$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6920690f-d48d-3745-98ac-1483ce6beb4a.roa File: 6920690f-d48d-3745-98ac-1483ce6beb4a.roa (raw, json) Hash identifier: sE99DuD7FSUbxQ8ygYllFEx4DgNT5UQ1IzlgAcFKt+0= Subject key identifier: D5:E6:68:02:3C:72:D1:B8:C5:D5:08:40:7C:C7:46:0F:65:23:2B:22 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B355706F0645A49ED4DB7A100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6920690f-d48d-3745-98ac-1483ce6beb4a.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 142.111.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:06:f0:64:5a:49:ed:4d:b7:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8fa5a8e3-c905-40de-b48e-d14093d012a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c8:d1:8a:0c:56:46:cc:18:70:5b:09:5a:3a: be:6a:d5:06:b1:f5:84:15:86:4b:c5:fc:ab:fe:9b: 81:7e:af:35:95:42:a8:95:02:77:35:d4:06:b9:8f: 9a:06:e3:07:78:88:63:fb:c8:b9:6e:ad:1d:97:fe: 19:11:8c:d4:e4:67:8d:48:f9:f4:5d:6e:98:0c:4c: e4:1b:57:a2:6d:e3:63:bc:35:ad:7f:b2:3a:8e:31: b9:92:fe:9a:f8:19:30:91:4a:02:eb:99:3c:78:c3: 4d:86:a6:81:12:b3:fd:f3:4c:52:67:31:bd:95:82: dd:91:68:37:4f:ad:a2:69:3c:a0:a5:f1:b1:cb:9c: f6:b7:35:b0:7d:e2:1c:e1:49:4f:dd:f5:8f:b5:75: 3b:b8:29:c4:4f:16:13:c5:3d:65:35:73:8d:c5:93: ee:8d:f9:6b:bc:d3:b2:25:46:2d:44:7d:8a:9f:cc: 02:c6:c0:3b:f1:c2:8d:67:5c:9e:67:9a:4e:48:c5: a9:1a:ac:f4:ea:c8:9b:a2:95:1d:dc:23:dd:26:98: a3:37:1c:0a:d9:e3:78:f2:b7:60:6a:e5:67:45:75: 9f:6d:cf:1c:9d:2e:72:93:a1:c6:71:61:61:d1:22: a1:6b:d2:04:bd:51:34:0f:0d:f5:c6:47:20:5b:bc: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E6:68:02:3C:72:D1:B8:C5:D5:08:40:7C:C7:46:0F:65:23:2B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6920690f-d48d-3745-98ac-1483ce6beb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ab:74:f9:f9:5f:67:83:a8:05:80:e8:dc:8b:91:c0:ac:40: 12:4f:f6:2d:2f:52:c6:78:ce:15:68:80:dc:5c:b7:a7:49:d1: e2:86:17:48:fe:9f:b7:25:86:cf:cc:1c:01:f6:ad:a9:43:bd: b0:e3:f0:ee:7a:89:d2:7f:dd:ac:54:71:ce:25:84:74:64:75: d0:a3:ba:9a:47:09:f5:d3:56:6f:c8:30:d3:a5:ea:7b:51:d6: 08:52:ed:19:ed:dc:61:c1:a8:ff:89:4a:ef:fb:11:fa:e2:6d: ad:11:e3:18:85:36:13:80:29:ab:90:67:d4:40:9e:08:db:ec: 64:a5:63:4a:ab:a6:f2:f3:d5:ff:3b:9b:a0:f8:1b:e7:e6:1f: 98:80:b6:79:f8:7c:93:24:b8:71:f3:09:9b:0d:2e:ba:96:cb: 7c:72:de:bd:cb:7f:be:47:bd:17:1d:df:dd:2a:9f:75:11:c8: 94:93:16:59:2d:cd:d3:b0:16:9c:cc:1f:41:ec:74:bc:da:a7: 73:a2:8e:ee:d5:f9:a0:a4:7f:02:a4:3f:44:17:89:4d:11:34: a0:fb:8b:9a:d1:cf:70:71:4e:4d:0b:04:9e:b6:90:c1:4f:6c: 49:95:a1:7b:99:90:75:1a:be:3d:3e:93:cc:02:01:6a:82:2a: d1:ea:13:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwbwZFpJ7U23oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGZhNWE4ZTMtYzkwNS00MGRlLWI0OGUtZDE0MDkzZDAxMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsjRigxWRswYcFsJWjq+atUGsfWEFYZLxfyr /puBfq81lUKolQJ3NdQGuY+aBuMHeIhj+8i5bq0dl/4ZEYzU5GeNSPn0XW6YDEzk G1eibeNjvDWtf7I6jjG5kv6a+BkwkUoC65k8eMNNhqaBErP980xSZzG9lYLdkWg3 T62iaTygpfGxy5z2tzWwfeIc4UlP3fWPtXU7uCnETxYTxT1lNXONxZPujflrvNOy JUYtRH2Kn8wCxsA78cKNZ1yeZ5pOSMWpGqz06sibopUd3CPdJpijNxwK2eN48rdg auVnRXWfbc8cnS5yk6HGcWFh0SKha9IEvVE0Dw31xkcgW7w2/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXmaAI8ctG4xdUIQHzHRg9lIysiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjkyMDY5MGYtZDQ4ZC0z NzQ1LTk4YWMtMTQ4M2NlNmJlYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOrdPn5X2eDqAWA6NyLkcCsQBJP9i0vUsZ4zhVogNxct6dJ0eKGF0j+ n7clhs/MHAH2ralDvbDj8O56idJ/3axUcc4lhHRkddCjuppHCfXTVm/IMNOl6ntR 1ghS7Rnt3GHBqP+JSu/7Efriba0R4xiFNhOAKauQZ9RAngjb7GSlY0qrpvLz1f87 m6D4G+fmH5iAtnn4fJMkuHHzCZsNLrqWy3xy3r3Lf75HvRcd390qn3URyJSTFlkt zdOwFpzMH0HsdLzap3Oiju7V+aCkfwKkP0QXiU0RNKD7i5rRz3BxTk0LBJ62kMFP bEmVoXuZkHUavj0+k8wCAWqCKtHqEw0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:03 2025 by rpki-client