$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7527ce97-6934-3660-8eff-d683d6f952c9.roa File: 7527ce97-6934-3660-8eff-d683d6f952c9.roa (raw, json) Hash identifier: I0qlg9B0anFyUVTTCtCxtPSLVWX3PQFZDd4f9ygX1q4= Subject key identifier: E9:A5:1D:6F:D1:9B:93:51:C7:82:00:48:A8:20:FC:2A:0F:92:1F:F9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF68692957F1EDB5702DB32A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7527ce97-6934-3660-8eff-d683d6f952c9.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 3561 IP address blocks: 142.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:92:95:7f:1e:db:57:02:db:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=fec260be-36a3-4291-be53-babd8e750088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:71:65:17:6d:75:f0:35:2f:ee:22:2d:9a: 81:fa:f6:f3:cb:8f:36:db:eb:4a:98:d2:72:7c:f4: b4:86:0f:bf:e5:d0:65:3e:50:21:28:23:f1:48:d1: e7:64:28:4a:87:98:57:b7:cd:f1:d4:12:b0:11:1b: 6e:93:74:93:74:02:fb:5b:19:b2:9b:cc:2d:43:f7: 12:27:c7:8b:af:64:da:a3:0d:f6:78:76:98:1c:2a: 85:af:3b:52:76:0b:2e:4b:de:be:7c:ad:78:c7:5c: 57:37:86:40:58:00:2f:b5:d6:8c:67:01:69:17:db: 20:42:0a:f8:50:c2:e5:6f:ca:11:69:63:e0:f6:e0: fa:de:5e:ec:fc:d7:1f:da:7e:76:10:e1:6c:65:d7: f8:f4:eb:50:79:4d:e3:1f:bf:54:92:27:1e:75:e7: 02:4e:3d:67:98:61:34:e1:98:64:7a:c0:1a:5d:f9: ce:79:ea:f5:d1:6f:05:de:46:ce:13:6b:de:04:ba: 96:c4:cf:5b:29:b6:9f:77:8c:96:f1:e6:87:e2:33: 22:d8:df:59:ea:ba:3e:59:ad:50:b2:24:7c:33:7d: 1d:83:9b:6e:ed:13:2a:b8:23:c8:ae:60:9d:fa:16: 68:d2:c7:95:20:bf:0e:19:ea:58:f6:e2:0a:2e:cc: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A5:1D:6F:D1:9B:93:51:C7:82:00:48:A8:20:FC:2A:0F:92:1F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7527ce97-6934-3660-8eff-d683d6f952c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:39:15:7e:d6:3c:bc:bf:f0:7e:7a:c1:13:de:2d:6b:39:1c: 66:8f:5f:f4:d0:ce:2b:10:f6:53:e8:4d:06:14:11:94:34:ea: f6:3d:5e:20:b0:4f:bd:62:81:d1:de:7b:21:3a:c2:d9:f2:a4: 6e:25:df:4c:8e:fa:7e:66:f5:72:73:e5:81:a2:f1:31:21:68: 72:10:96:ef:9e:83:b9:17:53:a0:c7:3a:68:3e:eb:6d:44:f8: 38:0b:74:03:f3:21:ee:9c:ce:75:97:69:5e:e9:cf:e7:e7:ef: 3d:2c:29:ed:23:16:17:5e:15:bc:12:37:de:73:02:bf:d4:ca: c6:18:40:37:eb:50:35:b3:ff:94:e2:d8:23:7b:6b:3e:70:30: e0:5a:e1:c6:31:9e:cf:25:56:fe:04:57:7a:55:0e:15:46:da: 01:36:9e:76:d2:40:33:33:ca:56:d0:bc:ac:1b:91:bb:1e:23: 64:59:0b:ca:5c:bb:eb:f6:69:81:e0:8b:8d:15:5f:a1:76:9d: 92:0c:02:5f:18:c0:37:b8:ed:e3:c7:e3:7d:3c:77:74:f5:f3: 05:79:4b:96:32:47:f1:34:66:2f:ed:dd:8a:4e:28:3a:d5:ba: d8:79:9b:d3:69:51:b2:21:0c:d1:38:7b:30:d8:47:dc:13:b0: de:60:a1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpKVfx7bVwLbMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZmVjMjYwYmUtMzZhMy00MjkxLWJlNTMtYmFiZDhlNzUwMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMlxZRdtdfA1L+4iLZqB+vbzy4822+tKmNJy fPS0hg+/5dBlPlAhKCPxSNHnZChKh5hXt83x1BKwERtuk3STdAL7Wxmym8wtQ/cS J8eLr2Taow32eHaYHCqFrztSdgsuS96+fK14x1xXN4ZAWAAvtdaMZwFpF9sgQgr4 UMLlb8oRaWPg9uD63l7s/Ncf2n52EOFsZdf49OtQeU3jH79UkicedecCTj1nmGE0 4ZhkesAaXfnOeer10W8F3kbOE2veBLqWxM9bKbafd4yW8eaH4jMi2N9Z6ro+Wa1Q siR8M30dg5tu7RMquCPIrmCd+hZo0seVIL8OGepY9uIKLsyQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmlHW/Rm5NRx4IASKgg/CoPkh/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzUyN2NlOTctNjkzNC0z NjYwLThlZmYtZDY4M2Q2Zjk1MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw5FX7WPLy/8H56wRPeLWs5HGaPX/TQzisQ9lPoTQYUEZQ06vY9XiCw T71igdHeeyE6wtnypG4l30yO+n5m9XJz5YGi8TEhaHIQlu+eg7kXU6DHOmg+621E +DgLdAPzIe6cznWXaV7pz+fn7z0sKe0jFhdeFbwSN95zAr/UysYYQDfrUDWz/5Ti 2CN7az5wMOBa4cYxns8lVv4EV3pVDhVG2gE2nnbSQDMzylbQvKwbkbseI2RZC8pc u+v2aYHgi40VX6F2nZIMAl8YwDe47ePH4308d3T18wV5S5YyR/E0Zi/t3YpOKDrV uth5m9NpUbIhDNE4ezDYR9wTsN5gobo= -----END CERTIFICATE-----Generated at Tue Aug 26 18:20:09 2025 by rpki-client