$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a04705a8-2d7a-3108-94a9-f0dded5e9de3.roa File: a04705a8-2d7a-3108-94a9-f0dded5e9de3.roa (raw, json) Hash identifier: WLAWu5Eut9mbG4PHeZXnaq8u1VGIfMkZYzPkXzLzHuI= Subject key identifier: 7D:A9:ED:D0:DD:5A:DA:32:17:C8:0C:68:F0:AE:55:45:71:E5:4D:57 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A94D0E874E776E341515DDE00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a04705a8-2d7a-3108-94a9-f0dded5e9de3.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 7018 IP address blocks: 142.111.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:e8:74:e7:76:e3:41:51:5d:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=b500b086-6db4-403c-8df4-d549ad122646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:84:94:73:1f:f5:91:6f:9a:c1:7d:ed:0c: 71:8e:16:e3:ed:00:d2:b0:59:03:6c:4a:c8:49:b4: 77:35:e8:58:6d:c7:32:78:42:0e:50:e8:f1:ed:e6: 5a:aa:6f:76:62:88:d5:58:80:df:77:5b:a1:b7:9b: 8c:d8:fc:d8:c6:a1:e9:e6:df:19:55:ea:a3:b5:81: ea:7e:d7:9c:c7:79:2f:f9:08:e9:b9:cc:84:f8:73: 30:02:51:22:90:5a:d2:07:2b:04:84:55:cb:5b:3c: 73:73:45:9e:65:8f:64:4d:86:64:89:cd:20:05:43: 58:f0:3f:69:83:30:38:fe:bf:25:8b:32:57:7e:2c: 3d:37:2c:3d:75:e0:27:fc:7c:a6:24:5b:87:55:3d: 93:2a:76:27:50:52:86:19:f5:08:29:3a:5d:d0:e1: 45:d9:81:01:dd:9a:99:8f:08:3f:ed:e8:2e:d9:ce: d3:77:68:a1:46:28:85:51:35:b7:d7:5d:b8:48:97: 6f:7c:bf:92:f4:43:9d:86:a9:dc:5f:22:a3:76:db: 08:74:7b:79:c6:1e:97:b1:e6:1c:5a:60:99:3f:fe: 99:9f:67:b3:8e:fa:4b:c2:fb:43:8a:2f:05:48:fa: 60:aa:4f:4f:b1:b7:14:dc:aa:4b:4a:c7:b5:32:b9: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:ED:D0:DD:5A:DA:32:17:C8:0C:68:F0:AE:55:45:71:E5:4D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a04705a8-2d7a-3108-94a9-f0dded5e9de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:84:c8:a1:9f:f9:2c:46:09:55:eb:0f:9a:69:46:1f:9b:72: d3:5e:64:bf:43:34:b4:f0:56:be:3e:27:1f:42:7f:32:b7:46: 49:40:ae:b5:65:f4:cc:38:49:59:73:32:7f:d5:f8:7c:5a:f7: 3e:4b:8c:47:b9:e2:79:4a:a3:83:7d:2b:8f:76:88:ea:57:0c: f2:7c:d2:52:1d:17:fb:7c:ac:54:53:fa:9e:30:f2:26:84:3d: 35:78:7c:15:86:ed:33:96:ba:bd:5b:3d:a5:31:e0:e7:d9:d7: eb:e0:8c:bc:d5:18:46:26:3a:87:be:74:29:bf:3a:5c:47:a8: cf:0b:99:03:1d:57:78:14:10:90:11:48:b1:00:b0:6f:3c:a0: 78:0a:63:d2:6e:24:87:5c:b8:e7:ee:7e:4a:34:03:09:62:d2: 01:7b:41:cb:d7:15:5b:db:52:29:b6:dd:7f:18:59:98:7f:cf: 2f:b9:e9:31:8c:9c:5d:a5:65:c3:42:48:f6:45:26:89:3a:00: 78:28:c3:1b:3b:fb:00:97:d3:95:d0:ea:49:41:40:91:a1:62: d7:ce:87:b0:30:a3:30:02:eb:a3:ae:b5:6b:b0:62:9a:2f:ab: 76:6a:b3:b6:cc:1c:87:be:84:dc:62:0e:d6:8f:44:93:2c:ad: cd:47:dd:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0Oh053bjQVFd3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk YjUwMGIwODYtNmRiNC00MDNjLThkZjQtZDU0OWFkMTIyNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXqElHMf9ZFvmsF97Qxxjhbj7QDSsFkDbErI SbR3NehYbccyeEIOUOjx7eZaqm92YojVWIDfd1uht5uM2PzYxqHp5t8ZVeqjtYHq ftecx3kv+QjpucyE+HMwAlEikFrSBysEhFXLWzxzc0WeZY9kTYZkic0gBUNY8D9p gzA4/r8lizJXfiw9Nyw9deAn/HymJFuHVT2TKnYnUFKGGfUIKTpd0OFF2YEB3ZqZ jwg/7egu2c7Td2ihRiiFUTW31124SJdvfL+S9EOdhqncXyKjdtsIdHt5xh6XseYc WmCZP/6Zn2ezjvpLwvtDii8FSPpgqk9PsbcU3KpLSse1MrkH8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2p7dDdWtoyF8gMaPCuVUVx5U1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTA0NzA1YTgtMmQ3YS0z MTA4LTk0YTktZjBkZGVkNWU5ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqEyKGf+SxGCVXrD5ppRh+bctNeZL9DNLTwVr4+Jx9CfzK3RklArrVl 9Mw4SVlzMn/V+Hxa9z5LjEe54nlKo4N9K492iOpXDPJ80lIdF/t8rFRT+p4w8iaE PTV4fBWG7TOWur1bPaUx4OfZ1+vgjLzVGEYmOoe+dCm/OlxHqM8LmQMdV3gUEJAR SLEAsG88oHgKY9JuJIdcuOfufko0Awli0gF7QcvXFVvbUim23X8YWZh/zy+56TGM nF2lZcNCSPZFJok6AHgowxs7+wCX05XQ6klBQJGhYtfOh7AwozAC66OutWuwYpov q3Zqs7bMHIe+hNxiDtaPRJMsrc1H3ac= -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:57 2025 by rpki-client