$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa File: 3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa (raw, json) Hash identifier: SWYGBy2q135Iw+WdD+X7SniY3qNl/oEyB2SnboHfPB0= Subject key identifier: 82:DB:9D:ED:82:9A:BC:1A:60:DB:A2:30:AE:20:AB:BE:21:4F:0D:57 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B13D6D519F47022A3A43E2948 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 142.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d5:19:f4:70:22:a3:a4:3e:29:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=3c1a0c4b-1e5f-49e8-977f-8a0163696f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:b1:29:e3:0c:6b:4d:cf:a4:3d:a7:36:e7: 65:77:cc:bb:df:6d:fb:56:f9:2a:87:4d:ed:32:3a: 04:77:2d:e2:53:49:b4:32:2b:79:e4:ff:98:50:9d: af:c6:38:3a:9c:c9:91:ee:1a:ff:d7:ed:f8:33:ae: 3c:3c:10:2a:c9:33:f3:e8:8b:49:3d:41:3f:5a:23: 63:05:54:35:ef:b7:35:69:73:49:01:8f:8d:7e:8f: 1d:c2:48:a6:48:63:e4:69:fd:fa:20:07:95:03:11: 3f:7b:ba:5d:f1:63:44:d4:50:16:b7:c8:f6:bd:c6: a2:f3:78:0b:ed:26:77:e5:1f:84:f1:ee:4d:39:17: 04:cd:ba:a7:18:8c:9f:11:e7:30:ea:6b:70:3b:2b: fc:88:9e:c8:e3:4b:78:70:b3:62:8c:a3:a2:17:64: 40:3e:a7:e8:66:a2:4c:12:80:1a:da:74:41:82:5b: 19:54:a8:48:e9:50:68:08:cc:7b:b1:65:b9:ec:1c: 9f:f7:f6:71:24:86:26:59:0e:fc:a9:3f:88:0d:db: eb:70:68:1e:60:8e:5e:7e:61:9e:85:e6:03:c6:92: 28:1f:65:13:b6:53:f4:b0:36:ce:3a:ae:eb:76:9c: 82:79:6e:05:0f:0e:3d:ec:b4:4f:f5:36:1c:34:41: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DB:9D:ED:82:9A:BC:1A:60:DB:A2:30:AE:20:AB:BE:21:4F:0D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6b:21:65:06:b4:9e:92:ea:4d:af:30:4c:89:50:ad:09:98: 29:57:3e:68:ad:60:38:2c:cc:b2:be:7b:dc:8f:c3:fd:b1:fa: 82:61:17:4f:20:3a:01:a3:05:65:10:8a:c6:96:e5:9b:9a:cf: 16:4b:66:64:4a:82:5d:db:07:3b:ea:7b:69:8d:a8:67:3f:50: 1a:4e:ed:4d:85:be:bc:d6:ea:08:80:c9:81:27:4f:c6:b8:d0: dc:45:65:fd:f2:36:f1:c2:b2:fe:fe:f0:2e:0d:b7:0e:33:fe: 16:30:ef:71:2f:cf:01:2c:61:a0:10:f1:99:f3:5e:dd:c8:26: 8c:66:a3:ca:28:94:f9:84:03:b1:b3:c9:fc:d5:4e:a1:e8:cf: 76:96:35:23:27:f4:b7:5b:ca:81:f3:68:f0:ba:70:8d:9f:d2: 6f:61:6a:00:1a:2e:81:25:df:44:f8:e6:f9:d8:62:21:0a:8f: 87:69:d5:32:52:45:5a:16:2f:3f:b8:7b:83:98:73:dd:51:93: 53:9c:49:01:e8:74:b6:d6:b9:73:db:f1:70:0c:ee:8a:d3:d2: fd:fb:a0:96:e3:bd:09:18:12:db:8a:9c:77:bb:5a:ad:fd:4e: db:f3:8f:e8:40:2c:8c:84:ce:7a:b2:e6:5c:95:07:2e:e9:de: 68:75:94:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1tUZ9HAio6Q+KUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk M2MxYTBjNGItMWU1Zi00OWU4LTk3N2YtOGEwMTYzNjk2ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqixKeMMa03PpD2nNudld8y73237Vvkqh03t MjoEdy3iU0m0Mit55P+YUJ2vxjg6nMmR7hr/1+34M648PBAqyTPz6ItJPUE/WiNj BVQ177c1aXNJAY+Nfo8dwkimSGPkaf36IAeVAxE/e7pd8WNE1FAWt8j2vcai83gL 7SZ35R+E8e5NORcEzbqnGIyfEecw6mtwOyv8iJ7I40t4cLNijKOiF2RAPqfoZqJM EoAa2nRBglsZVKhI6VBoCMx7sWW57Byf9/ZxJIYmWQ78qT+IDdvrcGgeYI5efmGe heYDxpIoH2UTtlP0sDbOOq7rdpyCeW4FDw497LRP9TYcNEFnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILbne2CmrwaYNuiMK4gq74hTw1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EyYzYzYzQtNDZlNy0z YjI0LWFlNTctMGVhYTM5NjliMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9rIWUGtJ6S6k2vMEyJUK0JmClXPmitYDgszLK+e9yPw/2x+oJhF08g OgGjBWUQisaW5ZuazxZLZmRKgl3bBzvqe2mNqGc/UBpO7U2FvrzW6giAyYEnT8a4 0NxFZf3yNvHCsv7+8C4Ntw4z/hYw73EvzwEsYaAQ8ZnzXt3IJoxmo8oolPmEA7Gz yfzVTqHoz3aWNSMn9LdbyoHzaPC6cI2f0m9hagAaLoEl30T45vnYYiEKj4dp1TJS RVoWLz+4e4OYc91Rk1OcSQHodLbWuXPb8XAM7orT0v37oJbjvQkYEtuKnHe7Wq39 Ttvzj+hALIyEznqy5lyVBy7p3mh1lCA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:43:01 2025 by rpki-client