$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fc8896b-2112-35df-a426-06f5ba070117.roa File: 2fc8896b-2112-35df-a426-06f5ba070117.roa (raw, json) Hash identifier: RURq/cKg3suRY0pmqz1Kl9Q+SQ8Cb/t+dIaNqjfW0EY= Subject key identifier: 93:6D:E7:31:F0:1F:20:D3:CD:9C:19:B9:63:F7:CC:F7:BB:B7:29:AC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B98723A704A2252E64F41DA70 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fc8896b-2112-35df-a426-06f5ba070117.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7385 IP address blocks: 142.111.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3a:70:4a:22:52:e6:4f:41:da:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=58d39610-f4a5-4206-bfc3-d38d6b975831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:c1:c0:86:b9:ca:39:ca:09:d3:b3:f7:2e: 47:38:4b:7d:b8:0c:b8:8e:f7:12:42:5b:e9:a5:31: 7d:a3:52:5e:e4:4c:35:65:6e:1a:28:ef:79:f8:33: 38:33:8c:c4:09:9e:01:9b:57:47:96:be:39:3d:10: b5:1a:03:9a:fd:f4:32:4a:21:df:5f:bc:ea:09:01: 73:ee:d3:e5:8b:ab:d0:12:56:ba:27:c7:75:64:be: 7d:de:44:bb:db:99:d2:9d:f0:c9:79:41:b0:e2:bf: 53:51:97:32:ca:c1:cd:2f:ca:a9:39:01:4f:f9:eb: 35:7d:5e:b9:ea:78:80:c5:8a:af:d0:42:46:52:46: 79:b1:bb:34:6a:cd:82:12:44:db:4b:78:3f:1a:39: d0:68:37:9f:05:f5:1c:8f:75:c3:fe:ad:ae:83:e2: 82:a1:b6:e2:4d:0c:18:f9:7f:e9:b5:eb:a0:7d:af: fe:59:63:50:c8:63:86:bd:2a:54:c5:64:31:52:e2: 25:27:31:f3:73:fb:ed:6f:22:53:a8:31:d4:86:c8: b0:cf:f3:12:29:c3:e7:c5:04:15:cf:d5:49:3c:5a: 6d:0c:5a:97:af:1e:fd:70:a3:83:4a:b0:3d:27:6b: 7f:5a:ee:30:5d:bf:52:21:be:dd:65:c4:e1:37:5f: 7b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6D:E7:31:F0:1F:20:D3:CD:9C:19:B9:63:F7:CC:F7:BB:B7:29:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fc8896b-2112-35df-a426-06f5ba070117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ae:10:3c:5d:85:4c:da:00:8b:64:0b:33:9a:1e:5b:fd:19: 18:25:75:54:1a:7b:50:0f:f5:e2:51:2a:cd:e7:5e:c7:be:50: b7:28:50:07:05:10:9a:b3:72:22:62:fb:aa:56:b7:15:5f:76: 1c:98:fc:7a:1a:1d:a5:f8:a7:e1:b7:3c:5a:d4:3f:9b:b6:12: 81:da:30:de:0a:53:60:2c:7c:77:e6:18:b9:21:4c:3d:58:c0: 5a:af:dd:ff:ee:32:23:50:10:4b:4b:70:c2:d5:5b:3a:b3:81: 00:18:11:40:d4:be:35:b6:ca:a3:32:d5:86:31:61:c7:87:54: 14:9b:22:0a:f4:b7:5d:cb:37:08:02:94:95:4e:31:df:90:db: d9:cc:cc:a6:e3:2e:1c:04:95:1f:ef:59:a7:14:85:be:9f:1d: 32:14:48:f2:b5:c2:63:60:b5:e7:07:24:2c:62:2e:6a:20:e5: f4:71:f4:2f:59:cf:67:c8:3f:dc:af:3b:03:84:9b:ee:49:85: bc:58:f9:25:24:51:9e:91:36:81:13:68:c0:32:a3:54:d7:4c: c4:e1:33:c3:37:ab:34:7a:73:e9:bb:c6:1b:3e:f8:d3:71:e0: 5f:33:97:02:8f:e3:30:ec:db:a8:89:e6:10:30:b1:24:05:55: 32:c5:19:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcjpwSiJS5k9B2nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NThkMzk2MTAtZjRhNS00MjA2LWJmYzMtZDM4ZDZiOTc1ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggzBwIa5yjnKCdOz9y5HOEt9uAy4jvcSQlvp pTF9o1Je5Ew1ZW4aKO95+DM4M4zECZ4Bm1dHlr45PRC1GgOa/fQySiHfX7zqCQFz 7tPli6vQEla6J8d1ZL593kS725nSnfDJeUGw4r9TUZcyysHNL8qpOQFP+es1fV65 6niAxYqv0EJGUkZ5sbs0as2CEkTbS3g/GjnQaDefBfUcj3XD/q2ug+KCobbiTQwY +X/pteugfa/+WWNQyGOGvSpUxWQxUuIlJzHzc/vtbyJTqDHUhsiwz/MSKcPnxQQV z9VJPFptDFqXrx79cKODSrA9J2t/Wu4wXb9SIb7dZcThN197MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNt5zHwHyDTzZwZuWP3zPe7tymsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmZjODg5NmItMjExMi0z NWRmLWE0MjYtMDZmNWJhMDcwMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6uEDxdhUzaAItkCzOaHlv9GRgldVQae1AP9eJRKs3nXse+ULcoUAcF EJqzciJi+6pWtxVfdhyY/HoaHaX4p+G3PFrUP5u2EoHaMN4KU2AsfHfmGLkhTD1Y wFqv3f/uMiNQEEtLcMLVWzqzgQAYEUDUvjW2yqMy1YYxYceHVBSbIgr0t13LNwgC lJVOMd+Q29nMzKbjLhwElR/vWacUhb6fHTIUSPK1wmNgtecHJCxiLmog5fRx9C9Z z2fIP9yvOwOEm+5JhbxY+SUkUZ6RNoETaMAyo1TXTMThM8M3qzR6c+m7xhs++NNx 4F8zlwKP4zDs26iJ5hAwsSQFVTLFGVA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:40:29 2025 by rpki-client