$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8be453a1-95b8-3dca-8f60-c08971255bf0.roa File: 8be453a1-95b8-3dca-8f60-c08971255bf0.roa (raw, json) Hash identifier: PMJ6B4Wrg4peK3IBLwUalBstX3cjJmDBRQGaxRIxDP0= Subject key identifier: 3E:A4:C8:24:BC:B7:2F:F8:5D:1A:C5:F4:A0:FE:58:3F:80:08:C6:F3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75DD2C1F3CB884AC91200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8be453a1-95b8-3dca-8f60-c08971255bf0.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 142.111.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5d:d2:c1:f3:cb:88:4a:c9:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=33541e03-61da-49ea-b536-7a1b58b39890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:32:6f:c4:d0:4d:d3:57:d6:ce:7a:6b:d4: a5:01:7c:f8:bf:bf:f7:d6:37:ad:14:fb:20:87:b4: bc:71:fb:d7:d5:73:46:c1:14:1b:02:7d:9a:5d:49: aa:dd:df:a4:3a:5a:ba:61:45:14:8e:c7:a2:88:5f: 09:2a:e1:4c:c7:84:2e:22:65:6b:c5:0d:0a:da:2c: 07:f0:74:5b:f7:ad:aa:e5:31:f7:2c:ca:d8:80:56: 74:b3:65:b3:ac:f1:f7:ae:4c:17:c8:11:f8:dd:3b: 35:a2:19:08:6c:90:ca:50:62:ec:0c:8f:f7:bb:5b: 87:8d:6d:f2:86:7d:20:31:26:e0:8a:92:78:74:41: 26:9c:ff:93:25:df:36:62:34:89:01:c8:53:59:cd: 28:ff:fc:76:05:b1:85:cb:78:b5:9c:67:a4:d2:6d: 83:94:22:16:63:e0:40:c1:4c:0b:83:8f:32:aa:af: 37:91:1a:a6:43:8c:f1:9b:35:67:76:eb:0d:47:23: e1:8d:a6:36:0a:02:89:9f:42:f0:ac:6d:16:fa:fb: c6:e9:fd:e0:1e:53:73:82:08:93:cc:84:63:1e:7e: 9c:79:08:e5:b9:ff:43:a8:7a:25:ab:59:40:bb:55: c5:55:52:bf:39:f5:14:0f:4c:1b:06:0d:94:f5:9e: bc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:C8:24:BC:B7:2F:F8:5D:1A:C5:F4:A0:FE:58:3F:80:08:C6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8be453a1-95b8-3dca-8f60-c08971255bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:52:cc:3b:0d:ea:a6:8d:30:05:26:db:92:61:08:9a:81:75: d3:ad:dd:31:f2:c3:39:66:84:d8:04:f2:e0:07:e3:b4:84:cb: 96:53:c5:3b:9f:d3:7b:2d:a7:e2:27:84:9c:b1:18:da:96:68: 09:5c:8c:d4:2a:6f:50:64:9c:86:e3:39:91:b6:57:b0:10:1b: b7:bf:79:ab:01:46:19:fc:55:15:17:e0:17:69:bb:92:93:be: 79:99:c4:b0:bb:8a:ab:80:c2:44:f2:8a:b2:7d:bd:04:e7:51: a6:1f:11:8b:a8:f4:63:30:77:37:09:e0:09:bb:a3:98:f3:52: bd:d2:e3:82:1e:41:15:18:0e:51:8b:5d:1b:f7:90:44:db:2e: 63:d1:7f:1c:8e:d3:e4:e3:c0:f9:e3:eb:26:69:bd:bf:96:26: a4:41:40:fa:e1:ca:34:8b:91:5a:5f:9f:be:43:fe:b0:b9:c0: 25:02:0b:65:2f:59:f1:13:18:55:ff:2b:85:2f:7a:cc:36:c3: f2:22:57:5c:a0:73:56:e9:d8:7f:89:ed:01:03:22:94:30:77: c0:71:33:d7:a7:f2:ef:0e:24:dc:e7:5a:c8:43:2f:4d:b9:f2: f4:28:66:27:12:78:36:a0:d7:b4:2a:f6:e2:70:bd:56:ac:96: 0a:13:74:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp13SwfPLiErJEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzM1NDFlMDMtNjFkYS00OWVhLWI1MzYtN2ExYjU4YjM5ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Uyb8TQTdNX1s56a9SlAXz4v7/31jetFPsg h7S8cfvX1XNGwRQbAn2aXUmq3d+kOlq6YUUUjseiiF8JKuFMx4QuImVrxQ0K2iwH 8HRb962q5TH3LMrYgFZ0s2WzrPH3rkwXyBH43Ts1ohkIbJDKUGLsDI/3u1uHjW3y hn0gMSbgipJ4dEEmnP+TJd82YjSJAchTWc0o//x2BbGFy3i1nGek0m2DlCIWY+BA wUwLg48yqq83kRqmQ4zxmzVndusNRyPhjaY2CgKJn0LwrG0W+vvG6f3gHlNzggiT zIRjHn6ceQjluf9DqHolq1lAu1XFVVK/OfUUD0wbBg2U9Z68iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6kyCS8ty/4XRrF9KD+WD+ACMbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGJlNDUzYTEtOTViOC0z ZGNhLThmNjAtYzA4OTcxMjU1YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZSzDsN6qaNMAUm25JhCJqBddOt3THywzlmhNgE8uAH47SEy5ZTxTuf 03stp+InhJyxGNqWaAlcjNQqb1BknIbjOZG2V7AQG7e/easBRhn8VRUX4Bdpu5KT vnmZxLC7iquAwkTyirJ9vQTnUaYfEYuo9GMwdzcJ4Am7o5jzUr3S44IeQRUYDlGL XRv3kETbLmPRfxyO0+TjwPnj6yZpvb+WJqRBQPrhyjSLkVpfn75D/rC5wCUCC2Uv WfETGFX/K4Uvesw2w/IiV1ygc1bp2H+J7QEDIpQwd8BxM9en8u8OJNznWshDL025 8vQoZicSeDag17Qq9uJwvVaslgoTdN4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:46 2025 by rpki-client