$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa File: 3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa (raw, json) Hash identifier: 1ba/+O4rCkVUoMhzNN+z4QvygKBE+fu9D2cDUrTnPIc= Subject key identifier: 09:4E:85:2B:66:1F:CA:DC:9D:26:EA:4E:DC:E7:45:9A:09:8D:DC:9E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CACFA268FDA8F1E1D7CC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 142.111.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:ac:fa:26:8f:da:8f:1e:1d:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=8e697503-9e91-4e54-a3c3-5dbde100265c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:c8:67:5f:2d:70:a6:75:62:5b:d5:53:f7: 10:f4:a4:aa:8e:a7:5d:b4:74:7f:c4:89:c0:b6:8b: 3e:a6:d1:0c:91:5c:4f:57:d5:91:da:ae:94:7a:c4: 2a:c2:a0:26:87:b1:eb:17:ec:79:83:ac:f4:09:a8: 10:c7:1f:86:e8:ed:6f:cc:1f:04:1a:e3:cc:8f:81: a9:99:aa:80:9e:5c:f1:35:ee:39:7b:36:25:54:78: c9:1c:bf:58:7e:fc:2b:2d:8a:fd:74:88:3a:cc:b0: f2:79:a0:19:7f:45:00:31:4d:49:44:1b:9e:b5:5f: 07:22:d8:d8:6e:c0:fe:a5:1f:48:52:fc:48:48:ab: 56:61:e5:64:ad:f0:be:83:d5:be:12:7d:af:82:04: be:70:92:81:d0:b3:c2:e1:48:34:bc:51:5a:3f:74: b6:64:7d:b8:3f:e7:05:ec:0e:59:98:b7:1e:ae:0a: 3b:44:96:0c:ee:17:6e:25:16:3d:8c:9c:1c:e5:11: 3a:ad:ed:d3:2f:20:3f:5d:86:bc:4b:e7:c4:c9:52: 53:82:c9:c4:c0:52:96:13:ac:a6:76:92:70:87:c6: ce:76:75:00:69:13:86:f0:a8:0a:4c:bc:f6:b4:24: 23:6d:78:40:f3:a4:51:49:02:be:34:72:c4:1e:78: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4E:85:2B:66:1F:CA:DC:9D:26:EA:4E:DC:E7:45:9A:09:8D:DC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1c:6b:35:53:b7:c8:b0:9f:9b:a7:12:f4:2b:61:6c:c4:28: 52:82:a2:37:c6:7d:e6:c4:c5:75:ac:1f:f5:ee:f9:59:4f:35: 02:40:9c:8a:a1:51:4d:99:91:fc:bd:07:86:9c:06:09:39:62: 6a:80:98:83:98:c0:28:e0:7c:09:1b:f0:1c:a6:2c:54:4f:87: 1d:4b:ea:b8:db:f1:a1:a6:46:cb:f7:7b:c8:bf:89:8e:a8:10: e5:2a:c7:e1:09:65:5d:c6:cf:e1:ea:76:e1:61:7d:bb:7f:6d: 0a:a2:3a:46:7b:1f:05:1c:df:05:d5:6a:9e:51:ab:5b:26:1a: 02:1c:42:d7:b3:16:29:71:94:11:17:f0:7c:1a:0b:32:5c:ba: 4d:94:e6:e9:b6:4b:6d:78:42:ff:fb:da:09:36:27:16:93:21: 7f:fd:64:99:b5:5a:db:c8:42:ae:0a:12:5f:f7:86:11:ab:08: 4b:55:8f:24:9e:c4:59:4f:72:8d:54:87:28:84:25:b8:8c:55: 11:07:6a:78:c5:99:28:f1:fd:4e:22:e0:1b:da:b2:a4:54:57: 16:1b:e4:53:36:3b:33:ca:5a:40:90:a4:e1:cc:73:d1:5d:15: 20:64:90:4b:46:85:b6:c3:48:27:b9:78:91:2b:47:b8:73:e6: dc:d3:ed:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKz6Jo/ajx4dfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk OGU2OTc1MDMtOWU5MS00ZTU0LWEzYzMtNWRiZGUxMDAyNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTPIZ18tcKZ1YlvVU/cQ9KSqjqddtHR/xInA tos+ptEMkVxPV9WR2q6UesQqwqAmh7HrF+x5g6z0CagQxx+G6O1vzB8EGuPMj4Gp maqAnlzxNe45ezYlVHjJHL9YfvwrLYr9dIg6zLDyeaAZf0UAMU1JRBuetV8HItjY bsD+pR9IUvxISKtWYeVkrfC+g9W+En2vggS+cJKB0LPC4Ug0vFFaP3S2ZH24P+cF 7A5ZmLcergo7RJYM7hduJRY9jJwc5RE6re3TLyA/XYa8S+fEyVJTgsnEwFKWE6ym dpJwh8bOdnUAaROG8KgKTLz2tCQjbXhA86RRSQK+NHLEHnhqawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlOhStmH8rcnSbqTtznRZoJjdyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzIyMDcwMGQtMGM5NS0z YTY4LThkNTgtYWZhMmNkNWNkM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEcazVTt8iwn5unEvQrYWzEKFKCojfGfebExXWsH/Xu+VlPNQJAnIqh UU2Zkfy9B4acBgk5YmqAmIOYwCjgfAkb8BymLFRPhx1L6rjb8aGmRsv3e8i/iY6o EOUqx+EJZV3Gz+HqduFhfbt/bQqiOkZ7HwUc3wXVap5Rq1smGgIcQtezFilxlBEX 8HwaCzJcuk2U5um2S214Qv/72gk2JxaTIX/9ZJm1WtvIQq4KEl/3hhGrCEtVjySe xFlPco1UhyiEJbiMVREHanjFmSjx/U4i4BvasqRUVxYb5FM2OzPKWkCQpOHMc9Fd FSBkkEtGhbbDSCe5eJErR7hz5tzT7XE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:17 2025 by rpki-client