$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa File: 4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa (raw, json) Hash identifier: gFuKcCnotl6PuAWs5DrBrhXDhA1lbMRddoSzu1eCmOU= Subject key identifier: DB:7B:1D:48:B6:F2:CB:99:37:F3:FB:7C:6E:30:95:C2:51:2E:EF:DC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FC218AE99A51846A6180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 142.111.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fc:21:8a:e9:9a:51:84:6a:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1242b884-c22d-4448-ba6a-8a5ae98f6a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7c:f9:27:2c:7e:a8:e1:d2:d3:6a:d8:4d:93: 77:c9:68:31:96:03:3a:eb:c7:88:31:39:b2:d7:e6: 4c:ee:63:81:28:8d:02:af:35:cd:6d:6c:d4:cc:21: be:2b:e4:a5:fb:87:78:07:3c:42:c0:71:1d:74:dc: 63:7f:69:6f:b7:3d:f6:31:e7:df:9a:a9:de:b3:6a: 13:45:03:a2:3f:da:ef:9d:57:90:e7:ba:2a:12:60: b0:b9:00:60:13:f7:a2:52:ef:84:3f:19:a4:59:ea: b9:f8:a2:0e:1a:c7:07:0e:5a:7b:af:41:12:d7:91: d9:57:57:9f:61:08:f3:62:49:75:a2:b1:77:e7:39: 69:19:99:bb:80:e4:97:64:ed:fb:94:ff:7c:e7:ab: 14:09:b7:26:2c:ad:90:57:f9:5c:3a:61:43:8a:3a: 51:22:7b:25:67:6d:ff:e1:b1:da:ad:4f:b2:39:fc: d3:22:a4:56:0c:6c:07:05:42:e4:5c:8a:aa:bd:11: 7c:ff:b5:7d:27:b0:be:52:77:60:25:f8:dd:9c:10: 46:eb:89:92:5c:bd:7f:0d:b1:8a:f7:48:5f:8e:6a: f1:67:ff:7f:cd:c5:90:ce:00:55:d6:40:15:aa:63: 69:61:7b:8a:f5:39:30:3f:fa:c0:92:dd:b7:38:86: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:1D:48:B6:F2:CB:99:37:F3:FB:7C:6E:30:95:C2:51:2E:EF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:88:78:61:7d:4c:8e:42:84:ee:fd:3b:5d:31:f7:7a:4e:fa: 46:03:ac:1e:ea:2d:93:83:c3:6c:46:33:c3:ca:57:14:e8:b7: 71:e7:eb:33:d0:b7:71:f2:97:0a:19:2a:f9:f3:ad:71:28:e4: 74:51:42:f9:9a:6b:31:10:4c:ca:af:e9:e4:58:56:d7:54:b7: 90:2d:1e:27:46:12:0b:48:80:42:a5:46:95:15:d6:20:a7:d0: b8:ea:96:96:7b:7d:da:45:c9:05:15:7b:f6:d6:d0:9e:d6:07: 47:7b:8b:03:ab:57:eb:8e:f3:60:97:96:69:cd:fc:15:fb:6d: df:1e:b3:d7:e6:d8:83:fa:a0:f3:c8:ec:97:30:01:e7:79:fa: 71:21:2e:0a:b6:54:a2:d2:03:60:08:9b:17:d6:ac:98:05:a8: a3:2f:bc:da:81:26:aa:55:40:08:83:90:c5:91:0d:cb:38:72: 69:3a:71:89:9e:ed:53:f4:09:46:90:11:d1:5d:30:01:6b:01: 6c:02:43:7d:fd:b4:df:68:0e:f3:2b:36:f4:42:8d:02:80:f8: 1d:ac:4d:67:36:46:02:6d:f1:14:5b:4b:ce:0c:84:80:cd:0e: a2:3f:4c:6f:21:ae:ec:df:ed:21:1a:49:c6:31:08:b3:1b:ed: ed:7b:e7:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/whiumaUYRqYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTI0MmI4ODQtYzIyZC00NDQ4LWJhNmEtOGE1YWU5OGY2YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXz5Jyx+qOHS02rYTZN3yWgxlgM668eIMTmy 1+ZM7mOBKI0CrzXNbWzUzCG+K+Sl+4d4BzxCwHEddNxjf2lvtz32Meffmqnes2oT RQOiP9rvnVeQ57oqEmCwuQBgE/eiUu+EPxmkWeq5+KIOGscHDlp7r0ES15HZV1ef YQjzYkl1orF35zlpGZm7gOSXZO37lP9856sUCbcmLK2QV/lcOmFDijpRInslZ23/ 4bHarU+yOfzTIqRWDGwHBULkXIqqvRF8/7V9J7C+UndgJfjdnBBG64mSXL1/DbGK 90hfjmrxZ/9/zcWQzgBV1kAVqmNpYXuK9TkwP/rAkt23OIYpgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt7HUi28suZN/P7fG4wlcJRLu/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGM1ZjZiYWMtNTQyNy0z MTZmLWFkMjEtODJiOTdjOWFkNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyIeGF9TI5ChO79O10x93pO+kYDrB7qLZODw2xGM8PKVxTot3Hn6zPQ t3HylwoZKvnzrXEo5HRRQvmaazEQTMqv6eRYVtdUt5AtHidGEgtIgEKlRpUV1iCn 0LjqlpZ7fdpFyQUVe/bW0J7WB0d7iwOrV+uO82CXlmnN/BX7bd8es9fm2IP6oPPI 7JcwAed5+nEhLgq2VKLSA2AImxfWrJgFqKMvvNqBJqpVQAiDkMWRDcs4cmk6cYme 7VP0CUaQEdFdMAFrAWwCQ339tN9oDvMrNvRCjQKA+B2sTWc2RgJt8RRbS84MhIDN DqI/TG8hruzf7SEaScYxCLMb7e175/E= -----END CERTIFICATE-----Generated at Tue Nov 4 20:47:31 2025 by rpki-client