$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa File: baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa (raw, json) Hash identifier: WVG5osQJKqaU3ssm2ZmxOs/RcfwX73diGDpcBVi0Sgc= Subject key identifier: 21:4E:22:E9:91:ED:58:F5:37:EF:F4:1D:F9:8B:1F:51:96:49:CD:F4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B9425116502C890E5600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 142.111.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b9:42:51:16:50:2c:89:0e:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=0cbd910a-66f8-4492-8e97-1ae3c89751c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:0b:ee:ab:1b:6c:ff:95:58:ab:b1:59:de: 41:4b:a8:71:cb:f7:6d:e4:b6:ee:de:a2:0b:17:97: c4:a1:b0:bf:f3:9a:7e:0c:81:db:eb:00:cd:6f:c5: 1a:88:2c:77:b4:7a:09:42:2a:b6:3e:e8:c7:aa:24: 76:58:2d:2b:04:bb:40:a6:45:87:b5:ef:17:b5:5f: 64:c3:7b:45:7e:4b:1a:f3:93:bc:2e:72:bb:80:85: 00:d1:8f:43:d9:b0:b7:56:21:fd:32:32:59:e3:15: 38:64:5e:e5:1f:b6:c6:cc:23:c3:01:5e:ca:65:92: b9:4c:b4:2b:a3:26:92:aa:3e:d9:a4:0e:eb:33:fb: e2:dd:5c:d0:0b:9f:d3:2e:fa:ed:8d:42:8c:98:22: 5e:0a:88:7f:2a:aa:84:8a:7a:2d:ba:20:42:ad:c3: 23:04:1a:03:ae:bb:60:1e:9c:f3:f1:80:01:f4:6e: ba:a2:65:d1:a9:a3:2f:b5:68:c2:50:83:87:80:78: 95:77:70:25:00:e5:21:67:42:05:ef:b4:ba:51:54: f8:5b:ab:12:76:c7:71:a8:5d:dc:3a:99:40:0f:19: 64:01:a7:27:30:b2:e6:a7:9d:f7:c3:ca:8c:9e:09: 4a:fc:39:83:35:00:06:dd:6f:96:36:ad:58:b2:3d: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:22:E9:91:ED:58:F5:37:EF:F4:1D:F9:8B:1F:51:96:49:CD:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baa851f9-27e1-32a2-8006-3f3e5bb093bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fc:d4:55:7d:57:ad:d2:72:57:e5:dd:35:50:4e:cc:93:6a: 72:29:c0:0f:00:b7:df:d6:21:9c:a6:f4:11:9c:c3:dd:f2:15: d4:8d:d9:2b:db:72:00:6e:41:1c:72:6b:e6:60:38:54:28:c8: 05:86:79:e3:af:29:1b:91:48:22:de:e1:68:65:39:18:0c:d4: 87:ab:30:72:66:c4:0f:ff:d4:c0:05:47:3c:f8:81:7b:ce:0e: 00:8d:99:46:82:a4:eb:1f:3a:30:0e:fd:19:0e:54:01:b6:eb: 73:37:71:20:63:0e:cb:16:7a:b5:69:d4:7c:81:ab:cb:09:11: dc:14:7e:51:b8:91:fa:13:bb:3a:8e:bd:a3:c0:24:d4:9f:2b: 54:4b:42:4b:0e:eb:61:f8:9a:77:7d:13:ad:dc:bf:2f:f7:f2: e5:b3:0c:30:8d:eb:e0:43:08:9e:d0:5c:20:55:7a:63:3b:6f: 13:49:7e:82:6d:6e:4e:66:d8:e4:fa:43:17:f7:69:4e:87:ae: d4:e4:87:e0:76:9e:48:b1:01:29:65:4f:a0:cc:e7:38:b8:74: a5:d7:58:d0:6e:09:9d:d1:ad:a8:9c:6b:2b:f6:71:7b:90:b6: 23:a3:8e:7c:54:ad:48:5c:fb:03:a8:36:2e:4c:31:13:32:16: 7e:53:98:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7lCURZQLIkOVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk MGNiZDkxMGEtNjZmOC00NDkyLThlOTctMWFlM2M4OTc1MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyEL7qsbbP+VWKuxWd5BS6hxy/dt5Lbu3qIL F5fEobC/85p+DIHb6wDNb8UaiCx3tHoJQiq2PujHqiR2WC0rBLtApkWHte8XtV9k w3tFfksa85O8LnK7gIUA0Y9D2bC3ViH9MjJZ4xU4ZF7lH7bGzCPDAV7KZZK5TLQr oyaSqj7ZpA7rM/vi3VzQC5/TLvrtjUKMmCJeCoh/KqqEinotuiBCrcMjBBoDrrtg Hpzz8YAB9G66omXRqaMvtWjCUIOHgHiVd3AlAOUhZ0IF77S6UVT4W6sSdsdxqF3c OplADxlkAacnMLLmp533w8qMnglK/DmDNQAG3W+WNq1Ysj1q/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFOIumR7Vj1N+/0HfmLH1GWSc30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmFhODUxZjktMjdlMS0z MmEyLTgwMDYtM2YzZTViYjA5M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP81FV9V63Sclfl3TVQTsyTanIpwA8At9/WIZym9BGcw93yFdSN2Svb cgBuQRxya+ZgOFQoyAWGeeOvKRuRSCLe4WhlORgM1IerMHJmxA//1MAFRzz4gXvO DgCNmUaCpOsfOjAO/RkOVAG263M3cSBjDssWerVp1HyBq8sJEdwUflG4kfoTuzqO vaPAJNSfK1RLQksO62H4mnd9E63cvy/38uWzDDCN6+BDCJ7QXCBVemM7bxNJfoJt bk5m2OT6Qxf3aU6HrtTkh+B2nkixASllT6DM5zi4dKXXWNBuCZ3Rraicayv2cXuQ tiOjjnxUrUhc+wOoNi5MMRMyFn5TmCM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:04:47 2025 by rpki-client