$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/44591e6e-8771-39ff-a50b-530545122342.roa File: 44591e6e-8771-39ff-a50b-530545122342.roa (raw, json) Hash identifier: IKOQDR6yxraUlLJWf9Z7ZBlddyzQYdL9qXJbrs7FKWw= Subject key identifier: BB:AA:C2:45:D0:97:FB:A8:03:65:D3:C3:49:35:25:33:A2:F4:90:03 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B78574BAE32D4BF75D9D82700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/44591e6e-8771-39ff-a50b-530545122342.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 400402 IP address blocks: 142.111.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4b:ae:32:d4:bf:75:d9:d8:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=66b773fc-b02a-40ee-93a8-85df1c35378d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:81:41:b9:e0:8f:c7:20:30:b1:47:53:fd: 7e:8a:31:70:dd:0c:a1:df:0c:53:8b:a5:0c:53:7f: a5:e1:69:7b:b2:e9:b5:f8:39:f7:16:f1:3b:08:f8: 81:12:c0:6d:68:09:d8:fe:d4:78:b3:a2:11:ea:4a: 6a:37:67:a1:ed:93:b8:14:99:4d:88:61:cb:f7:93: 1d:28:58:25:8b:90:1d:06:0e:47:14:1c:e5:68:03: f8:94:5b:aa:f8:4a:5c:92:56:da:d1:b1:01:44:a4: 98:4c:97:e8:59:b3:47:eb:f9:47:d6:72:67:5c:49: b7:43:08:f5:2b:26:87:f2:3a:db:41:62:a7:b7:13: 90:7a:f3:f4:c7:96:16:09:ea:9f:46:3c:9f:11:0c: 0f:6d:20:7a:f7:2b:56:79:b4:b7:64:7f:67:04:58: 5e:78:e9:28:09:1d:e8:e1:cf:cc:d5:6f:6d:9d:2d: ad:18:6d:7b:0e:e1:68:d5:5b:8b:e1:9c:c9:9c:2a: 71:cf:bb:7b:86:e9:ac:25:3f:a1:27:10:7c:09:4c: f5:74:c2:80:37:9d:6d:1a:c7:cf:14:89:d2:58:61: e2:c8:55:be:5f:b8:9f:c3:73:f0:ba:aa:c4:16:ab: a8:4b:82:03:a2:fa:93:d1:9f:d7:66:52:3f:a4:46: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:C2:45:D0:97:FB:A8:03:65:D3:C3:49:35:25:33:A2:F4:90:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/44591e6e-8771-39ff-a50b-530545122342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:87:5c:21:e5:67:66:7d:ab:78:f7:4e:fa:50:ab:ae:74:f3: 7d:f1:da:fc:b3:9d:16:48:c9:8f:5a:46:cf:c1:68:b0:d8:6b: f9:69:8c:e0:67:25:95:8b:63:61:40:80:ca:57:c7:f7:52:ef: 96:94:e0:ab:1f:a2:90:47:db:1e:56:cb:87:5a:e5:16:3e:b3: 28:de:f2:80:f3:96:7f:72:99:10:c8:0c:93:8e:3d:05:e4:da: 01:5a:0b:0c:03:65:f3:ab:e4:65:db:5f:23:86:7e:37:1b:00: 91:7a:15:f2:4a:15:54:c7:59:b2:39:df:38:af:14:ea:2c:25: 0a:f0:2c:71:af:99:a0:98:69:fd:60:cb:f8:bd:40:d5:8a:eb: 62:c9:49:36:f4:44:d6:25:49:32:58:5e:1a:6d:32:59:c4:f5: eb:a3:3d:24:01:55:b7:b9:fa:33:ad:00:92:ae:5e:aa:e9:03: 57:cf:92:21:36:a0:d4:30:7a:72:4b:09:81:b8:57:bb:0d:1c: 11:e9:c5:05:c6:ec:9b:13:39:b7:d6:40:1b:78:8c:b8:45:34: 65:45:7c:bb:2f:b6:11:ce:bb:c1:cf:74:00:2b:42:38:b3:72: e3:a1:fc:02:c2:de:7a:0a:b0:24:3b:eb:40:10:05:75:72:f5: 91:2d:b4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0uuMtS/ddnYJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NjZiNzczZmMtYjAyYS00MGVlLTkzYTgtODVkZjFjMzUzNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCGBQbngj8cgMLFHU/1+ijFw3Qyh3wxTi6UM U3+l4Wl7sum1+Dn3FvE7CPiBEsBtaAnY/tR4s6IR6kpqN2eh7ZO4FJlNiGHL95Md KFgli5AdBg5HFBzlaAP4lFuq+Epcklba0bEBRKSYTJfoWbNH6/lH1nJnXEm3Qwj1 KyaH8jrbQWKntxOQevP0x5YWCeqfRjyfEQwPbSB69ytWebS3ZH9nBFheeOkoCR3o 4c/M1W9tnS2tGG17DuFo1VuL4ZzJnCpxz7t7humsJT+hJxB8CUz1dMKAN51tGsfP FInSWGHiyFW+X7ifw3PwuqrEFquoS4IDovqT0Z/XZlI/pEZq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuqwkXQl/uoA2XTw0k1JTOi9JADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDQ1OTFlNmUtODc3MS0z OWZmLWE1MGItNTMwNTQ1MTIyMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaHXCHlZ2Z9q3j3TvpQq650833x2vyznRZIyY9aRs/BaLDYa/lpjOBn JZWLY2FAgMpXx/dS75aU4KsfopBH2x5Wy4da5RY+syje8oDzln9ymRDIDJOOPQXk 2gFaCwwDZfOr5GXbXyOGfjcbAJF6FfJKFVTHWbI53zivFOosJQrwLHGvmaCYaf1g y/i9QNWK62LJSTb0RNYlSTJYXhptMlnE9eujPSQBVbe5+jOtAJKuXqrpA1fPkiE2 oNQwenJLCYG4V7sNHBHpxQXG7JsTObfWQBt4jLhFNGVFfLsvthHOu8HPdAArQjiz cuOh/ALC3noKsCQ760AQBXVy9ZEttAc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:05 2025 by rpki-client