$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e762958-c9dd-3786-9a13-9fc4a934f07c.roa File: 5e762958-c9dd-3786-9a13-9fc4a934f07c.roa (raw, json) Hash identifier: X06LVU9v7CBmG/g6afX8rEB0BtwspFi4w4G4oU7t6E0= Subject key identifier: 71:04:37:34:5C:AF:7E:C9:C0:85:D1:40:1D:AD:44:69:45:25:1B:4C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB5C26E1F55FB1F5C32F9CA20 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e762958-c9dd-3786-9a13-9fc4a934f07c.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 401152 IP address blocks: 142.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6e:1f:55:fb:1f:5c:32:f9:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=57b13df5-482c-476d-bd5b-ca13186639eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:1d:d8:9f:8c:ef:50:97:7b:4e:de:64:d5: 74:03:3b:5b:38:07:24:91:7f:dc:e6:31:9a:92:14: d5:04:2d:ae:3a:05:0c:99:37:f3:9f:04:37:49:96: 6a:02:23:1b:44:50:c7:78:0f:ca:18:54:9a:c2:b7: 14:ad:ae:2b:57:f7:58:f3:72:93:62:48:b8:6d:cc: c9:af:16:82:f8:79:d4:23:49:b4:c6:d0:c2:09:d2: 71:50:9c:7c:74:20:3d:3a:e2:9e:1b:8e:db:34:cf: 5a:85:1a:13:a5:c3:43:9c:ce:d5:b8:0c:85:f0:05: eb:cf:a4:24:96:68:a7:8c:3c:07:43:42:ab:16:4a: fc:6e:29:e8:4a:4e:37:93:ff:f7:9b:31:e9:a6:82: b2:81:d3:43:cc:9c:3d:c5:8e:12:a8:0d:09:08:82: 24:51:fb:64:d0:58:8d:f9:9d:e4:64:6d:af:3b:1e: 15:bd:29:eb:50:cb:a8:33:92:b3:57:a8:a2:0c:ab: 85:90:cb:bd:4b:51:bb:5c:03:f7:17:81:47:89:34: 8f:b6:d8:69:0d:e3:40:92:da:92:17:22:6b:86:d3: f6:1c:d1:23:2c:fe:62:99:86:6b:6e:ab:2d:10:45: cb:40:07:c8:de:c2:ab:bd:6d:12:25:38:72:dd:b0: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:04:37:34:5C:AF:7E:C9:C0:85:D1:40:1D:AD:44:69:45:25:1B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e762958-c9dd-3786-9a13-9fc4a934f07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cd:66:19:ae:30:25:d7:9d:64:b3:da:c5:50:ac:65:2d:73: cc:4b:ee:46:43:65:ab:b3:52:34:49:8d:10:e6:91:aa:b6:15: 38:3f:67:ee:a8:8b:bb:4b:4d:c3:48:0b:7d:77:47:c5:06:10: 87:88:69:d3:54:f2:5a:80:f2:3f:c5:cd:89:66:b8:f1:a7:de: 9f:fa:10:c3:24:1e:af:46:4c:6e:98:d8:79:30:db:26:e5:3d: ad:bb:36:98:82:a4:51:ec:09:46:d7:59:7e:b9:8d:c8:43:0b: b5:5f:c0:b3:e5:7f:a9:a6:0f:51:2b:cd:f9:10:87:b4:32:32: fa:33:e7:d8:c3:b2:dd:55:c3:fc:54:78:06:59:01:a3:0b:b8: be:14:8d:f3:cc:ea:40:76:a5:65:a6:21:fc:f0:8f:82:e2:95: d8:90:6f:20:82:67:cd:ab:c4:42:76:b1:37:95:71:b7:2d:f8: e4:54:92:98:6a:41:80:08:c6:92:fe:4d:c4:fa:1b:55:91:3c: 0a:1b:25:89:bb:57:6d:56:7c:8e:ca:f5:96:04:b5:38:a6:d7: de:03:1f:4b:ec:c9:a5:ce:df:63:06:3c:a6:0d:27:3a:02:b6: 80:71:4f:7b:ca:5e:23:ae:70:85:d8:e1:b3:66:40:e7:8e:9e: de:ba:91:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wm4fVfsfXDL5yiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NTdiMTNkZjUtNDgyYy00NzZkLWJkNWItY2ExMzE4NjYzOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpId2J+M71CXe07eZNV0AztbOAckkX/c5jGa khTVBC2uOgUMmTfznwQ3SZZqAiMbRFDHeA/KGFSawrcUra4rV/dY83KTYki4bczJ rxaC+HnUI0m0xtDCCdJxUJx8dCA9OuKeG47bNM9ahRoTpcNDnM7VuAyF8AXrz6Qk lminjDwHQ0KrFkr8binoSk43k//3mzHppoKygdNDzJw9xY4SqA0JCIIkUftk0FiN +Z3kZG2vOx4VvSnrUMuoM5KzV6iiDKuFkMu9S1G7XAP3F4FHiTSPtthpDeNAktqS FyJrhtP2HNEjLP5imYZrbqstEEXLQAfI3sKrvW0SJThy3bDbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEENzRcr37JwIXRQB2tRGlFJRtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWU3NjI5NTgtYzlkZC0z Nzg2LTlhMTMtOWZjNGE5MzRmMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjNZhmuMCXXnWSz2sVQrGUtc8xL7kZDZauzUjRJjRDmkaq2FTg/Z+6o i7tLTcNIC313R8UGEIeIadNU8lqA8j/FzYlmuPGn3p/6EMMkHq9GTG6Y2Hkw2ybl Pa27NpiCpFHsCUbXWX65jchDC7VfwLPlf6mmD1ErzfkQh7QyMvoz59jDst1Vw/xU eAZZAaMLuL4UjfPM6kB2pWWmIfzwj4LildiQbyCCZ82rxEJ2sTeVcbct+ORUkphq QYAIxpL+TcT6G1WRPAobJYm7V21WfI7K9ZYEtTim194DH0vsyaXO32MGPKYNJzoC toBxT3vKXiOucIXY4bNmQOeOnt66kVo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:13 2025 by rpki-client