$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f52aabf6-4db4-3169-9459-4027671b508d.roa File: f52aabf6-4db4-3169-9459-4027671b508d.roa (raw, json) Hash identifier: TsSmsb9+7iB1AxqoMQiSYVrF2MG9XaTKG4pS8lrFzSY= Subject key identifier: 72:ED:C9:75:77:7D:B6:4B:F5:CD:87:06:1E:1B:C9:15:E4:6F:3D:5B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75EADCC8952A7FD431280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f52aabf6-4db4-3169-9459-4027671b508d.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 142.111.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5e:ad:cc:89:52:a7:fd:43:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=487c161e-4855-4cd2-a09d-93450a5d6a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:47:a1:ee:90:37:8f:46:f8:30:c4:2e:c6: 86:3b:a9:5d:d1:16:e2:c6:2d:24:76:86:46:0d:7e: 88:22:ec:2e:8e:21:49:ad:74:92:dd:9f:59:5e:90: 9f:06:95:b3:07:c5:ca:34:e5:d6:b6:be:39:41:b2: 5b:1f:ea:ec:a6:e9:e4:10:28:7f:0a:c6:74:27:ac: 1e:76:fc:56:78:23:13:30:ca:7e:c0:bd:98:2c:9e: 45:9a:95:20:67:2e:97:91:0b:35:cc:0f:f9:ce:75: a1:7a:2b:e3:4f:4a:44:b4:3e:f4:24:07:d7:96:0e: 8c:e1:00:f9:4a:49:8b:28:71:f4:e2:b2:d7:ec:e4: 06:dc:c8:93:e0:3e:39:49:b2:05:b5:b8:1b:81:48: 32:d8:4f:96:43:ca:9f:2b:88:3c:10:7c:dd:f3:d7: f6:a8:cd:8f:12:ac:d7:bc:40:23:19:b5:93:d8:47: ec:35:02:93:36:e5:aa:05:df:c2:ad:a1:5e:e2:15: 34:ae:59:b1:bb:eb:59:98:60:2d:b6:f5:d1:bb:f4: a5:04:77:92:8a:cb:d5:d4:bf:6a:72:99:85:ee:73: bd:51:4a:1a:4b:17:74:16:4f:56:53:78:53:32:8c: 51:6d:2e:30:ec:30:1a:37:0e:61:97:58:97:bb:3e: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:ED:C9:75:77:7D:B6:4B:F5:CD:87:06:1E:1B:C9:15:E4:6F:3D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f52aabf6-4db4-3169-9459-4027671b508d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8a:dd:f1:d4:a1:c6:66:ea:ba:83:b9:52:60:e8:5e:2b:64: 1b:f9:b7:e2:92:b3:01:a0:b4:a6:f0:4a:ac:40:a1:d0:d3:33: 32:4f:b3:fb:03:64:bd:06:8c:6d:ee:8e:97:44:e2:a1:e2:92: cd:f9:f2:2a:7f:18:69:a1:30:b8:17:75:3a:39:39:81:f6:b6: 9f:33:ec:4a:f2:fc:f7:68:ab:95:78:0b:5c:56:33:da:3e:e3: 2a:05:59:b7:67:25:fe:8b:ed:20:08:cb:ee:b7:4b:19:c6:56: df:fb:87:bc:23:04:6f:fa:70:fd:ef:4d:04:7a:0a:0d:fb:45: d2:50:6f:0f:0c:bd:95:4f:e0:47:92:15:ce:df:4a:bf:b4:2f: 6a:d3:fc:b1:73:8b:cd:73:01:f7:ee:50:53:b7:aa:de:0c:9d: e4:e5:7a:4a:a5:29:aa:7e:6a:d7:f2:65:4b:fe:84:f1:6e:ef: 69:a5:da:64:cf:f8:db:08:f0:07:f7:27:70:be:75:24:df:f6: 8b:86:ec:cc:3d:16:e6:9f:71:45:83:b2:6c:b4:1f:80:27:63: ee:e2:73:bc:79:e8:3d:5a:5f:61:cd:c7:74:22:57:bd:af:99: d5:93:fb:49:03:0d:d0:4b:6b:8e:95:e9:a6:3b:cd:a3:61:f3: d7:ae:c8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp16tzIlSp/1DEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDg3YzE2MWUtNDg1NS00Y2QyLWEwOWQtOTM0NTBhNWQ2YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLNHoe6QN49G+DDELsaGO6ld0Rbixi0kdoZG DX6IIuwujiFJrXSS3Z9ZXpCfBpWzB8XKNOXWtr45QbJbH+rspunkECh/CsZ0J6we dvxWeCMTMMp+wL2YLJ5FmpUgZy6XkQs1zA/5znWheivjT0pEtD70JAfXlg6M4QD5 SkmLKHH04rLX7OQG3MiT4D45SbIFtbgbgUgy2E+WQ8qfK4g8EHzd89f2qM2PEqzX vEAjGbWT2EfsNQKTNuWqBd/CraFe4hU0rlmxu+tZmGAttvXRu/SlBHeSisvV1L9q cpmF7nO9UUoaSxd0Fk9WU3hTMoxRbS4w7DAaNw5hl1iXuz6mdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLtyXV3fbZL9c2HBh4byRXkbz1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjUyYWFiZjYtNGRiNC0z MTY5LTk0NTktNDAyNzY3MWI1MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGK3fHUocZm6rqDuVJg6F4rZBv5t+KSswGgtKbwSqxAodDTMzJPs/sD ZL0GjG3ujpdE4qHiks358ip/GGmhMLgXdTo5OYH2tp8z7Ery/Pdoq5V4C1xWM9o+ 4yoFWbdnJf6L7SAIy+63SxnGVt/7h7wjBG/6cP3vTQR6Cg37RdJQbw8MvZVP4EeS Fc7fSr+0L2rT/LFzi81zAffuUFO3qt4MneTlekqlKap+atfyZUv+hPFu72ml2mTP +NsI8Af3J3C+dSTf9ouG7Mw9FuafcUWDsmy0H4AnY+7ic7x56D1aX2HNx3QiV72v mdWT+0kDDdBLa46V6aY7zaNh89euyKk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:05 2025 by rpki-client