$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/124336fc-0772-31e4-ac6e-cbbb34928a7d.roa File: 124336fc-0772-31e4-ac6e-cbbb34928a7d.roa (raw, json) Hash identifier: 54CwKRQWO51Yy/026/F5LFQ35B0ySt7/VJ+hLJ7rBxk= Subject key identifier: A5:5D:69:F7:F6:6A:1F:05:90:3F:62:12:C3:BF:44:2B:54:6F:3C:A0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB4335702AE5CE18345409200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/124336fc-0772-31e4-ac6e-cbbb34928a7d.roa Signing time: Thu 31 Jul 2025 18:49:43 +0000 ROA not before: Thu 31 Jul 2025 18:49:43 +0000 ROA not after: Wed 29 Oct 2025 18:49:43 +0000 asID: 401152 IP address blocks: 142.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:33:57:02:ae:5c:e1:83:45:40:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 31 18:49:43 2025 GMT Not After : Oct 29 18:49:43 2025 GMT Subject: CN=5e5d4419-2809-43e5-b0eb-2a2edc53f11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:c5:7f:a4:c0:5a:43:2a:49:7f:4d:63:4b: 30:35:23:d1:5f:02:0f:49:89:d1:87:91:2b:8b:a5: f7:d7:dc:79:31:37:9d:e9:b5:61:60:17:36:90:b1: f8:0d:07:7c:42:e9:3b:6e:ae:3a:6a:86:86:ee:12: 07:c5:f4:75:4a:59:9d:cd:6d:b1:bb:a2:ba:25:4a: 4d:8d:6a:dc:5a:87:59:cb:7a:34:ac:93:c5:bf:ac: 22:3d:4f:06:a1:bf:d3:8d:e3:a0:0c:07:32:9a:30: 31:91:43:d4:51:86:73:54:43:99:9f:e9:05:f1:b6: c3:db:2d:4d:0d:5f:46:6d:15:bd:1e:cb:a0:7c:b2: 2b:b7:24:7e:b4:38:fd:6f:56:b1:44:6b:1d:3e:ea: 73:3f:c1:5b:34:f9:d9:67:6f:b4:b2:59:08:5a:e9: 20:6d:4a:f7:95:55:89:a4:de:33:fd:8e:65:d8:82: c7:56:82:29:f0:01:6d:3f:ee:64:94:6c:93:c0:07: 09:1c:5f:a1:92:e6:42:82:8f:bc:9c:36:a8:6d:9e: 9e:80:9f:2f:51:57:9f:29:4b:da:61:ee:b5:e6:d7: 56:9b:1d:d5:a0:e9:19:ef:69:ad:4e:c1:78:6a:cc: 38:36:ca:31:90:b4:e8:05:d1:b8:13:4e:4e:c6:0a: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5D:69:F7:F6:6A:1F:05:90:3F:62:12:C3:BF:44:2B:54:6F:3C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/124336fc-0772-31e4-ac6e-cbbb34928a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fe:44:89:28:86:b0:b3:8e:7b:59:a8:b1:b8:d9:81:50:cc: ae:fe:a8:dc:0e:68:08:92:bb:ac:08:c4:e5:4c:ba:73:7c:b4: 25:55:41:4d:73:19:b3:93:a0:d0:f8:dc:4a:53:32:38:d1:63: ec:75:07:10:7e:dd:55:22:0a:6b:37:2c:ab:85:99:b9:68:5d: e5:cd:21:68:c2:c1:77:41:5b:14:0a:b9:e4:d8:71:13:40:9e: 95:7f:17:c8:f5:15:c4:39:87:1a:ec:5e:12:70:b3:25:49:aa: 8a:9f:8d:72:2b:4c:f0:31:6b:78:77:1c:9c:dc:68:54:f2:1f: a7:7b:0d:61:f3:1e:b9:5b:8e:35:af:7f:fc:f9:da:0b:71:21: 7c:98:0d:fe:e4:f5:57:3b:15:75:ef:24:9b:76:21:c5:fe:47: df:91:cb:12:b1:5e:f6:a1:a4:a1:27:0d:35:c4:53:97:47:a9: 18:36:cf:fd:b1:80:d2:6f:b5:96:14:f1:46:73:e5:36:6f:ed: c0:f7:40:bc:96:f7:6f:58:80:82:f3:2e:40:f8:1c:41:1b:38: 74:27:5a:0a:ea:ce:93:3d:82:a2:0e:d5:fd:54:e4:1d:b1:5e: 5b:65:6b:86:90:74:6f:09:d6:2d:66:6c:f2:cc:24:5e:f6:dc: 56:ff:45:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0M1cCrlzhg0VAkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDczMTE4NDk0M1oXDTI1MTAyOTE4NDk0M1owLzEtMCsGA1UEAxMk NWU1ZDQ0MTktMjgwOS00M2U1LWIwZWItMmEyZWRjNTNmMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix7Ff6TAWkMqSX9NY0swNSPRXwIPSYnRh5Er i6X319x5MTed6bVhYBc2kLH4DQd8Quk7bq46aoaG7hIHxfR1SlmdzW2xu6K6JUpN jWrcWodZy3o0rJPFv6wiPU8Gob/TjeOgDAcymjAxkUPUUYZzVEOZn+kF8bbD2y1N DV9GbRW9HsugfLIrtyR+tDj9b1axRGsdPupzP8FbNPnZZ2+0slkIWukgbUr3lVWJ pN4z/Y5l2ILHVoIp8AFtP+5klGyTwAcJHF+hkuZCgo+8nDaobZ6egJ8vUVefKUva Ye615tdWmx3VoOkZ72mtTsF4asw4NsoxkLToBdG4E05OxgqNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVdaff2ah8FkD9iEsO/RCtUbzygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTI0MzM2ZmMtMDc3Mi0z MWU0LWFjNmUtY2JiYjM0OTI4YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj+RIkohrCzjntZqLG42YFQzK7+qNwOaAiSu6wIxOVMunN8tCVVQU1z GbOToND43EpTMjjRY+x1BxB+3VUiCms3LKuFmbloXeXNIWjCwXdBWxQKueTYcRNA npV/F8j1FcQ5hxrsXhJwsyVJqoqfjXIrTPAxa3h3HJzcaFTyH6d7DWHzHrlbjjWv f/z52gtxIXyYDf7k9Vc7FXXvJJt2IcX+R9+RyxKxXvahpKEnDTXEU5dHqRg2z/2x gNJvtZYU8UZz5TZv7cD3QLyW929YgILzLkD4HEEbOHQnWgrqzpM9gqIO1f1U5B2x Xltla4aQdG8J1i1mbPLMJF723Fb/Reo= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:42 2025 by rpki-client