d9:3b:60:54:b8: a5:ab:fb:66:ad:15:92:18:82:fe:14:8c:40:a0:c9: bd:cf:2a:f7:a1:43:e3:d6:cc:af:99:b8:a4:fc:2c: 98:57:ff:b0:26:fe:7f:d2:67:34:f1:98:4e:aa:f7: 89:da:6f:0d:28:2d:f2:dd:e6:10:80:42:06:d0:cc: 2d:a1:ef:a1:f6:c7:28:80:43:93:b4:81:44:a1:4b: 88:43:67:b4:0f:34:4c:6f:d4:4e:e9:a7:97:86:81: 9e:9a:d7:1d:56:1d:19:4c:f7:d9:9b:c3:88:82:b6: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:15:D9:21:15:AD:B9:D0:35:E8:D7:39:10:8C:17:CD:E8:58:52:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c4:d8:b5:04:1b:31:10:61:0b:64:5b:8a:75:47:ff:ed:af: 27:8a:ba:c6:2e:4b:c6:da:bf:46:5e:38:df:79:38:45:b5:7a: 8f:06:97:06:3d:3b:d3:69:5e:c5:a6:c2:21:92:ec:20:8b:f4: 15:a7:0a:c7:02:cf:6b:c3:4c:ee:93:37:60:66:04:2d:8c:3b: a0:47:e6:09:59:48:59:b9:12:6f:66:53:95:3f:66:99:78:51: 2c:b2:14:75:e0:0c:83:1e:56:88:57:15:c5:6c:19:c3:94:41: cd:62:6b:0b:8e:38:5d:e8:5a:6a:73:bf:77:e8:ca:c7:14:71: 85:ea:e8:3c:e6:f5:78:31:7f:bb:a5:7f:82:22:64:99:33:a9: b3:55:f7:e1:f5:5f:de:30:5b:53:0c:bb:2d:96:68:5e:43:9a: 2e:1d:6f:7e:f3:2a:67:02:1e:9d:fb:c0:a0:4f:97:37:b6:d2: 14:c6:5f:c6:66:e4:c6:94:9d:75:ff:5e:09:97:c5:33:f3:86: 37:e4:ad:52:d6:28:1f:fc:9d:d7:84:3f:a5:0f:ee:e9:d3:96: 38:3e:b2:75:4f:df:7a:60:0d:b6:40:8b:94:ae:26:b7:4e:b8: 08:3e:f0:1b:1e:3d:1a:64:98:46:42:f5:73:8b:4e:88:f5:d5: 67:b6:57:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwgyY/aDOT/vdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YWUxNzZlM2UtOTJjYy00YzM0LWFmMDItNjQ5Njk0ZWU2ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQIZ7WkjYyVrKHd9LF7ENzL4L4J9Ju2teKqq +0ZQyhxSSJmj3FtKK3pcI8MfUdKWKyxx7ZhrnOuwE1ATRzeie9YF3KDRfvZNfoKC byblnrh0LMxcjwlpX6Hkn9kFXrjxx9FvJryQ2MH8TFEaBroZsGxbfqnQBhPIYV8Q rm8DN5/OnUbwlmNCToU4UlSFCPSo2TtgVLilq/tmrRWSGIL+FIxAoMm9zyr3oUPj 1syvmbik/CyYV/+wJv5/0mc08ZhOqveJ2m8NKC3y3eYQgEIG0Mwtoe+h9scogEOT tIFEoUuIQ2e0DzRMb9RO6aeXhoGemtcdVh0ZTPfZm8OIgrbsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsV2SEVrbnQNejXORCMF83oWFJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzI0ZGQ3MzEtM2Y3Yy0z OTUzLTkwNDEtNjFlMzdkYmU3NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDE2LUEGzEQYQtkW4p1R//tryeKusYuS8bav0ZeON95OEW1eo8GlwY9 O9NpXsWmwiGS7CCL9BWnCscCz2vDTO6TN2BmBC2MO6BH5glZSFm5Em9mU5U/Zpl4 USyyFHXgDIMeVohXFcVsGcOUQc1iawuOOF3oWmpzv3foyscUcYXq6Dzm9Xgxf7ul f4IiZJkzqbNV9+H1X94wW1MMuy2WaF5Dmi4db37zKmcCHp37wKBPlze20hTGX8Zm 5MaUnXX/XgmXxTPzhjfkrVLWKB/8ndeEP6UP7unTljg+snVP33pgDbZAi5SuJrdO uAg+8BsePRpkmEZC9XOLToj11We2V1o= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:36 2025 by rpki-client