$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af6390ab-b499-3db7-9dd9-da1fb4dbacbe.roa File: af6390ab-b499-3db7-9dd9-da1fb4dbacbe.roa (raw, json) Hash identifier: XCJdfXjGA8CC6Ak3bsFof9GGZwPHSpsbiXMh1ZCzVEA= Subject key identifier: CB:DA:91:37:AB:0F:71:58:05:24:10:4C:9F:26:13:19:88:2B:FC:92 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B76F201D9B39A43B3AEED9C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af6390ab-b499-3db7-9dd9-da1fb4dbacbe.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 401152 IP address blocks: 142.111.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:01:d9:b3:9a:43:b3:ae:ed:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e6b58c8e-bdfe-43b2-a15e-af66de48f8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:62:e1:f3:26:a1:83:15:9f:16:53:54:9f: 44:98:ad:e2:2e:22:3e:87:2e:e1:88:e7:bd:d6:ba: fd:c2:c0:b7:63:e4:ab:4a:f2:16:eb:54:5d:90:3f: 05:b6:48:d0:c0:18:d9:12:e2:00:03:1f:c1:b6:f3: a5:1c:fc:af:1b:7b:be:8b:82:42:b3:bd:94:5d:11: 31:2b:f4:cf:d2:7b:59:3c:52:a2:3a:64:34:93:27: 93:6f:53:95:63:f2:eb:58:11:67:aa:80:35:c8:77: 92:1e:8f:b3:d4:6b:1e:64:79:eb:7d:6b:e0:d1:3b: 3f:6b:45:57:c9:f1:75:c8:ec:48:cd:94:2e:f6:b1: d3:5c:4f:0e:44:57:d1:07:c5:51:cb:c7:23:ba:0c: 8d:03:2a:07:b0:0d:cc:bc:f4:15:56:50:91:60:15: 88:4d:a4:73:61:13:4b:cb:6b:7e:b0:85:ac:9f:d3: 2f:7f:cc:8f:60:3e:ff:03:04:8e:81:5f:01:47:8a: cb:18:36:3c:8c:35:ae:d5:08:f4:71:7b:33:f2:54: ba:92:fc:13:2e:83:21:9c:56:da:fb:3b:70:29:f9: ee:ca:d6:09:52:fd:23:98:df:2c:61:9a:96:93:96: 58:9d:45:86:72:46:ae:c4:d1:4e:d5:f8:90:2c:f1: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DA:91:37:AB:0F:71:58:05:24:10:4C:9F:26:13:19:88:2B:FC:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af6390ab-b499-3db7-9dd9-da1fb4dbacbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fb:d8:b7:0e:80:5a:d3:8e:80:12:2d:fe:95:a0:4e:76:60: b8:0d:e7:63:98:c7:83:e4:36:7b:10:de:16:af:88:18:22:cd: ca:5c:ae:58:98:c3:07:bc:04:0a:14:83:77:4d:f3:2a:01:48: a4:4c:cb:9e:b8:84:86:0c:44:68:4e:f8:89:55:fa:db:57:9e: 21:8b:31:69:89:be:fe:e3:2a:58:e7:56:4d:60:d2:23:03:e1: 47:47:16:c7:a1:68:ce:a5:6b:62:86:3b:ee:51:d7:a1:ab:de: 16:26:76:df:39:9a:c4:57:7e:f6:1b:b9:19:2c:2e:84:f4:96: 54:1f:5c:25:03:63:b2:c9:56:44:42:65:ec:89:83:9a:32:a9: 1c:bf:ce:23:2d:2b:2f:25:34:78:dd:30:5b:1e:ce:80:7e:b1: 92:0f:04:b4:10:04:1b:00:02:a5:b3:1e:79:c1:88:30:8b:e6: 88:b6:ed:22:a6:8b:79:c4:94:de:08:06:97:f5:0b:5e:d7:24: dd:3e:1e:19:d9:97:33:f9:2e:78:2e:0e:97:98:89:00:27:ff: f1:ca:a9:a5:b9:b9:63:0b:0a:67:d4:fd:c0:cd:23:a0:e6:bb: d6:74:f9:b3:07:7c:16:f1:5e:d0:85:66:de:d3:14:1f:37:ad: e5:5e:4f:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gHZs5pDs67tnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTZiNThjOGUtYmRmZS00M2IyLWExNWUtYWY2NmRlNDhmOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSpi4fMmoYMVnxZTVJ9EmK3iLiI+hy7hiOe9 1rr9wsC3Y+SrSvIW61RdkD8FtkjQwBjZEuIAAx/BtvOlHPyvG3u+i4JCs72UXREx K/TP0ntZPFKiOmQ0kyeTb1OVY/LrWBFnqoA1yHeSHo+z1GseZHnrfWvg0Ts/a0VX yfF1yOxIzZQu9rHTXE8ORFfRB8VRy8cjugyNAyoHsA3MvPQVVlCRYBWITaRzYRNL y2t+sIWsn9Mvf8yPYD7/AwSOgV8BR4rLGDY8jDWu1Qj0cXsz8lS6kvwTLoMhnFba +ztwKfnuytYJUv0jmN8sYZqWk5ZYnUWGckauxNFO1fiQLPEUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvakTerD3FYBSQQTJ8mExmIK/ySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWY2MzkwYWItYjQ5OS0z ZGI3LTlkZDktZGExZmI0ZGJhY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT72LcOgFrTjoASLf6VoE52YLgN52OYx4PkNnsQ3haviBgizcpcrliY wwe8BAoUg3dN8yoBSKRMy564hIYMRGhO+IlV+ttXniGLMWmJvv7jKljnVk1g0iMD 4UdHFsehaM6la2KGO+5R16Gr3hYmdt85msRXfvYbuRksLoT0llQfXCUDY7LJVkRC ZeyJg5oyqRy/ziMtKy8lNHjdMFsezoB+sZIPBLQQBBsAAqWzHnnBiDCL5oi27SKm i3nElN4IBpf1C17XJN0+HhnZlzP5LnguDpeYiQAn//HKqaW5uWMLCmfU/cDNI6Dm u9Z0+bMHfBbxXtCFZt7TFB83reVeT/U= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:35 2025 by rpki-client