$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84bfb4ad-2874-37bb-bc86-8bc61d1e0123.roa File: 84bfb4ad-2874-37bb-bc86-8bc61d1e0123.roa (raw, json) Hash identifier: JZ6De47HxpcfeotuRL4UapyG5Uec7LY0hKYNOh+HLmA= Subject key identifier: 89:09:FE:A7:9C:F1:13:11:12:0B:92:EC:B7:A9:97:A0:90:24:29:C8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772EE5BA8B87CA2F37F140 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84bfb4ad-2874-37bb-bc86-8bc61d1e0123.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 142.111.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2e:e5:ba:8b:87:ca:2f:37:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=53ba303d-9ebd-4d59-af43-48fa0f1d9cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:16:2b:08:35:5e:28:55:b5:21:0b:15:d8: 93:2d:f4:67:2d:bd:9b:9b:1b:08:bd:97:5f:ca:85: 05:47:5c:a0:06:8c:fc:2c:36:d4:18:4c:cc:b8:65: b9:65:cc:e1:8f:34:9a:b9:34:71:21:d2:29:ee:90: 46:39:0d:41:34:59:01:0b:0e:ef:c9:6b:2c:21:f2: a5:c2:3a:6e:15:54:cf:b8:c4:eb:b2:f6:03:5b:61: 80:eb:41:8f:35:b3:90:8b:43:e3:cb:1e:ae:51:7b: 17:cf:8e:5b:44:5a:88:01:f1:4d:ca:e3:aa:93:27: 5c:0b:42:38:5a:ac:7b:d1:b8:a2:58:4a:ef:f6:a7: 53:18:15:df:d4:de:2a:ff:48:ea:e1:4a:de:57:fc: 74:f6:e1:b3:45:e0:79:a6:91:23:1b:e1:3f:6f:cb: c3:a8:b0:c6:45:9d:b7:e7:e7:d6:b3:82:34:73:36: 0e:e2:43:b7:02:00:c0:db:1a:2b:89:d9:63:2d:98: 2a:b3:e1:db:9b:93:50:b4:fd:b1:30:17:58:65:ed: 93:23:34:c2:6f:45:ed:b9:66:d1:4f:72:d5:e4:ee: fb:93:b4:7a:0c:81:db:17:4a:4d:f4:b6:f4:91:fb: 0f:07:45:35:92:cc:df:8a:0d:e2:33:0f:d8:15:b9: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:FE:A7:9C:F1:13:11:12:0B:92:EC:B7:A9:97:A0:90:24:29:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84bfb4ad-2874-37bb-bc86-8bc61d1e0123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:cb:9c:48:a5:45:42:01:01:a3:50:f5:3c:25:23:31:fb:4a: 0e:1c:59:7f:96:a7:17:23:02:7a:e5:77:28:fe:d1:0e:6d:e2: d8:d7:3f:b1:89:b6:f1:ea:4b:b7:d2:2b:97:e3:a4:07:02:9e: 3d:52:e2:8f:0f:3f:c8:f7:00:41:39:d7:09:2b:55:df:c3:92: c6:66:12:5f:d9:a8:ef:0f:27:cb:bc:c0:90:a7:87:51:0e:4e: d5:a3:76:a7:1e:1d:89:7c:6d:31:5e:f7:8f:7e:e2:f3:56:e2: c5:ef:88:3b:53:25:03:ce:7e:13:89:8f:b8:ed:c3:69:ce:dc: 31:b3:96:35:d5:ef:0d:37:95:8b:a9:23:4b:e0:3a:67:8d:88: 3e:a9:c2:82:06:1f:8b:85:d6:96:72:43:b7:32:c2:49:07:ea: 07:af:e4:64:e8:f8:2e:f8:3f:ec:6e:39:43:fe:72:5a:58:05: 86:63:2c:1c:74:c2:01:01:33:c0:3e:b1:30:e2:9d:00:d4:37: 13:e4:66:c8:c6:0e:7d:9a:35:f2:da:5d:fd:4d:be:d9:04:92: e6:1d:52:86:2a:20:c1:5d:ff:b6:8a:c9:e6:b7:72:0a:2a:06: b8:43:28:1d:ba:a3:06:a6:d8:67:f4:11:15:23:4c:48:93:e6: e4:53:5e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy7luouHyi838UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NTNiYTMwM2QtOWViZC00ZDU5LWFmNDMtNDhmYTBmMWQ5Y2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg8WKwg1XihVtSELFdiTLfRnLb2bmxsIvZdf yoUFR1ygBoz8LDbUGEzMuGW5ZczhjzSauTRxIdIp7pBGOQ1BNFkBCw7vyWssIfKl wjpuFVTPuMTrsvYDW2GA60GPNbOQi0Pjyx6uUXsXz45bRFqIAfFNyuOqkydcC0I4 Wqx70biiWErv9qdTGBXf1N4q/0jq4UreV/x09uGzReB5ppEjG+E/b8vDqLDGRZ23 5+fWs4I0czYO4kO3AgDA2xoridljLZgqs+Hbm5NQtP2xMBdYZe2TIzTCb0XtuWbR T3LV5O77k7R6DIHbF0pN9Lb0kfsPB0U1kszfig3iMw/YFbnLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkJ/qec8RMREguS7Lepl6CQJCnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODRiZmI0YWQtMjg3NC0z N2JiLWJjODYtOGJjNjFkMWUwMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXLnEilRUIBAaNQ9TwlIzH7Sg4cWX+WpxcjAnrldyj+0Q5t4tjXP7GJ tvHqS7fSK5fjpAcCnj1S4o8PP8j3AEE51wkrVd/DksZmEl/ZqO8PJ8u8wJCnh1EO TtWjdqceHYl8bTFe949+4vNW4sXviDtTJQPOfhOJj7jtw2nO3DGzljXV7w03lYup I0vgOmeNiD6pwoIGH4uF1pZyQ7cywkkH6gev5GTo+C74P+xuOUP+clpYBYZjLBx0 wgEBM8A+sTDinQDUNxPkZsjGDn2aNfLaXf1NvtkEkuYdUoYqIMFd/7aKyea3cgoq BrhDKB26owam2Gf0ERUjTEiT5uRTXp0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:24 2025 by rpki-client