$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2ab17b5-de13-3e75-97fe-f512ae2e7332.roa File: d2ab17b5-de13-3e75-97fe-f512ae2e7332.roa (raw, json) Hash identifier: sqGwXL+d1hreiqgdkZphoWMK4Nls6DMrSveXUclRfv4= Subject key identifier: 63:E1:8E:67:A1:53:EC:F1:A5:8A:07:DC:EB:4B:FA:C0:4B:F7:15:A9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A9E6534E6C1C0838E0D893120 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2ab17b5-de13-3e75-97fe-f512ae2e7332.roa Signing time: Wed 23 Jul 2025 23:22:24 +0000 ROA not before: Wed 23 Jul 2025 23:22:24 +0000 ROA not after: Tue 21 Oct 2025 23:22:24 +0000 asID: 7385 IP address blocks: 142.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:65:34:e6:c1:c0:83:8e:0d:89:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 23 23:22:24 2025 GMT Not After : Oct 21 23:22:24 2025 GMT Subject: CN=19221c38-b377-4c5d-967f-52da961d75ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:1b:57:50:93:fc:52:f6:37:e0:f8:94:2d: 52:24:52:63:5c:3d:a2:78:a3:4a:68:ac:d4:1b:57: e6:86:15:6f:93:f0:4c:4c:79:69:cb:41:e9:c9:14: ff:ae:fb:da:22:8d:b6:0d:4c:12:38:b2:4b:9c:8a: dc:6d:33:82:c4:c7:d2:fb:37:ea:be:8b:eb:46:1c: 73:47:0b:fa:e4:6c:d0:bc:f7:7c:fa:46:40:0e:25: b7:c4:31:83:fb:ab:04:85:e6:b9:fa:6c:e3:09:74: 14:2b:60:23:43:d1:8a:40:2a:7d:42:80:b5:ff:9e: c4:06:cd:a7:39:4c:b8:28:04:73:a7:4f:c7:bf:0f: e8:b9:5d:ed:e7:9e:ca:b3:c5:70:b3:69:7d:c9:a6: 90:c5:cd:c8:e2:cb:7b:79:b6:ac:fa:bc:78:82:ca: c1:b8:ac:9f:c1:f6:92:ad:0d:5d:be:a6:26:1c:05: 96:22:5d:96:c4:3d:01:7b:6b:8a:80:35:40:4a:5b: b7:eb:bc:6c:13:8a:25:57:ce:ae:09:5f:83:bc:66: bd:4b:62:de:bd:f2:33:0d:bb:1f:66:b4:2b:fb:c5: c1:fe:44:9e:7b:cd:67:d2:b3:61:fb:6e:fe:d0:3f: e6:2a:db:b6:62:bc:3c:07:ba:cf:cf:12:b3:9a:ee: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E1:8E:67:A1:53:EC:F1:A5:8A:07:DC:EB:4B:FA:C0:4B:F7:15:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2ab17b5-de13-3e75-97fe-f512ae2e7332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d8:21:47:30:0a:ff:15:dd:8a:21:05:2f:6e:0e:15:a7:4c: 66:97:ae:14:1c:09:16:9f:e5:b8:af:f3:01:c1:3e:f2:02:43: 16:3a:b4:cc:e6:30:d2:fb:02:8d:20:00:36:09:eb:de:83:71: 5c:b1:d7:dd:8b:6e:ee:89:19:fc:fe:9d:d2:f4:dc:c1:23:f5: 05:ad:f2:c3:75:d8:46:ed:9a:d7:9a:1c:79:2f:b4:55:54:4b: fb:aa:1c:00:62:c1:d1:66:d1:5b:cc:0e:b7:36:b7:b5:74:9b: fc:35:74:df:ae:1f:94:f6:8b:6a:a8:7d:f9:16:48:fe:34:0f: 37:3a:2e:56:41:3d:64:10:0e:e4:b8:31:24:a6:e3:87:e0:91: a1:22:39:23:eb:be:e3:5a:b6:28:0c:e6:1a:71:d6:8c:02:12: 2f:17:94:f2:e4:6d:3f:72:6b:6b:05:bd:80:e7:a7:e3:ae:e9: f0:de:71:64:fa:ab:70:18:2a:43:92:36:e9:e8:1e:ca:44:ec: 01:0e:86:b6:1a:fd:2e:9d:ef:f8:6e:09:8e:2d:78:85:06:ab: 1e:6e:53:e1:ea:8b:92:dc:9d:12:29:e0:98:94:05:bc:c4:96: f6:37:39:e4:bc:81:82:f5:4d:e5:52:68:22:0f:79:b1:26:2d: fd:9e:7e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZTTmwcCDjg2JMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMzIzMjIyNFoXDTI1MTAyMTIzMjIyNFowLzEtMCsGA1UEAxMk MTkyMjFjMzgtYjM3Ny00YzVkLTk2N2YtNTJkYTk2MWQ3NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQcbV1CT/FL2N+D4lC1SJFJjXD2ieKNKaKzU G1fmhhVvk/BMTHlpy0HpyRT/rvvaIo22DUwSOLJLnIrcbTOCxMfS+zfqvovrRhxz Rwv65GzQvPd8+kZADiW3xDGD+6sEhea5+mzjCXQUK2AjQ9GKQCp9QoC1/57EBs2n OUy4KARzp0/Hvw/ouV3t557Ks8Vws2l9yaaQxc3I4st7ebas+rx4gsrBuKyfwfaS rQ1dvqYmHAWWIl2WxD0Be2uKgDVASlu367xsE4olV86uCV+DvGa9S2LevfIzDbsf ZrQr+8XB/kSee81n0rNh+27+0D/mKtu2Yrw8B7rPzxKzmu6nkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPhjmehU+zxpYoH3OtL+sBL9xWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDJhYjE3YjUtZGUxMy0z ZTc1LTk3ZmUtZjUxMmFlMmU3MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPYIUcwCv8V3YohBS9uDhWnTGaXrhQcCRaf5biv8wHBPvICQxY6tMzm MNL7Ao0gADYJ696DcVyx192Lbu6JGfz+ndL03MEj9QWt8sN12EbtmteaHHkvtFVU S/uqHABiwdFm0VvMDrc2t7V0m/w1dN+uH5T2i2qoffkWSP40Dzc6LlZBPWQQDuS4 MSSm44fgkaEiOSPrvuNatigM5hpx1owCEi8XlPLkbT9ya2sFvYDnp+Ou6fDecWT6 q3AYKkOSNunoHspE7AEOhrYa/S6d7/huCY4teIUGqx5uU+Hqi5LcnRIp4JiUBbzE lvY3OeS8gYL1TeVSaCIPebEmLf2efm0= -----END CERTIFICATE-----Generated at Sat Jul 26 13:03:52 2025 by rpki-client