$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dac138c-af6e-36b1-8429-b77038131e84.roa File: 1dac138c-af6e-36b1-8429-b77038131e84.roa (raw, json) Hash identifier: uwCEH+r49O9nL1lMAT6cLrZeOmLWABlZh7hhlvLbmkU= Subject key identifier: 70:81:A8:EC:77:39:05:5A:9D:90:0E:86:C9:4E:33:71:12:E2:D5:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2658C57C574659BF340E31C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dac138c-af6e-36b1-8429-b77038131e84.roa Signing time: Wed 10 Sep 2025 16:07:17 +0000 ROA not before: Wed 10 Sep 2025 16:07:17 +0000 ROA not after: Tue 09 Dec 2025 17:07:17 +0000 asID: 22773 IP address blocks: 142.111.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:58:c5:7c:57:46:59:bf:34:0e:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 10 16:07:17 2025 GMT Not After : Dec 9 17:07:17 2025 GMT Subject: CN=d4c61b6e-f4fc-4e1f-b34c-e311811b5f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:d0:06:1b:e4:6d:55:fe:31:1f:c7:ea:31: af:76:50:0b:9d:e1:2f:47:14:a7:56:6a:33:7a:fc: c9:cf:8a:77:60:73:4e:64:55:72:0a:74:9c:d0:ce: df:6c:66:f5:78:cc:fa:78:19:18:03:ac:7c:7a:05: ec:d6:96:c3:58:af:f6:58:80:cd:1e:4c:d0:72:0b: 32:66:28:bd:df:73:39:43:9b:ee:86:3a:bb:00:ba: 7b:50:45:44:86:04:f3:98:cd:79:ac:bb:af:53:a1: 53:c8:c7:a6:eb:a2:66:e2:d7:9f:55:34:29:68:02: 36:3e:47:00:05:7f:7b:2c:26:26:6c:30:38:b4:5a: 41:51:ef:3f:44:c8:38:19:8e:30:42:33:74:da:3f: 65:87:d7:92:94:d5:61:ee:ec:71:54:11:fd:c0:35: 97:37:57:5e:1b:01:5f:ff:23:f3:54:fe:fd:53:d5: 12:cc:49:72:53:69:b4:dc:16:d5:e1:28:6d:f5:30: 31:04:74:b2:fb:ac:36:b1:0e:ea:97:c9:ba:2c:9d: a1:d0:dc:f0:c4:b7:93:97:2d:d7:72:7c:af:c0:3c: 8a:fc:4e:1e:66:0b:1c:01:e4:91:f9:2c:8c:84:81: 84:35:b5:09:11:29:a2:28:9f:be:7f:ac:40:05:4d: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:81:A8:EC:77:39:05:5A:9D:90:0E:86:C9:4E:33:71:12:E2:D5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dac138c-af6e-36b1-8429-b77038131e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a0:d5:85:75:22:c5:7e:39:c5:99:56:4f:bf:9b:c4:14:89: e4:be:d5:7b:0a:c8:98:3e:fd:ed:1e:09:0e:da:ee:29:9e:a2: 99:7f:62:62:01:ba:46:b0:d5:a5:0f:8f:32:76:e9:ef:0c:12: 4b:bd:54:04:78:44:d7:07:7e:54:78:69:4c:e7:57:1e:44:5c: b8:f9:97:3b:7c:d9:46:41:2f:5d:8a:6b:5b:90:ee:7f:6e:e9: 76:5a:a3:2b:28:78:99:11:2d:81:f5:a8:8a:75:b7:ed:06:ec: 68:58:1d:7a:a5:76:94:e8:2e:a5:21:6a:1d:23:dd:01:bd:0f: 03:3a:2a:b2:33:36:d8:d8:12:80:cd:02:1e:52:4d:d5:62:b2: 70:be:25:9e:20:77:a2:5b:eb:10:5b:5d:a1:ce:63:a5:18:69: d1:59:e1:d4:cb:23:e1:3d:82:26:81:12:de:d1:04:41:1d:13: c2:51:ca:18:a9:39:90:91:a7:2a:60:38:ad:25:ae:0d:16:b0: f8:de:8d:05:c3:37:bb:ff:ba:10:c0:c6:66:41:31:25:5c:ca: 3d:89:9c:68:b3:67:2d:3e:3f:0a:21:ef:cf:f1:9a:08:75:59: 00:d1:d2:4e:36:e6:3c:ce:fb:5e:f5:cc:c0:c2:bf:99:73:16: 77:1e:fb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmWMV8V0ZZvzQOMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMDE2MDcxN1oXDTI1MTIwOTE3MDcxN1owLzEtMCsGA1UEAxMk ZDRjNjFiNmUtZjRmYy00ZTFmLWIzNGMtZTMxMTgxMWI1ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG7QBhvkbVX+MR/H6jGvdlALneEvRxSnVmoz evzJz4p3YHNOZFVyCnSc0M7fbGb1eMz6eBkYA6x8egXs1pbDWK/2WIDNHkzQcgsy Zii933M5Q5vuhjq7ALp7UEVEhgTzmM15rLuvU6FTyMem66Jm4tefVTQpaAI2PkcA BX97LCYmbDA4tFpBUe8/RMg4GY4wQjN02j9lh9eSlNVh7uxxVBH9wDWXN1deGwFf /yPzVP79U9USzElyU2m03BbV4Sht9TAxBHSy+6w2sQ7ql8m6LJ2h0NzwxLeTly3X cnyvwDyK/E4eZgscAeSR+SyMhIGENbUJESmiKJ++f6xABU3sGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCBqOx3OQVanZAOhslOM3ES4tVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWRhYzEzOGMtYWY2ZS0z NmIxLTg0MjktYjc3MDM4MTMxZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKig1YV1IsV+OcWZVk+/m8QUieS+1XsKyJg+/e0eCQ7a7imeopl/YmIB ukaw1aUPjzJ26e8MEku9VAR4RNcHflR4aUznVx5EXLj5lzt82UZBL12Ka1uQ7n9u 6XZaoysoeJkRLYH1qIp1t+0G7GhYHXqldpToLqUhah0j3QG9DwM6KrIzNtjYEoDN Ah5STdVisnC+JZ4gd6Jb6xBbXaHOY6UYadFZ4dTLI+E9giaBEt7RBEEdE8JRyhip OZCRpypgOK0lrg0WsPjejQXDN7v/uhDAxmZBMSVcyj2JnGizZy0+Pwoh78/xmgh1 WQDR0k425jzO+171zMDCv5lzFnce+0k= -----END CERTIFICATE-----Generated at Mon Nov 3 17:13:51 2025 by rpki-client