$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bef09311-66fd-391d-a4af-1196fc2f6e0a.roa File: bef09311-66fd-391d-a4af-1196fc2f6e0a.roa (raw, json) Hash identifier: 7BIu+qAXfyuC6gMca/pKPnaiq+r3rPuOBB9epzgg5eA= Subject key identifier: E9:D2:9F:BE:92:84:1A:BB:74:40:B3:7B:59:12:08:BE:9E:F4:A8:70 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B10445D871F653ECA77D67D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bef09311-66fd-391d-a4af-1196fc2f6e0a.roa Signing time: Tue 02 Sep 2025 18:18:23 +0000 ROA not before: Tue 02 Sep 2025 18:18:23 +0000 ROA not after: Mon 01 Dec 2025 19:18:23 +0000 asID: 401152 IP address blocks: 142.111.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:44:5d:87:1f:65:3e:ca:77:d6:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 18:18:23 2025 GMT Not After : Dec 1 19:18:23 2025 GMT Subject: CN=c3be4135-3fee-445c-b1a3-ceb037f6eb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:89:36:8a:f8:b1:2b:17:6f:1d:1d:da:e5: ae:96:13:6c:4d:8a:9e:82:39:be:fe:d4:49:f2:d1: 32:9c:6b:72:e3:9e:8d:13:c5:14:9f:3f:bd:af:ae: c4:a0:e5:48:ce:1f:38:62:d1:32:01:ca:9f:12:56: 16:70:85:a0:12:ed:d9:44:29:17:ab:24:1c:c7:05: 5d:61:af:44:1e:10:59:7d:c0:80:73:2c:e0:d5:0c: 34:16:61:3c:e1:92:8b:32:0b:e5:f0:ca:21:e6:af: 0d:d9:29:2b:2a:14:a7:ea:9e:eb:f2:6e:ae:f4:57: cc:3c:2d:1a:1e:f0:83:aa:c6:aa:4b:a2:45:0e:01: dd:68:1c:fd:c2:79:25:28:72:ed:89:c7:6c:47:d3: 28:21:37:ab:56:de:5c:a6:7e:fc:92:dc:a1:b0:f6: 02:0a:a2:32:c3:7a:e4:01:d4:b3:d6:aa:6a:bc:83: f8:2b:08:b0:76:66:be:b4:b0:91:31:c6:1e:0c:f6: bd:1d:fd:18:e3:72:c3:5b:60:d6:83:56:11:8b:1b: 2d:c8:52:06:f0:bb:9c:60:fa:21:f7:b5:a8:52:a9: 66:09:91:ab:b4:9e:99:7c:49:60:fd:d2:e7:8d:d5: a6:e7:01:d0:78:e5:94:a0:0c:1f:0d:a5:af:6e:c7: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:9F:BE:92:84:1A:BB:74:40:B3:7B:59:12:08:BE:9E:F4:A8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bef09311-66fd-391d-a4af-1196fc2f6e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8f:76:07:ab:80:f2:cd:6c:4c:c0:ba:3d:af:b2:32:5b:de: 41:bb:cd:e1:b8:8c:b2:6b:8f:b2:87:fd:44:10:10:88:2c:09: 8b:15:4b:c2:d0:9c:75:a9:42:2e:e3:2b:cb:91:ac:3a:2c:fc: d7:23:a6:8e:af:03:b6:17:da:46:7a:f5:40:9f:d6:9b:fe:04: a2:1a:01:39:98:84:87:20:ef:87:a6:32:63:78:6e:59:dd:9d: f6:4e:fe:63:c4:91:19:5d:fb:53:97:e9:0e:36:10:89:4a:ae: 53:3d:2f:ae:d7:c9:18:4e:47:37:6b:96:36:0b:a5:b1:6a:97: 7b:86:3d:ca:4c:e1:f6:c3:19:b4:77:5b:62:50:41:ed:3e:1f: 08:ba:f0:5f:7b:3f:e7:c3:b9:7f:6f:5a:9d:41:fe:bd:94:72: 73:22:59:29:b0:8f:82:6c:86:23:e3:37:c5:1c:e4:3f:6c:67: b1:dc:7b:bd:9d:73:c3:74:ee:b6:29:65:e9:51:f8:c0:1a:14: d7:f8:e6:a4:13:ef:05:ee:8c:4c:25:7b:49:c8:91:b7:4a:5c: d7:dd:cf:76:98:1b:12:cf:ad:87:c6:58:ee:65:a4:36:5b:4c: f6:a9:4b:a9:e8:8a:80:53:89:03:52:b2:b7:35:ab:eb:4b:84: 21:5d:4e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQRF2HH2U+ynfWfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjE4MTgyM1oXDTI1MTIwMTE5MTgyM1owLzEtMCsGA1UEAxMk YzNiZTQxMzUtM2ZlZS00NDVjLWIxYTMtY2ViMDM3ZjZlYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuyJNor4sSsXbx0d2uWulhNsTYqegjm+/tRJ 8tEynGty456NE8UUnz+9r67EoOVIzh84YtEyAcqfElYWcIWgEu3ZRCkXqyQcxwVd Ya9EHhBZfcCAcyzg1Qw0FmE84ZKLMgvl8Moh5q8N2SkrKhSn6p7r8m6u9FfMPC0a HvCDqsaqS6JFDgHdaBz9wnklKHLticdsR9MoITerVt5cpn78ktyhsPYCCqIyw3rk AdSz1qpqvIP4Kwiwdma+tLCRMcYeDPa9Hf0Y43LDW2DWg1YRixstyFIG8LucYPoh 97WoUqlmCZGrtJ6ZfElg/dLnjdWm5wHQeOWUoAwfDaWvbscu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnSn76ShBq7dECze1kSCL6e9KhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmVmMDkzMTEtNjZmZC0z OTFkLWE0YWYtMTE5NmZjMmY2ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuPdgergPLNbEzAuj2vsjJb3kG7zeG4jLJrj7KH/UQQEIgsCYsVS8LQ nHWpQi7jK8uRrDos/Ncjpo6vA7YX2kZ69UCf1pv+BKIaATmYhIcg74emMmN4blnd nfZO/mPEkRld+1OX6Q42EIlKrlM9L67XyRhORzdrljYLpbFql3uGPcpM4fbDGbR3 W2JQQe0+Hwi68F97P+fDuX9vWp1B/r2UcnMiWSmwj4JshiPjN8Uc5D9sZ7Hce72d c8N07rYpZelR+MAaFNf45qQT7wXujEwle0nIkbdKXNfdz3aYGxLPrYfGWO5lpDZb TPapS6noioBTiQNSsrc1q+tLhCFdTsc= -----END CERTIFICATE-----Generated at Fri Sep 19 10:37:07 2025 by rpki-client