$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa File: c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa (raw, json) Hash identifier: HwkW7FdgiJccYXIfUKWIMqaZcN9188EFZJR5SDkJT+w= Subject key identifier: 63:4A:D8:4E:66:C4:13:5C:A8:DA:E1:0C:E3:9C:0D:B3:BC:83:8B:62 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AA1617D36AAF9069D79983800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 6939 IP address blocks: 142.111.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7d:36:aa:f9:06:9d:79:98:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=420a1319-6448-4a16-bca5-57eaff8fe14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:7e:5c:c0:70:2d:18:cf:d8:53:53:dd:88: 22:a9:1d:7a:ab:5a:20:46:0f:c5:f7:7e:9a:d2:61: 3c:90:ec:e8:e0:61:47:c9:14:c7:25:82:3b:dd:98: 85:66:7c:42:4d:1f:61:77:59:4a:04:e4:fb:3b:c9: f8:bc:f1:ad:7e:2b:33:66:ff:40:52:50:74:b6:9b: cc:6f:fb:2e:57:2f:63:9e:01:15:26:d3:67:4c:43: 6d:ad:60:05:60:0a:9d:cb:98:5f:22:d1:e9:33:fd: 16:46:f6:3f:ac:7d:4a:31:d6:bf:2a:b3:a8:c0:03: 7f:45:39:bd:22:cf:bd:36:c7:04:e6:4e:5f:31:48: 2b:9f:a7:fa:e8:51:af:41:81:de:3a:6b:93:fc:61: 95:ae:53:30:08:41:cb:a9:1f:84:57:64:39:42:d7: 02:66:8e:87:37:55:19:d7:47:e6:33:7e:8b:6d:0f: 94:69:86:4f:27:92:ae:d8:60:91:63:de:1e:a3:6d: 91:cf:9a:81:d7:fa:65:31:66:e3:26:33:35:02:a7: cf:e7:ae:00:d8:12:ed:1e:46:29:c6:59:d0:7c:f1: 69:74:4a:d0:c6:0d:30:1c:76:8c:22:a6:87:81:c2: b2:77:d4:f8:df:ec:92:fc:1b:95:dc:36:ab:3b:a8: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4A:D8:4E:66:C4:13:5C:A8:DA:E1:0C:E3:9C:0D:B3:BC:83:8B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4c:e6:4b:7d:c3:da:94:49:5f:c0:5e:13:b1:94:ac:ca:6a: 18:8c:c0:f4:1c:48:76:2d:a5:e1:37:bb:74:79:05:09:7d:3a: 35:01:88:99:47:c0:bc:af:10:7f:86:b4:b7:35:8f:3a:e9:32: 6f:21:36:b2:12:f0:8a:20:50:68:69:5f:b2:ab:51:1b:41:34: 36:ab:e2:e2:43:eb:7b:7c:1a:35:12:23:6e:7a:85:5b:0e:8b: bf:fb:c4:7f:6a:6b:c9:02:9c:59:c2:02:cb:69:eb:0d:59:2f: 12:fd:81:32:47:3d:87:45:26:bb:4e:80:d4:18:53:ae:0c:ab: 5c:3e:13:80:9c:46:c2:d8:86:dc:03:b4:d1:2e:43:0f:75:4b: c2:cd:43:ef:9e:23:8c:8c:f2:ed:9d:2b:eb:1d:26:43:b7:b5: d6:2a:81:9e:67:f6:6a:ec:4e:12:34:69:a1:20:14:ec:e0:7a: b2:ea:41:1c:7b:0b:53:0f:b1:90:94:e6:df:13:e0:e5:df:de: d0:86:43:ce:87:c0:23:2a:cd:56:7c:81:91:cc:11:ad:13:7a: c2:9b:a4:fd:12:0d:f6:cf:ac:83:66:bc:d3:8e:73:4e:00:f1: a0:5c:ac:3a:c2:e0:df:19:f6:ea:de:56:8f:d4:36:50:df:6d: 1d:49:6a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYX02qvkGnXmYOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NDIwYTEzMTktNjQ0OC00YTE2LWJjYTUtNTdlYWZmOGZlMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEJ+XMBwLRjP2FNT3YgiqR16q1ogRg/F936a 0mE8kOzo4GFHyRTHJYI73ZiFZnxCTR9hd1lKBOT7O8n4vPGtfiszZv9AUlB0tpvM b/suVy9jngEVJtNnTENtrWAFYAqdy5hfItHpM/0WRvY/rH1KMda/KrOowAN/RTm9 Is+9NscE5k5fMUgrn6f66FGvQYHeOmuT/GGVrlMwCEHLqR+EV2Q5QtcCZo6HN1UZ 10fmM36LbQ+UaYZPJ5Ku2GCRY94eo22Rz5qB1/plMWbjJjM1AqfP564A2BLtHkYp xlnQfPFpdErQxg0wHHaMIqaHgcKyd9T43+yS/BuV3DarO6iAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNK2E5mxBNcqNrhDOOcDbO8g4tiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzUyZjExN2EtNDY5ZC0z ODNlLWIwODMtYzBiZmUwZmY3ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBM5kt9w9qUSV/AXhOxlKzKahiMwPQcSHYtpeE3u3R5BQl9OjUBiJlH wLyvEH+GtLc1jzrpMm8hNrIS8IogUGhpX7KrURtBNDar4uJD63t8GjUSI256hVsO i7/7xH9qa8kCnFnCAstp6w1ZLxL9gTJHPYdFJrtOgNQYU64Mq1w+E4CcRsLYhtwD tNEuQw91S8LNQ++eI4yM8u2dK+sdJkO3tdYqgZ5n9mrsThI0aaEgFOzgerLqQRx7 C1MPsZCU5t8T4OXf3tCGQ86HwCMqzVZ8gZHMEa0TesKbpP0SDfbPrINmvNOOc04A 8aBcrDrC4N8Z9ureVo/UNlDfbR1Jato= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:43 2025 by rpki-client