$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa File: a25adc19-0b0f-3e58-9770-caf9c965b218.roa (raw, json) Hash identifier: LsR1a7bxyNVBwVXcUeGE+BDJlfVP42qBbeX4ZWi3os8= Subject key identifier: D1:BD:AC:98:34:8F:7D:C3:95:F5:AF:EC:EF:32:AE:F3:90:31:AD:2A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D73457105DC0A97E9B3A40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 3257 IP address blocks: 142.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:34:57:10:5d:c0:a9:7e:9b:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=5eff708c-31c5-4e7e-9eb4-b862a22afd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:7f:1a:25:03:93:09:1f:d2:44:ee:60:85: 3f:5a:c8:fc:d9:23:55:82:83:cd:c0:0e:71:ac:4c: f6:b5:25:e7:c4:f2:a2:ca:e3:17:fa:f5:a5:3c:1b: 71:c5:bd:9e:02:21:58:df:11:88:a1:b8:a3:96:37: d6:60:47:c0:c0:65:ed:54:e5:81:1c:b2:e9:48:f4: c9:59:3c:bd:0d:5f:69:5d:6a:13:2e:a2:bd:44:26: e3:b2:f4:31:ac:3b:e5:68:fe:13:48:3e:80:f2:de: cb:f2:e7:9c:83:c6:51:17:6a:da:d0:e3:20:83:5c: 5f:16:22:1a:99:a9:fc:5a:0e:3b:37:ec:d6:c6:1e: b4:e8:f8:4e:03:b4:1f:3d:9f:3f:30:d0:87:eb:8f: b3:1e:72:a0:13:3c:7c:20:5b:57:fc:bd:52:ea:3d: d8:3c:ff:6b:b1:3b:06:a6:9a:a9:e2:57:27:c3:14: f6:ed:d2:23:b4:5c:74:0f:12:38:db:14:76:12:b0: cc:07:32:62:a3:86:09:d9:71:8d:a3:fa:82:b0:21: a2:40:66:76:81:17:be:9b:a9:93:db:62:2f:61:ed: 7c:86:9c:1b:36:31:78:96:ec:2b:7c:72:a1:34:a2: 0f:32:f4:1d:86:48:59:b8:8b:34:68:e4:2e:61:b7: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BD:AC:98:34:8F:7D:C3:95:F5:AF:EC:EF:32:AE:F3:90:31:AD:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:75:34:d2:1e:fd:c5:02:35:c5:ec:25:52:20:2b:0c:f3:a5: 9f:76:45:2f:b4:36:35:af:53:44:95:45:23:e7:82:13:2a:f1: 06:37:b6:d9:e1:cf:7f:65:f3:2c:8f:a0:f5:ba:52:ce:3a:f5: 81:90:a3:76:61:e2:5e:c4:db:6f:69:55:06:5d:d1:ab:7d:ba: 67:6f:40:ba:10:92:dd:3b:9a:a9:e2:26:22:95:d7:a4:a0:69: 29:ec:cd:67:47:00:74:ff:b8:19:74:5a:f6:41:61:2a:c5:4e: d6:9d:33:69:e8:14:dc:8a:a3:a9:d9:d4:d9:84:a4:b2:d2:11: c0:dd:aa:69:0c:67:8e:4a:1f:2d:e6:00:17:52:6c:75:93:b6: 34:3c:78:55:0c:66:f0:79:8a:6a:97:f4:7a:6f:63:c1:81:9c: 7b:d6:b3:bf:a0:8a:7a:67:21:ff:1d:16:1b:5f:2f:b3:dd:ce: af:8f:63:d8:1e:1a:fd:0d:06:3d:d7:53:19:8e:27:72:bc:09: 78:39:2a:2b:49:96:e5:74:72:ca:4f:2f:66:f9:d8:c6:f4:0d: 6e:71:3e:8a:34:42:ea:d4:d3:5c:ed:cd:c7:be:2e:6f:ba:3b: 85:eb:0d:6e:7b:96:09:33:14:81:7d:dc:2a:ef:a2:61:59:f4: e4:b4:31:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zRXEF3AqX6bOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NWVmZjcwOGMtMzFjNS00ZTdlLTllYjQtYjg2MmEyMmFmZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljV/GiUDkwkf0kTuYIU/Wsj82SNVgoPNwA5x rEz2tSXnxPKiyuMX+vWlPBtxxb2eAiFY3xGIobijljfWYEfAwGXtVOWBHLLpSPTJ WTy9DV9pXWoTLqK9RCbjsvQxrDvlaP4TSD6A8t7L8uecg8ZRF2ra0OMgg1xfFiIa man8Wg47N+zWxh606PhOA7QfPZ8/MNCH64+zHnKgEzx8IFtX/L1S6j3YPP9rsTsG ppqp4lcnwxT27dIjtFx0DxI42xR2ErDMBzJio4YJ2XGNo/qCsCGiQGZ2gRe+m6mT 22IvYe18hpwbNjF4luwrfHKhNKIPMvQdhkhZuIs0aOQuYbdmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG9rJg0j33DlfWv7O8yrvOQMa0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTI1YWRjMTktMGIwZi0z ZTU4LTk3NzAtY2FmOWM5NjViMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx1NNIe/cUCNcXsJVIgKwzzpZ92RS+0NjWvU0SVRSPnghMq8QY3ttnh z39l8yyPoPW6Us469YGQo3Zh4l7E229pVQZd0at9umdvQLoQkt07mqniJiKV16Sg aSnszWdHAHT/uBl0WvZBYSrFTtadM2noFNyKo6nZ1NmEpLLSEcDdqmkMZ45KHy3m ABdSbHWTtjQ8eFUMZvB5imqX9HpvY8GBnHvWs7+ginpnIf8dFhtfL7Pdzq+PY9ge Gv0NBj3XUxmOJ3K8CXg5KitJluV0cspPL2b52Mb0DW5xPoo0QurU01ztzce+Lm+6 O4XrDW57lgkzFIF93CrvomFZ9OS0MYk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:43:05 2025 by rpki-client