$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa File: 9825f336-3da9-3d61-ab77-7695e2a1309e.roa (raw, json) Hash identifier: U2yECMzovDhA0mYicGdnIG7R/W1HJs2F7ZEJbTojOxc= Subject key identifier: FE:99:B2:EC:CB:AB:A9:80:C3:AA:34:09:5B:84:73:9D:9A:28:3E:F5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772AD82D67BA59A13D2D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 142.111.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2a:d8:2d:67:ba:59:a1:3d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=619fd367-9b2c-433b-a375-4e778c8af72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:bb:51:d4:1d:95:1b:90:65:dc:fa:ad:d2: 29:2b:71:ae:c6:3f:a2:7e:25:47:07:68:80:19:0f: 0b:8a:5c:42:4e:48:8b:18:e5:77:ba:82:c5:7d:a6: 72:ef:b1:6d:3d:b0:78:cb:44:13:04:9b:a8:95:7a: b0:18:35:3e:a3:fc:a9:4c:93:c8:4c:5a:1a:7b:f5: f1:c5:2f:b4:5b:13:b7:44:34:6e:38:f1:7f:e6:44: ee:cd:61:68:da:d7:63:90:0b:51:3b:62:d4:ba:55: be:d7:b3:7f:05:c5:f5:a6:10:06:11:e9:8f:e6:36: 05:4e:81:83:ad:c1:1f:f1:0e:5a:2f:c6:18:f9:79: 2a:11:85:df:94:89:8d:69:a7:a7:d7:75:58:ff:10: 69:c4:d8:8c:d6:a5:64:80:e2:74:5b:3e:18:7f:cb: 88:1e:ef:d1:ee:f0:2d:9d:a5:08:fb:70:10:88:7b: 60:de:f7:f8:b5:1b:51:d7:47:94:51:31:1e:ea:1f: 03:31:dc:9b:e2:1a:48:fd:df:ed:e8:15:b6:2c:49: 51:51:23:fd:39:8f:33:c4:20:f3:d4:f3:86:4d:29: 95:27:b7:e7:fc:52:7f:cb:c6:79:b1:09:02:65:94: d2:04:23:f0:26:40:7b:4f:ad:c2:d0:65:f8:9d:17: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:99:B2:EC:CB:AB:A9:80:C3:AA:34:09:5B:84:73:9D:9A:28:3E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7d:14:2c:ee:af:64:2d:31:40:85:ff:17:7d:ca:99:d5:32: d1:55:19:bf:8f:cb:17:15:d1:8d:e4:2f:ad:1f:58:33:36:98: fd:27:4a:51:2b:c0:c4:f3:2b:f8:3d:60:66:e7:18:1b:93:4f: 92:99:0a:59:7e:5a:71:14:91:9c:69:1b:6c:e3:fe:14:a9:24: 39:a8:7c:03:a4:41:f4:33:5c:f4:62:20:df:cc:99:9d:dd:54: 17:40:0f:54:e1:5b:38:52:64:02:9b:14:94:ec:70:f1:9a:a3: b3:34:93:89:32:94:00:bd:8a:21:77:ac:43:0f:38:48:ba:54: 3e:3d:f9:f3:b8:67:f6:98:ff:eb:2e:c6:c1:39:04:a4:97:71: 4a:89:4a:11:07:0c:ff:d7:21:ac:df:b7:57:3c:d1:61:3c:76: 47:90:d5:76:a5:70:ad:02:b3:c9:76:b5:80:9f:29:0e:17:c4: 8d:f4:92:3c:30:13:50:c5:3b:3e:17:c6:6b:6a:1b:bb:56:40: 59:9e:8e:9b:be:ee:ac:9c:2e:2b:10:76:44:c9:c6:5e:9e:42: 21:d7:c7:a9:49:60:8b:9f:1a:1a:1f:1a:2a:ca:ff:d4:e5:ad: 68:2f:0b:c6:38:b4:e9:4d:28:e4:08:19:4b:b9:76:28:55:56: 96:ce:12:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyrYLWe6WaE9LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjE5ZmQzNjctOWIyYy00MzNiLWEzNzUtNGU3NzhjOGFmNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZi7UdQdlRuQZdz6rdIpK3Guxj+ifiVHB2iA GQ8LilxCTkiLGOV3uoLFfaZy77FtPbB4y0QTBJuolXqwGDU+o/ypTJPITFoae/Xx xS+0WxO3RDRuOPF/5kTuzWFo2tdjkAtRO2LUulW+17N/BcX1phAGEemP5jYFToGD rcEf8Q5aL8YY+XkqEYXflImNaaen13VY/xBpxNiM1qVkgOJ0Wz4Yf8uIHu/R7vAt naUI+3AQiHtg3vf4tRtR10eUUTEe6h8DMdyb4hpI/d/t6BW2LElRUSP9OY8zxCDz 1POGTSmVJ7fn/FJ/y8Z5sQkCZZTSBCPwJkB7T63C0GX4nRc36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6ZsuzLq6mAw6o0CVuEc52aKD71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTgyNWYzMzYtM2RhOS0z ZDYxLWFiNzctNzY5NWUyYTEzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB9FCzur2QtMUCF/xd9ypnVMtFVGb+PyxcV0Y3kL60fWDM2mP0nSlEr wMTzK/g9YGbnGBuTT5KZCll+WnEUkZxpG2zj/hSpJDmofAOkQfQzXPRiIN/MmZ3d VBdAD1ThWzhSZAKbFJTscPGao7M0k4kylAC9iiF3rEMPOEi6VD49+fO4Z/aY/+su xsE5BKSXcUqJShEHDP/XIazft1c80WE8dkeQ1XalcK0Cs8l2tYCfKQ4XxI30kjww E1DFOz4XxmtqG7tWQFmejpu+7qycLisQdkTJxl6eQiHXx6lJYIufGhofGirK/9Tl rWgvC8Y4tOlNKOQIGUu5dihVVpbOEu4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:31 2025 by rpki-client