$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba0610da-4d78-3957-bbe0-2f53e7232d0f.roa File: ba0610da-4d78-3957-bbe0-2f53e7232d0f.roa (raw, json) Hash identifier: THC4srKmTewBm1U1KNX9Hi82gyMXfh2MSNIJsG4Pn0I= Subject key identifier: 08:2B:87:79:1D:19:B3:F8:3E:78:FB:8D:D3:0E:73:7D:90:AB:88:54 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D73495F9B930C5E3218400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba0610da-4d78-3957-bbe0-2f53e7232d0f.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 3561 IP address blocks: 142.111.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:34:95:f9:b9:30:c5:e3:21:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=838dabfc-c8c4-44bb-9489-b6c719c5f58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:bc:cc:10:36:7e:ae:b8:db:8d:17:99:cd: 90:18:b2:d0:4b:c1:49:a4:ba:78:71:10:cc:7d:7d: 7b:ad:85:e8:0d:04:8a:37:0d:0a:5f:d6:02:df:15: b7:84:97:56:6b:b0:16:d0:77:3f:09:ba:f5:e6:05: 86:9f:f2:0d:f7:84:a4:ef:52:bf:9d:5e:eb:2e:4a: 06:2c:29:ad:38:70:d4:35:30:1e:fb:d5:aa:7b:27: 38:18:c1:a9:56:89:a3:ee:e2:b7:2e:bb:bc:42:42: fa:dc:22:d7:fe:9a:f8:1c:c6:84:cc:e4:2c:a4:f1: 00:3f:ff:0c:f7:89:0d:01:96:80:04:29:da:0c:6a: 98:e2:ea:f4:7f:05:06:88:d0:06:e3:18:f4:f3:3d: f1:26:63:5c:ce:fa:e9:13:cd:c9:7e:70:5c:0e:fe: 1c:91:6e:18:b7:c7:11:37:fc:27:24:ec:08:5d:32: 4a:3f:fc:54:25:ec:0d:47:50:87:ec:c9:94:a6:7b: 0f:f1:a0:73:a3:93:0d:c4:39:fe:00:27:72:a6:42: 82:90:d1:28:d3:53:d5:30:1c:1d:5d:0a:d8:11:17: f8:2b:3f:47:d4:be:54:65:1e:e6:02:88:3a:63:47: ba:42:6c:be:09:d4:34:b1:24:9c:c4:ba:05:e0:cf: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:87:79:1D:19:B3:F8:3E:78:FB:8D:D3:0E:73:7D:90:AB:88:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba0610da-4d78-3957-bbe0-2f53e7232d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2b:ff:5d:da:06:f5:2f:21:9f:6c:c7:2a:ae:12:2a:99:59: c2:4b:70:e9:29:41:6d:85:e2:c2:89:2b:09:69:a6:53:5e:dd: 71:5e:01:61:73:af:f6:89:15:b0:07:0e:67:db:6e:1c:2a:7a: 81:67:eb:6e:f7:f1:9d:cb:70:b1:35:64:b4:23:61:eb:3d:23: b4:ee:96:bd:7f:20:da:cd:f4:36:9f:21:a8:49:7d:a8:2a:1d: 04:01:35:cc:19:ae:d9:02:83:87:18:f4:f4:33:2a:4a:76:ee: 5c:ee:e9:e4:cc:97:28:44:ea:77:02:d8:8e:9f:08:f9:06:98: 1e:36:15:6b:22:50:e7:14:08:1a:4c:9a:1f:99:f8:28:28:b7: 9f:8f:9e:d5:5e:1d:aa:ca:88:63:9e:23:f5:b4:dc:1a:ce:92: c0:09:d0:e5:ae:39:70:34:d2:97:48:fc:ee:01:91:fc:5c:a5: df:5f:a3:82:a8:53:07:d5:39:9c:dc:05:11:7d:7d:07:66:b5: c2:ce:2e:81:4b:8b:81:e3:52:73:6a:05:40:5a:96:3b:89:e2: 82:8c:49:67:3a:ab:9b:c0:a0:02:d4:21:51:44:de:7b:50:42: 5b:62:41:a6:2d:fa:5c:5c:6e:d3:92:f6:41:63:8d:d5:20:21: a4:db:c1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zSV+bkwxeMhhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ODM4ZGFiZmMtYzhjNC00NGJiLTk0ODktYjZjNzE5YzVmNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlde8zBA2fq64240Xmc2QGLLQS8FJpLp4cRDM fX17rYXoDQSKNw0KX9YC3xW3hJdWa7AW0Hc/Cbr15gWGn/IN94Sk71K/nV7rLkoG LCmtOHDUNTAe+9Wqeyc4GMGpVomj7uK3Lru8QkL63CLX/pr4HMaEzOQspPEAP/8M 94kNAZaABCnaDGqY4ur0fwUGiNAG4xj08z3xJmNczvrpE83JfnBcDv4ckW4Yt8cR N/wnJOwIXTJKP/xUJewNR1CH7MmUpnsP8aBzo5MNxDn+ACdypkKCkNEo01PVMBwd XQrYERf4Kz9H1L5UZR7mAog6Y0e6Qmy+CdQ0sSScxLoF4M8CowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgrh3kdGbP4Pnj7jdMOc32Qq4hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmEwNjEwZGEtNGQ3OC0z OTU3LWJiZTAtMmY1M2U3MjMyZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAor/13aBvUvIZ9sxyquEiqZWcJLcOkpQW2F4sKJKwlpplNe3XFeAWFz r/aJFbAHDmfbbhwqeoFn62738Z3LcLE1ZLQjYes9I7Tulr1/INrN9DafIahJfagq HQQBNcwZrtkCg4cY9PQzKkp27lzu6eTMlyhE6ncC2I6fCPkGmB42FWsiUOcUCBpM mh+Z+Cgot5+PntVeHarKiGOeI/W03BrOksAJ0OWuOXA00pdI/O4Bkfxcpd9fo4Ko UwfVOZzcBRF9fQdmtcLOLoFLi4HjUnNqBUBaljuJ4oKMSWc6q5vAoALUIVFE3ntQ QltiQaYt+lxcbtOS9kFjjdUgIaTbwTw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:56 2025 by rpki-client