$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa File: baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa (raw, json) Hash identifier: vsfwxoOVve/7WU5lyxbxZQckGorSeHm5hR7CSSMeHgg= Subject key identifier: 27:74:AC:73:3B:88:7A:81:56:E3:47:3F:78:EA:69:EC:35:E9:C9:53 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD66B9EC7078B31D1F462E280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 214238 IP address blocks: 142.111.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:9e:c7:07:8b:31:d1:f4:62:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=f00be8af-3bb8-4541-b6aa-e6a594b3c564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:ab:f2:cb:48:13:fd:fe:05:73:b3:61:64: 80:3a:1a:34:4b:0c:02:c7:38:9f:4d:24:b9:38:f0: a2:47:b1:db:8e:d6:c3:9e:d0:e6:ba:84:80:9d:65: 23:f9:37:b8:7f:ef:5e:d9:b4:af:bc:54:7b:49:48: b8:8b:4f:7e:0a:a9:1c:02:c0:44:b3:84:7e:cb:fc: d8:e5:be:fa:78:37:39:4e:c3:b6:40:bd:81:c2:b7: 88:4f:f1:f9:6b:a7:df:d6:b6:5c:30:a1:bd:87:6f: e6:83:a7:18:b4:ed:07:ac:df:b5:c3:7f:77:d0:1a: b9:ec:be:47:06:7d:7d:8f:d7:07:7d:fb:b7:03:a0: 53:94:98:df:ba:24:04:36:d8:66:9d:d7:98:df:aa: 48:ff:6e:e7:b9:a8:13:b9:68:c5:c9:43:c1:21:c7: a7:4b:61:64:3b:a7:d2:8e:81:3b:1c:bc:1e:69:43: 04:dc:d4:96:32:c7:76:11:97:8c:a3:fd:3d:23:8e: c1:0c:08:92:f3:d0:1c:e6:25:ba:e7:8d:f8:13:3c: 3b:53:24:d6:9d:dc:21:86:3f:9c:03:b8:47:79:d3: b0:d2:19:60:ca:0b:6d:71:49:48:f7:c2:08:c2:84: 91:a0:25:3e:09:d9:da:b7:0e:c4:0e:fb:07:7d:41: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:74:AC:73:3B:88:7A:81:56:E3:47:3F:78:EA:69:EC:35:E9:C9:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0e:66:ce:df:c8:e8:44:18:95:6e:20:4b:71:52:48:70:54: 3d:32:36:1e:9c:ab:16:9f:e6:d4:7f:75:a5:4c:46:69:02:d4: 24:c9:4a:e4:7e:13:c1:54:4b:fd:86:02:3c:35:1f:28:f4:52: 65:a0:ab:0b:af:ff:df:86:05:da:55:d8:fe:58:1e:f8:46:16: 0f:72:cb:c5:55:82:d3:1a:3a:92:bb:09:dc:d7:cb:1f:47:be: b7:f9:99:34:2b:1a:53:f8:c3:09:90:68:54:3b:ae:24:c5:26: 2a:e6:96:4c:48:80:f1:7a:56:2e:31:14:03:fa:b5:3a:09:fa: 5f:05:4d:bf:8b:03:1a:ae:1a:28:36:79:7a:fe:c1:5d:05:a8: 25:6f:dc:88:95:26:46:d5:73:6c:cd:1b:64:eb:75:37:7e:a5: 8c:61:1e:54:cd:48:35:41:6c:e7:f5:5f:17:e9:9e:62:25:43: bc:e0:0f:3a:c5:39:8f:2c:8e:e6:5d:93:ea:1a:52:6a:00:46: 84:99:9a:4f:74:6b:4d:af:e1:f9:97:5f:23:cb:73:c3:70:90: 07:3b:41:58:dd:32:d4:80:c9:12:87:94:b5:bc:bb:bf:f3:5e: 8c:f4:a3:14:b1:fe:20:62:8e:1c:d3:57:a2:1d:d3:d9:7e:56: d5:ff:df:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErWa57HB4sx0fRi4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjAwYmU4YWYtM2JiOC00NTQxLWI2YWEtZTZhNTk0YjNjNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDmr8stIE/3+BXOzYWSAOho0SwwCxzifTSS5 OPCiR7HbjtbDntDmuoSAnWUj+Te4f+9e2bSvvFR7SUi4i09+CqkcAsBEs4R+y/zY 5b76eDc5TsO2QL2BwreIT/H5a6ff1rZcMKG9h2/mg6cYtO0HrN+1w3930Bq57L5H Bn19j9cHffu3A6BTlJjfuiQENthmndeY36pI/27nuagTuWjFyUPBIcenS2FkO6fS joE7HLweaUME3NSWMsd2EZeMo/09I47BDAiS89Ac5iW65434Ezw7UyTWndwhhj+c A7hHedOw0hlgygttcUlI98IIwoSRoCU+Cdnatw7EDvsHfUECZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd0rHM7iHqBVuNHP3jqaew16clTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmFhODUxZjktMjdlMS0z MmEyLTgwMDYtM2YzZTViYjA5M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkOZs7fyOhEGJVuIEtxUkhwVD0yNh6cqxaf5tR/daVMRmkC1CTJSuR+ E8FUS/2GAjw1Hyj0UmWgqwuv/9+GBdpV2P5YHvhGFg9yy8VVgtMaOpK7CdzXyx9H vrf5mTQrGlP4wwmQaFQ7riTFJirmlkxIgPF6Vi4xFAP6tToJ+l8FTb+LAxquGig2 eXr+wV0FqCVv3IiVJkbVc2zNG2TrdTd+pYxhHlTNSDVBbOf1XxfpnmIlQ7zgDzrF OY8sjuZdk+oaUmoARoSZmk90a02v4fmXXyPLc8NwkAc7QVjdMtSAyRKHlLW8u7/z Xoz0oxSx/iBijhzTV6Id09l+VtX/33A= -----END CERTIFICATE-----Generated at Fri Oct 24 03:19:24 2025 by rpki-client