$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83bbf2c5-86ad-3286-815b-b0a3645e1717.roa File: 83bbf2c5-86ad-3286-815b-b0a3645e1717.roa (raw, json) Hash identifier: 8LOyzCbxQLjnOoIj14Lj2wj96JqbTTjlNPpUAvdAfcA= Subject key identifier: 04:A4:14:5C:08:A1:FA:7E:91:78:8A:38:16:F2:13:DA:C1:6B:8F:B5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B96A6B016AB2642D9F40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83bbf2c5-86ad-3286-815b-b0a3645e1717.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 142.111.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b9:6a:6b:01:6a:b2:64:2d:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=b5e01800-541a-40cb-b786-8efe0f044d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:fe:c2:89:84:eb:28:9d:43:41:02:a3:80: 67:28:44:07:eb:94:84:c2:7c:55:27:08:33:a0:a9: 25:34:2d:8e:79:38:37:29:0c:de:b4:2a:f7:2e:7b: b2:94:6f:04:db:d5:05:76:ff:80:25:43:b1:8c:5d: ba:34:fe:66:f3:9d:60:66:4d:85:db:13:75:0a:69: f0:df:8a:84:f9:43:32:a0:8d:e1:3c:b7:fe:3e:9a: 2b:51:d0:a2:67:8f:b6:a1:1b:a1:f4:87:f1:01:3f: 18:90:ca:c0:fb:2b:31:b2:63:cb:44:16:82:c3:9f: 46:cc:2f:48:62:42:89:71:c4:ca:34:7c:7a:b0:9a: 02:c3:91:80:4f:07:2a:94:53:1b:40:89:1c:e9:8c: fe:d4:92:49:11:8a:ff:a3:53:73:14:27:b2:25:f4: e9:1e:04:e2:e6:6e:57:27:02:2f:08:9a:01:bd:01: 88:81:c4:d1:6e:52:d0:71:df:10:96:2a:42:d0:5f: 57:e5:5f:f0:ea:17:08:34:b9:b0:2a:07:6d:55:9a: 8e:b4:80:3e:74:27:97:e2:da:ca:f0:be:cd:96:69: 45:63:b8:a4:f6:c5:1f:80:9c:a9:53:94:00:6f:84: 52:73:a6:98:f4:2c:b6:ea:ec:93:ab:78:1f:cd:e4: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A4:14:5C:08:A1:FA:7E:91:78:8A:38:16:F2:13:DA:C1:6B:8F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83bbf2c5-86ad-3286-815b-b0a3645e1717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:27:b3:03:dd:13:82:e9:b4:f0:89:6f:bc:a8:35:86:d1:b5: 1d:6c:8a:9e:45:51:9d:36:5e:66:12:0f:57:7e:15:30:d0:ba: 40:a0:8d:eb:bf:21:30:74:36:30:b4:ff:e4:6b:a8:09:7d:a2: 32:b5:1e:b1:f8:4e:9b:f0:97:3c:e7:7f:a6:73:43:0f:12:b0: fe:66:7d:00:ca:2c:dc:2a:c7:b4:6b:9e:80:e8:b5:3c:87:dd: 44:96:5c:ce:c9:4a:cc:42:43:a5:75:4e:eb:2f:8e:4e:87:09: 85:f4:dc:37:ae:eb:4a:31:46:68:af:17:31:01:8a:25:c0:ea: 59:d5:ee:5e:aa:85:92:cd:1b:d4:38:88:18:a9:55:b0:5a:5f: 5d:36:13:bc:72:9d:65:6d:4d:6f:f8:15:5a:c7:d7:7d:d9:45: 15:71:96:56:fe:7f:dd:6c:8a:a5:62:c1:a1:b7:7b:9b:42:85: f9:70:42:74:05:7b:af:a8:2d:3d:85:07:c8:78:a4:13:76:dd: 27:83:f4:91:b9:bc:db:55:da:8b:fc:28:18:b8:82:36:0b:b3: 74:56:07:02:ef:d7:37:7f:a3:b2:b8:c5:14:2c:1c:58:d9:a2: fb:a6:fd:cc:a4:92:12:57:2a:5d:8a:a0:fd:8f:dc:46:d0:39: be:e8:ba:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7lqawFqsmQtn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YjVlMDE4MDAtNTQxYS00MGNiLWI3ODYtOGVmZTBmMDQ0ZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcX+womE6yidQ0ECo4BnKEQH65SEwnxVJwgz oKklNC2OeTg3KQzetCr3LnuylG8E29UFdv+AJUOxjF26NP5m851gZk2F2xN1Cmnw 34qE+UMyoI3hPLf+PporUdCiZ4+2oRuh9IfxAT8YkMrA+ysxsmPLRBaCw59GzC9I YkKJccTKNHx6sJoCw5GATwcqlFMbQIkc6Yz+1JJJEYr/o1NzFCeyJfTpHgTi5m5X JwIvCJoBvQGIgcTRblLQcd8QlipC0F9X5V/w6hcINLmwKgdtVZqOtIA+dCeX4trK 8L7NlmlFY7ik9sUfgJypU5QAb4RSc6aY9Cy26uyTq3gfzeTt1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASkFFwIofp+kXiKOBbyE9rBa4+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODNiYmYyYzUtODZhZC0z Mjg2LTgxNWItYjBhMzY0NWUxNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYnswPdE4LptPCJb7yoNYbRtR1sip5FUZ02XmYSD1d+FTDQukCgjeu/ ITB0NjC0/+RrqAl9ojK1HrH4Tpvwlzznf6ZzQw8SsP5mfQDKLNwqx7RrnoDotTyH 3USWXM7JSsxCQ6V1Tusvjk6HCYX03Deu60oxRmivFzEBiiXA6lnV7l6qhZLNG9Q4 iBipVbBaX102E7xynWVtTW/4FVrH133ZRRVxllb+f91siqViwaG3e5tChflwQnQF e6+oLT2FB8h4pBN23SeD9JG5vNtV2ov8KBi4gjYLs3RWBwLv1zd/o7K4xRQsHFjZ ovum/cykkhJXKl2KoP2P3EbQOb7oujM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:52 2025 by rpki-client