$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa File: 8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa (raw, json) Hash identifier: fP0Ki2JYnAfIoUfCvfFTfIze6sX5Nvjj4UQaYa3O+qs= Subject key identifier: 71:B9:D3:97:17:45:12:91:FF:8C:BA:21:D3:08:06:63:46:1B:D7:D2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B355707A577422247A0E9EB00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 142.111.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:07:a5:77:42:22:47:a0:e9:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=129701e9-1437-46e2-9cd9-9d00b3a2fcc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:a1:36:4e:b6:20:ab:03:c7:b4:20:22:c0: 8b:7f:a9:a2:da:41:08:e8:32:fe:45:58:49:2b:7d: 8c:a5:54:ae:a6:44:53:d5:6b:c7:6c:74:ed:d1:21: 14:2b:ca:b3:78:35:89:a9:eb:45:cb:a0:71:f0:0f: 7f:ce:69:73:d7:19:3c:92:de:1b:d4:8b:4e:32:de: 11:c4:97:d5:02:a6:0a:04:e7:8b:13:97:f3:d8:4f: 38:7a:b5:f7:a5:87:2e:b5:9c:cf:95:53:f7:1d:fa: e1:3b:61:3d:cb:75:a4:62:ad:31:d7:88:5b:d3:44: 97:c1:e8:20:5f:ad:49:48:0b:29:40:6c:ea:66:fc: bd:4a:04:2a:92:2c:79:99:22:9f:aa:6c:c2:50:85: 6d:71:7e:a9:d3:8d:2a:64:16:f9:fb:cf:ed:99:17: 1c:5e:b1:5b:93:9d:e2:c0:48:78:18:9a:c3:28:b4: 61:4e:79:d1:dc:7a:e8:02:5b:4f:5e:a0:46:1d:b3: f9:44:6a:47:44:f6:3b:39:9f:3e:b3:47:47:8f:93: d1:2e:ac:c3:82:14:ab:02:ba:31:0b:0f:24:fd:ab: 4f:89:49:84:09:e5:fa:79:57:b6:4f:39:e7:bd:e4: 3c:76:58:c0:22:1b:06:fc:7b:10:15:2e:00:ad:78: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:D3:97:17:45:12:91:FF:8C:BA:21:D3:08:06:63:46:1B:D7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:63:82:ef:ec:ef:62:ce:89:a4:eb:8d:9d:5f:34:4d:32:db: 66:32:d3:4f:a6:aa:c7:65:cc:6e:5f:34:56:b2:80:a6:8b:8b: 11:5c:e8:77:46:1b:d4:28:f6:42:6b:65:2b:7b:09:a4:d1:9b: cf:f3:09:16:fe:65:50:e3:e6:74:53:5f:51:c9:57:04:3b:3b: 39:4a:42:f0:13:1e:da:97:30:9f:81:98:48:69:0e:91:75:06: a7:54:18:bf:ba:71:55:58:15:b8:7b:ed:4b:2d:6b:cd:27:55: c2:b9:a9:d3:3d:52:fc:35:ff:61:2c:ad:d0:4f:b0:52:a9:b9: 0a:64:a2:86:6c:98:bd:5c:1d:ee:7f:1c:d9:a3:24:ab:5c:c9: 7e:7f:9f:84:4a:87:ce:ac:9b:83:c4:99:38:e1:0a:73:38:4d: e6:6f:6c:50:f0:cd:9f:60:83:b9:4b:d6:96:35:87:ab:2d:94: 85:47:9f:bb:10:90:6c:40:69:f5:4e:f8:65:d1:e5:d5:16:46: b1:8d:16:44:9f:cb:34:b1:82:5d:df:58:1c:ea:ab:bb:7a:d1: 87:a3:3a:28:e3:52:90:ee:7e:9f:aa:50:6c:43:00:8e:b8:10: 8e:92:8a:4c:c8:a2:68:12:f6:ee:fe:82:4b:36:5b:76:75:da: ad:00:bb:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vweld0IiR6Dp6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MTI5NzAxZTktMTQzNy00NmUyLTljZDktOWQwMGIzYTJmY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJmhNk62IKsDx7QgIsCLf6mi2kEI6DL+RVhJ K32MpVSupkRT1WvHbHTt0SEUK8qzeDWJqetFy6Bx8A9/zmlz1xk8kt4b1ItOMt4R xJfVAqYKBOeLE5fz2E84erX3pYcutZzPlVP3HfrhO2E9y3WkYq0x14hb00SXwegg X61JSAspQGzqZvy9SgQqkix5mSKfqmzCUIVtcX6p040qZBb5+8/tmRccXrFbk53i wEh4GJrDKLRhTnnR3HroAltPXqBGHbP5RGpHRPY7OZ8+s0dHj5PRLqzDghSrArox Cw8k/atPiUmECeX6eVe2TznnveQ8dljAIhsG/HsQFS4ArXiFlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG505cXRRKR/4y6IdMIBmNGG9fSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODYwOGE4YjgtYzZjOS0z MmQ1LTg0NDYtOGI1NDA1YjU1ZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBjgu/s72LOiaTrjZ1fNE0y22Yy00+mqsdlzG5fNFaygKaLixFc6HdG G9Qo9kJrZSt7CaTRm8/zCRb+ZVDj5nRTX1HJVwQ7OzlKQvATHtqXMJ+BmEhpDpF1 BqdUGL+6cVVYFbh77Usta80nVcK5qdM9Uvw1/2EsrdBPsFKpuQpkooZsmL1cHe5/ HNmjJKtcyX5/n4RKh86sm4PEmTjhCnM4TeZvbFDwzZ9gg7lL1pY1h6stlIVHn7sQ kGxAafVO+GXR5dUWRrGNFkSfyzSxgl3fWBzqq7t60YejOijjUpDufp+qUGxDAI64 EI6SikzIomgS9u7+gks2W3Z12q0AuzU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:47 2025 by rpki-client