$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a42fa7ed-f153-3ef3-b638-92a66cf1f716.roa File: a42fa7ed-f153-3ef3-b638-92a66cf1f716.roa (raw, json) Hash identifier: pPNCV8zP3loFzHZ1TqgvKORrM58s7yVpVkUsaYe/G5Y= Subject key identifier: AB:F7:CF:4A:92:35:D2:41:51:45:CE:69:E1:CC:43:AA:6C:C3:47:84 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772EBFCBC01558ADD8B080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a42fa7ed-f153-3ef3-b638-92a66cf1f716.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 142.111.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2e:bf:cb:c0:15:58:ad:d8:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=121ab945-f795-4eab-b4fe-b14b0a6cc3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:d4:9d:12:d2:9b:5c:34:ec:d9:42:c3:44: 1c:68:c9:76:d6:35:96:ee:00:1f:f0:98:10:cd:00: 26:05:11:2f:d3:1b:28:1f:bb:b1:07:27:30:e0:db: ed:20:2f:b3:23:89:62:9c:2e:03:04:96:30:10:a9: 24:1f:af:b5:86:78:e8:b7:d7:26:2b:bb:d9:ce:62: 15:6d:4e:e1:ed:34:38:6e:8a:33:22:03:39:41:28: 39:3a:d2:85:76:4b:b9:f8:97:ae:e3:68:1a:34:8f: b2:65:e0:ac:aa:b0:ff:01:37:cb:de:4f:5a:3f:32: 96:57:61:14:5d:6c:ae:f3:24:4e:7c:28:8f:10:d2: d9:7b:2d:a4:04:e4:fb:88:ed:8b:aa:f8:7d:65:8d: 95:f4:d6:20:f7:7b:55:4c:b1:eb:32:59:4f:92:ca: d3:26:dc:fc:56:e6:c0:60:02:f9:20:9e:4d:6d:d5: f3:66:6b:3e:5c:71:2d:8d:0e:bf:98:53:6b:b3:f5: 12:c8:f8:c3:86:2e:d6:16:bc:e0:76:1c:b5:4a:73: a5:94:6f:03:f2:2d:68:d9:98:1d:be:ca:3a:b0:85: 32:d8:66:dc:46:43:34:b8:64:90:8c:44:19:a2:25: ab:af:32:0b:9c:98:91:81:5f:0a:45:6b:84:90:40: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:CF:4A:92:35:D2:41:51:45:CE:69:E1:CC:43:AA:6C:C3:47:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a42fa7ed-f153-3ef3-b638-92a66cf1f716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f6:aa:34:41:75:92:ac:90:65:2e:e2:4a:79:2f:de:97:eb: b8:7b:50:e3:fc:18:17:c3:90:34:39:85:58:57:2e:ce:cb:af: 72:6b:01:08:e2:1f:15:a6:bd:89:13:b4:25:39:06:6a:c4:55: 50:36:89:24:28:7e:7d:3c:aa:b9:58:0c:9b:aa:25:94:a9:f4: 78:da:5e:16:36:34:85:4e:bb:38:9c:09:fe:4f:37:33:0f:2f: 91:28:a5:c4:91:b0:16:9d:43:52:c9:b0:f8:cf:ec:88:af:82: 71:5c:2d:2d:4a:bd:58:09:39:9e:eb:2a:02:9b:8a:9b:5a:dc: 9d:06:49:6e:ba:fc:e5:d0:9a:48:9e:1e:ec:b4:51:6f:5f:0b: dd:09:a2:10:9b:85:dc:03:63:0c:24:74:81:43:46:0d:72:99: 18:a8:3d:7a:e6:25:2a:32:6f:76:db:a7:98:d8:1e:65:53:dc: 24:89:bc:b1:ed:48:ae:94:56:3a:20:61:01:f1:f5:8f:88:f4: d0:97:f1:9d:df:b7:3d:ab:57:3e:f1:fe:e2:4d:07:b1:ad:10: 34:2b:3d:04:42:44:79:16:90:c7:25:df:d4:9c:10:b9:bb:58: f1:ba:77:86:b0:43:15:ed:53:5c:c9:a8:6c:1c:c2:d5:b6:ce: f0:6a:f9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy6/y8AVWK3YsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MTIxYWI5NDUtZjc5NS00ZWFiLWI0ZmUtYjE0YjBhNmNjM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTfUnRLSm1w07NlCw0QcaMl21jWW7gAf8JgQ zQAmBREv0xsoH7uxBycw4NvtIC+zI4linC4DBJYwEKkkH6+1hnjot9cmK7vZzmIV bU7h7TQ4boozIgM5QSg5OtKFdku5+Jeu42gaNI+yZeCsqrD/ATfL3k9aPzKWV2EU XWyu8yROfCiPENLZey2kBOT7iO2Lqvh9ZY2V9NYg93tVTLHrMllPksrTJtz8VubA YAL5IJ5NbdXzZms+XHEtjQ6/mFNrs/USyPjDhi7WFrzgdhy1SnOllG8D8i1o2Zgd vso6sIUy2GbcRkM0uGSQjEQZoiWrrzILnJiRgV8KRWuEkECQ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv3z0qSNdJBUUXOaeHMQ6psw0eEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTQyZmE3ZWQtZjE1My0z ZWYzLWI2MzgtOTJhNjZjZjFmNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj2qjRBdZKskGUu4kp5L96X67h7UOP8GBfDkDQ5hVhXLs7Lr3JrAQji HxWmvYkTtCU5BmrEVVA2iSQofn08qrlYDJuqJZSp9HjaXhY2NIVOuzicCf5PNzMP L5EopcSRsBadQ1LJsPjP7IivgnFcLS1KvVgJOZ7rKgKbipta3J0GSW66/OXQmkie Huy0UW9fC90JohCbhdwDYwwkdIFDRg1ymRioPXrmJSoyb3bbp5jYHmVT3CSJvLHt SK6UVjogYQHx9Y+I9NCX8Z3ftz2rVz7x/uJNB7GtEDQrPQRCRHkWkMcl39ScELm7 WPG6d4awQxXtU1zJqGwcwtW2zvBq+cM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:43:00 2025 by rpki-client