$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa File: ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa (raw, json) Hash identifier: 2TGGhOKXpuSi31uLhwphunVgkK++0Ts/IpNrFLZI9h8= Subject key identifier: 14:10:A0:E8:48:17:B7:E6:1D:35:91:D9:95:34:9D:44:26:58:55:C5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD66B9D883D3D013233E79180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 214238 IP address blocks: 142.111.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:9d:88:3d:3d:01:32:33:e7:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=d1e4bf5a-3d63-45ff-b839-b186cd87990d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:1f:1d:1c:91:52:d9:d5:1d:53:1b:cf:e3: cc:64:a3:42:15:7a:e9:67:ea:33:49:ff:65:fc:97: 1c:18:0b:16:3f:10:23:92:56:bd:95:2f:67:87:7a: f9:d4:52:25:9f:82:c3:a2:45:c4:e9:81:6c:e1:a5: a3:18:c6:80:27:57:11:ae:0a:3e:1b:c5:f2:fa:a2: 24:80:e1:fe:69:0e:17:88:51:8a:31:cf:e8:62:77: c1:b2:4a:bd:78:82:5a:33:60:cd:c0:2f:9f:74:ef: d5:2f:61:53:cd:64:09:8c:2a:6e:48:81:07:5e:1e: 5e:23:e1:30:ec:5e:10:0e:3e:b9:e2:10:60:32:48: 0f:58:5e:ce:a1:89:5f:ef:06:b8:0d:10:64:d3:9b: 98:66:83:21:2e:44:cf:bb:6a:e6:9a:b7:19:d3:96: b2:2a:f1:de:3f:41:a7:da:c2:39:ed:de:07:32:4c: 20:08:85:2e:e2:03:e3:25:50:67:bc:44:75:0e:35: 16:52:03:ad:39:00:f7:7f:4f:94:54:81:a0:3e:5a: 0d:a5:61:66:c2:50:d5:9a:5b:e9:b5:6d:41:32:3c: e7:f5:31:9c:e6:0a:23:46:d0:56:1f:d4:86:ab:34: ff:4a:05:bb:a3:b8:ae:1b:52:9b:b7:8f:d7:94:11: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:10:A0:E8:48:17:B7:E6:1D:35:91:D9:95:34:9D:44:26:58:55:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:10:21:1e:b4:a7:1a:e7:5e:f4:64:08:50:96:d5:1c:2f:84: 01:73:39:cd:33:d3:73:37:be:95:c5:01:65:3b:0a:23:05:a7: 2b:b2:82:87:c7:62:d2:d8:11:bc:f2:45:3f:07:82:67:9d:86: 94:2e:cd:e5:a1:33:b6:b3:0a:83:c2:87:b0:5f:3c:47:cd:5c: 42:51:01:38:e3:6b:70:59:d9:51:da:0f:14:86:c0:63:0c:0b: e2:4f:0a:2d:fa:b7:c4:ef:5a:2a:d1:2b:d2:94:6e:58:b7:2f: 39:cc:25:91:32:c4:a5:67:f4:18:2c:5b:75:66:81:73:cc:f3: 8d:7c:11:53:fb:14:02:a0:1c:d3:d2:ab:f4:78:63:58:83:48: ee:09:a5:ed:85:94:43:75:41:dd:5f:5e:2e:55:a9:0f:9f:c8: 3b:fe:3f:e1:64:4f:7d:52:1e:88:12:b0:91:80:96:66:a7:62: 7d:ad:af:5b:46:d2:24:6d:2d:02:52:90:60:21:57:f4:c3:07: 25:7c:9c:d7:db:90:e1:71:c2:b1:90:a7:ed:87:13:28:64:12: 49:56:5f:27:c8:4d:94:8e:0c:f2:57:49:dc:ef:6a:63:6f:10: 0c:e9:c4:86:f7:c5:35:72:2b:7c:ea:a3:85:60:fa:7f:81:eb: 37:f6:82:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErWa52IPT0BMjPnkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDFlNGJmNWEtM2Q2My00NWZmLWI4MzktYjE4NmNkODc5OTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon0fHRyRUtnVHVMbz+PMZKNCFXrpZ+ozSf9l /JccGAsWPxAjkla9lS9nh3r51FIln4LDokXE6YFs4aWjGMaAJ1cRrgo+G8Xy+qIk gOH+aQ4XiFGKMc/oYnfBskq9eIJaM2DNwC+fdO/VL2FTzWQJjCpuSIEHXh5eI+Ew 7F4QDj654hBgMkgPWF7OoYlf7wa4DRBk05uYZoMhLkTPu2rmmrcZ05ayKvHeP0Gn 2sI57d4HMkwgCIUu4gPjJVBnvER1DjUWUgOtOQD3f0+UVIGgPloNpWFmwlDVmlvp tW1BMjzn9TGc5gojRtBWH9SGqzT/SgW7o7iuG1Kbt4/XlBGoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQQoOhIF7fmHTWR2ZU0nUQmWFXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmEwNGFiZTctYmNlMS0z YTI2LTkzNDUtMWViOGI0ZjE2ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMQIR60pxrnXvRkCFCW1RwvhAFzOc0z03M3vpXFAWU7CiMFpyuygofH YtLYEbzyRT8HgmedhpQuzeWhM7azCoPCh7BfPEfNXEJRATjja3BZ2VHaDxSGwGMM C+JPCi36t8TvWirRK9KUbli3LznMJZEyxKVn9BgsW3VmgXPM8418EVP7FAKgHNPS q/R4Y1iDSO4Jpe2FlEN1Qd1fXi5VqQ+fyDv+P+FkT31SHogSsJGAlmanYn2tr1tG 0iRtLQJSkGAhV/TDByV8nNfbkOFxwrGQp+2HEyhkEklWXyfITZSODPJXSdzvamNv EAzpxIb3xTVyK3zqo4Vg+n+B6zf2gpA= -----END CERTIFICATE-----Generated at Fri Oct 24 03:14:48 2025 by rpki-client