$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec86c625-da18-3ebf-bc96-7597fed56560.roa File: ec86c625-da18-3ebf-bc96-7597fed56560.roa (raw, json) Hash identifier: Q+vpJRQ9NeLR/FYBMUeJkvAqyzn61+kqFfZ9JF9Y9Ak= Subject key identifier: A1:75:9E:65:73:6D:2B:44:FA:4B:D0:3E:5A:BA:6D:2D:9E:0E:D2:33 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D73952A0D8C3B225F782A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec86c625-da18-3ebf-bc96-7597fed56560.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 3257 IP address blocks: 142.111.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:39:52:a0:d8:c3:b2:25:f7:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=b88c341c-9b87-4dd9-ad4a-a7f42158634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:7b:3f:ba:86:88:a5:be:dc:7c:ac:61:77: 21:4b:2c:a3:0e:6d:d7:9d:21:2e:b7:ac:32:86:8b: ac:11:46:6b:ad:19:e4:49:c7:4e:e3:99:29:86:2f: 22:98:71:97:a7:c1:3e:ba:8b:25:13:39:11:ab:f9: 8c:c1:84:68:84:b0:ae:54:78:05:ab:77:e8:99:b3: 2a:8f:4f:68:8e:d6:d9:4d:bb:18:20:78:ce:e6:1b: e6:7e:8d:22:6e:63:af:da:07:4d:e4:e5:93:5d:26: cc:8a:eb:c6:04:45:c9:4a:64:89:c7:d2:2d:78:0c: 28:07:16:1d:a5:aa:42:89:87:90:43:73:7c:c5:52: 1d:87:df:96:64:54:28:f9:86:b2:9a:09:ee:28:b3: 0c:ec:0e:62:36:11:83:ec:be:e3:98:9c:b3:1d:52: ed:60:84:6e:46:4c:de:5d:e3:1d:7d:37:ab:00:73: 6d:f8:81:ae:60:4f:b0:04:91:55:1f:28:17:d9:55: 19:b1:5d:20:35:ec:4a:ec:40:f9:f2:24:74:6f:86: 28:fa:bb:22:7b:bb:8d:8d:0e:91:46:54:ba:0b:74: b2:7a:50:20:5b:da:b4:de:3b:6c:1c:8b:73:11:e2: 92:73:e1:f8:e7:62:6e:39:9f:7d:02:57:85:78:bc: 5d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:75:9E:65:73:6D:2B:44:FA:4B:D0:3E:5A:BA:6D:2D:9E:0E:D2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec86c625-da18-3ebf-bc96-7597fed56560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:7d:7f:3b:6e:2e:08:5b:1b:09:ce:b8:a4:b7:56:2e:17:a2: 2f:35:1b:08:d5:5a:9d:df:fa:48:84:59:a9:a4:55:f5:99:86: a4:93:91:9c:23:c2:8a:01:ba:5d:b7:79:17:f6:0e:93:1a:54: ca:82:6f:5a:1e:65:ff:a1:10:fa:33:6a:fa:79:b5:ce:4a:75: f0:82:23:40:6e:87:69:e4:70:86:c5:8b:58:17:fa:af:8d:b1: 9b:3f:04:bb:dd:23:5f:87:b8:b1:8d:eb:f2:21:0b:a4:99:48: 8c:df:65:60:b4:28:03:5c:29:c4:47:76:1e:19:34:3e:16:6b: 09:9f:1a:1f:64:6d:a9:07:27:fe:06:00:18:89:dd:da:37:48: ca:4d:19:33:51:1f:b9:3c:00:d1:cf:4a:c8:b9:e0:22:69:ca: a0:37:7c:e0:2f:eb:29:fc:52:13:6b:3c:48:9d:8f:f4:0b:df: 4c:84:d4:0e:f4:31:be:08:02:3a:d9:43:4d:d6:09:86:a6:89: 4f:37:76:75:34:2f:ae:2c:63:e9:33:3d:dd:ab:fe:53:40:ca: 57:37:bb:ad:29:69:b4:e9:43:54:f5:18:96:cf:50:2d:94:0b: 87:b6:6f:4b:f2:d8:f5:0a:b3:e5:f1:2b:04:83:70:60:d6:fb: 8d:b0:61:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zlSoNjDsiX3gqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Yjg4YzM0MWMtOWI4Ny00ZGQ5LWFkNGEtYTdmNDIxNTg2MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdh7P7qGiKW+3HysYXchSyyjDm3XnSEut6wy housEUZrrRnkScdO45kphi8imHGXp8E+uoslEzkRq/mMwYRohLCuVHgFq3fombMq j09ojtbZTbsYIHjO5hvmfo0ibmOv2gdN5OWTXSbMiuvGBEXJSmSJx9IteAwoBxYd papCiYeQQ3N8xVIdh9+WZFQo+YaymgnuKLMM7A5iNhGD7L7jmJyzHVLtYIRuRkze XeMdfTerAHNt+IGuYE+wBJFVHygX2VUZsV0gNexK7ED58iR0b4Yo+rsie7uNjQ6R RlS6C3SyelAgW9q03jtsHItzEeKSc+H452JuOZ99AleFeLxdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF1nmVzbStE+kvQPlq6bS2eDtIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWM4NmM2MjUtZGExOC0z ZWJmLWJjOTYtNzU5N2ZlZDU2NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd9fztuLghbGwnOuKS3Vi4Xoi81GwjVWp3f+kiEWamkVfWZhqSTkZwj wooBul23eRf2DpMaVMqCb1oeZf+hEPozavp5tc5KdfCCI0Buh2nkcIbFi1gX+q+N sZs/BLvdI1+HuLGN6/IhC6SZSIzfZWC0KANcKcRHdh4ZND4WawmfGh9kbakHJ/4G ABiJ3do3SMpNGTNRH7k8ANHPSsi54CJpyqA3fOAv6yn8UhNrPEidj/QL30yE1A70 Mb4IAjrZQ03WCYamiU83dnU0L64sY+kzPd2r/lNAylc3u60pabTpQ1T1GJbPUC2U C4e2b0vy2PUKs+XxKwSDcGDW+42wYc8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:01 2025 by rpki-client