$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa File: ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa (raw, json) Hash identifier: j4eu+XxrKln2Gx7oQq9mMdJTj1GcAXYF4lEP/THop1Y= Subject key identifier: 82:F9:40:20:98:BE:21:B8:12:37:4D:F5:56:BA:4C:2E:20:E3:FC:B6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B5A4670DB2B29FEEEC40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 142.111.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b5:a4:67:0d:b2:b2:9f:ee:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=99074bc4-dfeb-4e5a-a1fc-40b3a7b9c9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:57:34:73:16:b8:5b:b8:f8:1d:d9:bf:11: 4a:05:77:a1:6b:35:9e:7b:08:49:12:c6:64:ea:de: e7:27:b9:62:ec:0c:e4:74:58:94:a9:8f:21:01:0a: 82:67:af:87:00:63:72:57:54:91:47:2b:a9:39:69: 41:40:16:9d:33:24:63:57:56:ab:58:07:cd:24:24: 2f:a9:ca:c6:d6:a9:76:a6:8d:3b:b1:a5:a5:21:b4: 8e:b0:67:64:53:29:04:a7:14:38:51:15:b8:f2:fc: 73:0a:3d:ee:6e:49:6f:44:4d:63:71:10:94:be:dd: 81:10:c5:09:40:b8:3c:23:b8:59:d8:80:64:46:49: 21:c8:f9:a8:de:4d:2a:ae:e9:84:89:31:9b:e3:6f: 42:c6:52:ba:8e:b9:f0:52:d5:2c:f4:2b:da:5f:58: 58:2c:18:3a:a8:08:d1:d1:b4:a7:42:81:a9:c3:d2: af:84:b9:e2:6e:93:c4:7a:5c:ca:00:14:16:36:00: 40:7a:ff:79:1b:68:f4:92:a0:18:48:5c:53:40:a6: 71:49:77:18:0d:e7:15:8f:34:63:e7:87:00:9d:82: da:5e:d2:17:49:ef:62:9c:6e:5a:4d:f1:f2:56:c5: fa:e6:94:4f:3b:ce:0c:83:76:d7:c1:ab:aa:db:df: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F9:40:20:98:BE:21:B8:12:37:4D:F5:56:BA:4C:2E:20:E3:FC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2a:92:99:c1:dc:6f:21:a4:e1:b2:ea:e0:f2:f0:64:b5:fd: 56:26:d6:c5:9d:96:df:7b:4a:cc:46:c8:0a:2d:52:85:b9:45: ad:e2:83:c1:3a:1d:74:8b:7f:c2:1f:d8:7d:b5:34:c7:3c:5a: 69:24:21:cf:bd:ee:5d:7a:ba:e1:dd:6c:94:cc:4d:6e:19:07: d0:38:5f:f5:e6:1a:d6:01:09:0a:c2:50:fc:78:04:f1:29:3a: 50:d4:14:b9:9b:2b:91:f9:ca:8b:9f:16:13:8b:42:32:aa:ac: 39:e7:9c:85:85:67:0f:e0:6a:73:71:71:92:be:84:d5:10:24: f0:0c:76:00:41:3a:71:44:b9:6e:47:c3:bd:ea:43:fe:63:56: 52:46:86:32:08:b6:64:c9:96:a7:f3:e7:da:f1:68:c4:16:a4: de:6a:b5:19:c2:ea:8c:ff:9c:c5:85:34:28:f3:56:41:8a:2e: cc:3d:67:39:bb:11:67:93:1e:f3:da:69:ff:74:1f:86:fd:86: ed:43:14:31:1c:c4:8a:d7:1b:f0:2e:5d:6e:23:b1:75:4c:8f: b3:f8:62:66:be:6d:37:6e:22:18:3b:4d:21:67:0f:ce:2b:98: e6:a4:97:4e:e1:1d:d7:00:f8:4d:e1:22:ce:d0:b9:fe:16:93: 78:4f:aa:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7WkZw2ysp/u7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk OTkwNzRiYzQtZGZlYi00ZTVhLWExZmMtNDBiM2E3YjljOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnxXNHMWuFu4+B3ZvxFKBXehazWeewhJEsZk 6t7nJ7li7AzkdFiUqY8hAQqCZ6+HAGNyV1SRRyupOWlBQBadMyRjV1arWAfNJCQv qcrG1ql2po07saWlIbSOsGdkUykEpxQ4URW48vxzCj3ubklvRE1jcRCUvt2BEMUJ QLg8I7hZ2IBkRkkhyPmo3k0qrumEiTGb429CxlK6jrnwUtUs9CvaX1hYLBg6qAjR 0bSnQoGpw9KvhLnibpPEelzKABQWNgBAev95G2j0kqAYSFxTQKZxSXcYDecVjzRj 54cAnYLaXtIXSe9inG5aTfHyVsX65pRPO84Mg3bXwauq29/I4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL5QCCYviG4EjdN9Va6TC4g4/y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmEwNGFiZTctYmNlMS0z YTI2LTkzNDUtMWViOGI0ZjE2ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUqkpnB3G8hpOGy6uDy8GS1/VYm1sWdlt97SsxGyAotUoW5Ra3ig8E6 HXSLf8If2H21NMc8WmkkIc+97l16uuHdbJTMTW4ZB9A4X/XmGtYBCQrCUPx4BPEp OlDUFLmbK5H5youfFhOLQjKqrDnnnIWFZw/ganNxcZK+hNUQJPAMdgBBOnFEuW5H w73qQ/5jVlJGhjIItmTJlqfz59rxaMQWpN5qtRnC6oz/nMWFNCjzVkGKLsw9Zzm7 EWeTHvPaaf90H4b9hu1DFDEcxIrXG/AuXW4jsXVMj7P4Yma+bTduIhg7TSFnD84r mOakl07hHdcA+E3hIs7Quf4Wk3hPqvc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:37 2025 by rpki-client