$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f9fdc20-cc50-3337-bb66-7a6a75035412.roa File: 3f9fdc20-cc50-3337-bb66-7a6a75035412.roa (raw, json) Hash identifier: zXk2O9lFOf1uLSPfAMVDdFfI2vdOpD+m3398KvQIthY= Subject key identifier: 8C:EF:2B:11:B2:C9:EE:00:86:EB:D9:7C:1C:4C:D0:C0:32:81:E6:61 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CABB3473721D8CDDA2D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f9fdc20-cc50-3337-bb66-7a6a75035412.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 142.111.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:ab:b3:47:37:21:d8:cd:da:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=17d7ab39-e55a-4c5a-8b5b-ef02857d1373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1f:47:c3:d3:b2:79:34:4a:e3:93:14:23:08: d7:61:df:8e:ed:37:ec:29:24:ba:50:68:06:af:f3: b7:b8:ec:9a:76:78:29:ec:43:75:54:64:3c:63:8b: 46:e2:42:43:70:f9:0c:a3:d9:f5:3e:f6:89:21:f7: 7c:de:d3:3e:f9:f3:35:13:e2:e9:4b:76:3f:1e:56: e9:47:4a:fc:b9:5b:00:19:00:99:4a:c0:69:70:ec: 43:58:5d:db:45:14:e2:47:0a:69:fb:ff:b2:b0:c7: 3c:cf:4d:0e:83:c0:5c:04:a8:c9:b6:61:73:b2:c2: 7b:dd:07:0b:32:6a:6d:58:34:6a:1d:41:84:5a:98: eb:3f:bb:8c:bc:e9:fa:3f:91:b8:02:a0:4d:2a:9d: 54:ab:26:da:54:dc:55:5c:51:c9:8f:14:f3:c3:58: e2:ba:0f:4b:82:d2:5c:4e:13:b4:b5:20:ec:66:13: 67:27:7d:99:47:7e:29:e7:df:93:3c:51:ff:c2:8b: a9:24:7d:b6:18:41:5d:09:82:58:ce:f7:d2:47:64: 88:b3:ac:c8:39:fc:7e:bc:69:cd:8c:01:9d:c5:a3: 9d:43:8c:b5:85:38:85:4a:5a:81:8c:91:32:0a:3d: 2a:6c:31:16:14:ab:38:65:c6:48:f6:17:c4:0a:00: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:2B:11:B2:C9:EE:00:86:EB:D9:7C:1C:4C:D0:C0:32:81:E6:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f9fdc20-cc50-3337-bb66-7a6a75035412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:75:27:58:06:99:60:0b:5f:72:a1:4e:c3:3f:62:ca:3e:23: e9:dc:00:74:52:b5:cb:44:46:1a:4d:9b:ce:93:88:c3:16:cb: 00:6f:72:1f:11:31:23:a3:7a:60:12:9c:40:c1:05:f8:8f:37: d0:33:5c:e9:93:06:29:e1:ce:c9:bd:d8:9f:57:fb:dd:b9:fb: 39:b1:00:6d:23:97:8f:3c:28:e0:45:22:e8:7a:cf:bc:f4:0c: 58:fb:ea:7f:0b:3e:6d:bc:8a:b2:f4:8b:7b:61:bd:29:28:29: 0f:a5:44:a3:40:9c:78:e6:84:63:68:2c:24:00:ac:78:06:c7: 6a:f3:cd:e6:d8:d3:24:0b:30:1f:b8:b0:c7:4e:c1:05:a7:b5: 37:0f:61:a8:b6:95:44:8c:bc:83:16:1e:6d:78:bb:5f:6f:fb: 67:50:72:46:c8:b9:c5:6e:c0:9e:87:8c:71:fc:42:12:dd:4a: a9:06:a7:74:0c:5a:44:cf:de:a6:10:69:24:45:c1:b8:6a:f3: 49:cb:42:52:50:75:6a:b4:97:0a:7c:26:0a:c5:8e:48:10:1f: 8c:a2:b2:e8:25:a1:3e:66:bb:7d:8b:80:d6:36:94:7a:d4:34: ec:6f:88:83:80:14:f3:d7:ec:cd:fc:88:93:0f:a6:3c:c0:c5: c0:45:1c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKuzRzch2M3aLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MTdkN2FiMzktZTU1YS00YzVhLThiNWItZWYwMjg1N2QxMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R9Hw9OyeTRK45MUIwjXYd+O7TfsKSS6UGgG r/O3uOyadngp7EN1VGQ8Y4tG4kJDcPkMo9n1PvaJIfd83tM++fM1E+LpS3Y/Hlbp R0r8uVsAGQCZSsBpcOxDWF3bRRTiRwpp+/+ysMc8z00Og8BcBKjJtmFzssJ73QcL MmptWDRqHUGEWpjrP7uMvOn6P5G4AqBNKp1UqybaVNxVXFHJjxTzw1jiug9LgtJc ThO0tSDsZhNnJ32ZR34p59+TPFH/woupJH22GEFdCYJYzvfSR2SIs6zIOfx+vGnN jAGdxaOdQ4y1hTiFSlqBjJEyCj0qbDEWFKs4ZcZI9hfECgCHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzvKxGyye4AhuvZfBxM0MAygeZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2Y5ZmRjMjAtY2M1MC0z MzM3LWJiNjYtN2E2YTc1MDM1NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC51J1gGmWALX3KhTsM/Yso+I+ncAHRStctERhpNm86TiMMWywBvch8R MSOjemASnEDBBfiPN9AzXOmTBinhzsm92J9X+925+zmxAG0jl488KOBFIuh6z7z0 DFj76n8LPm28irL0i3thvSkoKQ+lRKNAnHjmhGNoLCQArHgGx2rzzebY0yQLMB+4 sMdOwQWntTcPYai2lUSMvIMWHm14u19v+2dQckbIucVuwJ6HjHH8QhLdSqkGp3QM WkTP3qYQaSRFwbhq80nLQlJQdWq0lwp8JgrFjkgQH4yisugloT5mu32LgNY2lHrU NOxviIOAFPPX7M38iJMPpjzAxcBFHCM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:30 2025 by rpki-client