$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa File: 4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa (raw, json) Hash identifier: GYKjxiXW2S5Q+Hk9FnLldpwyery71h3O4DxDHcBTY28= Subject key identifier: 1C:B6:40:E1:5D:6E:D5:8D:B2:D5:0A:7B:E2:41:EF:A5:D9:9E:A4:CC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A87B8AA52F35BD9A5EB9BD300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa Signing time: Tue 15 Jul 2025 20:26:58 +0000 ROA not before: Tue 15 Jul 2025 20:26:58 +0000 ROA not after: Mon 13 Oct 2025 20:26:58 +0000 asID: 44559 IP address blocks: 142.111.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:aa:52:f3:5b:d9:a5:eb:9b:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 15 20:26:58 2025 GMT Not After : Oct 13 20:26:58 2025 GMT Subject: CN=ece666fb-b020-4c90-9d28-a43fe52e82b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:89:97:3b:c4:35:de:fc:b5:6a:63:00:9a: 7e:03:cb:ff:72:8f:cb:af:9b:29:bd:d3:bc:37:c5: b0:c2:b0:cd:14:7a:8c:bb:a9:1f:e7:dd:3c:b4:98: 54:9a:a0:9b:61:f8:b1:c5:7d:9d:2c:ec:7c:ed:e2: b1:57:dd:88:99:6c:f4:30:8e:23:66:09:41:1a:ca: 52:ed:6b:c3:dd:17:9a:80:d1:43:47:4f:ad:3b:97: 87:f3:55:1f:7c:fb:c1:b1:5f:2d:f2:4a:53:8e:c9: de:c4:b1:53:49:09:da:bd:5c:64:3b:e4:92:31:1a: 06:da:15:dd:7c:af:dd:5b:f9:aa:bd:95:7f:0b:9c: 81:c0:fa:47:f3:ca:01:89:7b:ce:ad:87:6a:4a:7c: 5d:16:b0:67:27:2d:7e:dc:44:29:ce:62:32:92:53: a1:09:8a:95:a4:49:34:75:f7:4d:ac:91:1b:ad:bd: 2f:a5:2e:2e:f0:a3:17:a4:f6:06:0f:a0:23:21:ed: 5c:c3:06:f4:27:68:e1:28:ec:d7:1b:e5:fa:20:d2: 2c:a2:1a:d8:05:f6:f2:23:c9:79:0f:9e:b3:e0:1f: 14:3b:a3:a6:1f:20:b1:b3:71:f8:66:ec:1c:a6:2d: 3a:76:88:55:3f:41:aa:dd:bc:89:1b:45:9a:b1:34: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:40:E1:5D:6E:D5:8D:B2:D5:0A:7B:E2:41:EF:A5:D9:9E:A4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e0:ab:46:1c:a9:32:d9:1a:28:f5:1b:2a:26:9d:37:25:50: 21:04:3b:c6:f7:79:b3:8c:4d:f1:84:05:9e:3d:f1:41:9d:38: ba:b9:9d:6e:e0:7b:54:b2:99:f7:50:2c:c8:1c:58:33:6c:cd: ed:23:61:b7:f7:e0:66:c0:d7:10:51:db:4c:6e:45:bd:fe:56: 03:95:d4:62:6b:bb:02:1e:c2:7b:2c:e8:b7:c7:22:a1:3a:08: ae:e7:67:f7:a6:6b:a1:23:aa:32:ec:19:1f:9d:af:21:c7:e5: 09:5a:eb:bb:84:c0:86:b9:48:9f:9b:29:1d:99:6a:5f:14:44: d9:7e:fe:1c:4c:4b:37:df:bb:cc:75:fc:c5:f1:8c:d0:8c:70: 24:3b:b7:3a:ee:81:92:fd:35:53:77:4b:14:54:7e:9a:69:23: e5:c1:e4:20:53:36:07:20:89:30:1f:f9:8f:33:a5:69:61:a5: 48:c1:4f:06:bf:88:06:68:38:72:3a:2b:b0:c8:44:9a:bb:7b: b4:56:54:c7:89:65:d7:e3:34:fb:a2:93:bd:3a:6b:7b:d7:ef: 76:89:bd:29:9c:5e:2a:54:ca:37:cb:60:fd:c3:33:e6:ad:ee: c5:e1:fb:8f:9b:ec:7c:03:4e:5b:2d:0b:bb:3b:ca:d3:25:14: d5:94:72:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuKpS81vZpeub0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcxNTIwMjY1OFoXDTI1MTAxMzIwMjY1OFowLzEtMCsGA1UEAxMk ZWNlNjY2ZmItYjAyMC00YzkwLTlkMjgtYTQzZmU1MmU4MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs2JlzvENd78tWpjAJp+A8v/co/Lr5spvdO8 N8WwwrDNFHqMu6kf5908tJhUmqCbYfixxX2dLOx87eKxV92ImWz0MI4jZglBGspS 7WvD3ReagNFDR0+tO5eH81UffPvBsV8t8kpTjsnexLFTSQnavVxkO+SSMRoG2hXd fK/dW/mqvZV/C5yBwPpH88oBiXvOrYdqSnxdFrBnJy1+3EQpzmIyklOhCYqVpEk0 dfdNrJEbrb0vpS4u8KMXpPYGD6AjIe1cwwb0J2jhKOzXG+X6INIsohrYBfbyI8l5 D56z4B8UO6OmHyCxs3H4Zuwcpi06dohVP0Gq3byJG0WasTSe2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy2QOFdbtWNstUKe+JB76XZnqTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGM1ZjZiYWMtNTQyNy0z MTZmLWFkMjEtODJiOTdjOWFkNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLgq0YcqTLZGij1GyomnTclUCEEO8b3ebOMTfGEBZ498UGdOLq5nW7g e1SymfdQLMgcWDNsze0jYbf34GbA1xBR20xuRb3+VgOV1GJruwIewnss6LfHIqE6 CK7nZ/ema6EjqjLsGR+dryHH5Qla67uEwIa5SJ+bKR2Zal8URNl+/hxMSzffu8x1 /MXxjNCMcCQ7tzrugZL9NVN3SxRUfpppI+XB5CBTNgcgiTAf+Y8zpWlhpUjBTwa/ iAZoOHI6K7DIRJq7e7RWVMeJZdfjNPuik706a3vX73aJvSmcXipUyjfLYP3DM+at 7sXh+4+b7HwDTlstC7s7ytMlFNWUcrE= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:13 2025 by rpki-client