$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0dfc009-ed02-358a-90b9-b124e0ab4520.roa File: f0dfc009-ed02-358a-90b9-b124e0ab4520.roa (raw, json) Hash identifier: zxNQ8e8NzJs3+t7sPpaTRFglMVL4BosC381XU3lzZdI= Subject key identifier: 5D:53:7E:CB:F0:F0:63:25:3D:A0:CC:DD:E7:0E:5B:97:29:A2:35:6C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6F0D87E9A689DDA7F5DBBA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0dfc009-ed02-358a-90b9-b124e0ab4520.roa Signing time: Mon 06 Oct 2025 17:09:41 +0000 ROA not before: Mon 06 Oct 2025 17:09:41 +0000 ROA not after: Sun 04 Jan 2026 18:09:41 +0000 asID: 215728 IP address blocks: 142.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:0d:87:e9:a6:89:dd:a7:f5:db:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 6 17:09:41 2025 GMT Not After : Jan 4 18:09:41 2026 GMT Subject: CN=4d910907-7073-42b0-964e-e52d3eabb7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:d9:d4:37:11:fe:fb:3e:d8:15:e0:2c:8d: 69:b4:f3:2c:f1:d4:a9:ac:04:81:95:86:d4:69:5a: f0:eb:4d:1f:d2:b2:17:74:9a:c4:14:24:0f:19:6f: 24:62:2d:46:31:cd:ce:c0:fb:01:6e:ac:36:3f:9f: aa:71:3a:a9:48:ac:26:b3:3d:46:32:5f:28:1d:e5: d1:35:8e:5e:96:4e:d8:ac:a6:5f:29:af:95:d0:ec: 2b:24:0c:b2:15:d6:13:d4:70:01:90:42:47:4c:a0: e6:98:07:53:69:f5:75:42:4f:d7:c4:d0:f0:95:68: 20:95:7d:fe:9c:0e:1d:de:43:21:29:0f:b1:cb:29: 65:3c:67:e7:80:ec:06:11:3f:48:b4:cd:cf:a7:fb: 36:35:66:a0:45:3a:ce:e0:26:d2:04:95:be:17:88: 98:e6:be:2f:b6:44:a8:d8:af:1f:fa:6b:4c:21:51: 90:01:24:b1:83:88:ca:37:e3:d4:3e:fb:1c:19:1b: 77:b7:a2:cf:d6:7d:fb:8a:54:03:5c:1f:e9:df:ed: 2d:bb:3d:8e:53:4c:1d:26:27:73:91:b9:47:48:ec: e0:c8:b1:9f:93:52:8a:72:23:02:41:6f:70:c1:a5: 34:40:78:7b:b9:5a:33:06:7d:83:08:3c:3a:75:e9: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:7E:CB:F0:F0:63:25:3D:A0:CC:DD:E7:0E:5B:97:29:A2:35:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0dfc009-ed02-358a-90b9-b124e0ab4520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:30:6d:0c:57:2a:ae:86:fd:88:91:6d:50:08:c0:6c:05:6d: 81:1c:51:52:71:ff:91:ef:ae:b2:b1:78:3a:e0:8d:69:45:39: c6:c1:80:bb:54:08:c0:77:b8:ed:83:be:78:3e:ad:0f:98:ad: 3c:bc:fb:fb:d9:db:ca:38:dc:1d:1a:fa:ad:bf:73:91:75:cd: 13:b0:7b:37:a9:75:d5:32:da:26:17:f1:a2:cb:4d:5a:ca:63: a0:2b:ee:47:30:4a:e0:bf:8d:f6:aa:8e:3f:ee:82:ee:87:d3: 50:31:b1:ef:74:7d:b3:f4:3b:4c:58:9d:5d:3f:9c:dc:01:fb: de:f2:e2:17:d8:81:31:14:f8:fe:1f:76:b2:d0:7e:78:8d:10: 15:8c:fd:d7:87:f6:59:67:19:18:b1:c1:19:93:f0:8b:a1:c4: c6:fd:bf:62:09:fd:24:15:bf:23:52:24:18:50:38:a6:d2:6d: d8:a6:1d:37:41:fa:fc:f5:ee:4c:c9:70:aa:d1:2f:14:9d:97: 34:7b:55:05:d5:ca:01:3a:1d:c0:db:11:a8:ae:e3:bc:2a:13: 13:86:7b:f9:f7:20:f5:60:95:60:80:3e:81:de:b0:91:80:cc: 31:f5:28:3f:ac:59:8f:1c:b1:09:17:98:1b:ce:b3:fd:66:75: 68:1e:2d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvDYfppondp/XbuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNjE3MDk0MVoXDTI2MDEwNDE4MDk0MVowLzEtMCsGA1UEAxMk NGQ5MTA5MDctNzA3My00MmIwLTk2NGUtZTUyZDNlYWJiN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnTZ1DcR/vs+2BXgLI1ptPMs8dSprASBlYbU aVrw600f0rIXdJrEFCQPGW8kYi1GMc3OwPsBbqw2P5+qcTqpSKwmsz1GMl8oHeXR NY5elk7YrKZfKa+V0OwrJAyyFdYT1HABkEJHTKDmmAdTafV1Qk/XxNDwlWgglX3+ nA4d3kMhKQ+xyyllPGfngOwGET9ItM3Pp/s2NWagRTrO4CbSBJW+F4iY5r4vtkSo 2K8f+mtMIVGQASSxg4jKN+PUPvscGRt3t6LP1n37ilQDXB/p3+0tuz2OU0wdJidz kblHSOzgyLGfk1KKciMCQW9wwaU0QHh7uVozBn2DCDw6delMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1Tfsvw8GMlPaDM3ecOW5cpojVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjBkZmMwMDktZWQwMi0z NThhLTkwYjktYjEyNGUwYWI0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIswbQxXKq6G/YiRbVAIwGwFbYEcUVJx/5HvrrKxeDrgjWlFOcbBgLtU CMB3uO2Dvng+rQ+YrTy8+/vZ28o43B0a+q2/c5F1zROwezepddUy2iYX8aLLTVrK Y6Ar7kcwSuC/jfaqjj/ugu6H01Axse90fbP0O0xYnV0/nNwB+97y4hfYgTEU+P4f drLQfniNEBWM/deH9llnGRixwRmT8IuhxMb9v2IJ/SQVvyNSJBhQOKbSbdimHTdB +vz17kzJcKrRLxSdlzR7VQXVygE6HcDbEaiu47wqExOGe/n3IPVglWCAPoHesJGA zDH1KD+sWY8csQkXmBvOs/1mdWgeLfU= -----END CERTIFICATE-----Generated at Fri Oct 10 23:26:15 2025 by rpki-client