$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef17d8ab-6569-3e70-85bf-c24bf03520da.roa File: ef17d8ab-6569-3e70-85bf-c24bf03520da.roa (raw, json) Hash identifier: EZpOVeqZS8K/XBImwrKwjhJr8USz66z/h3vNY9EGIKk= Subject key identifier: 4A:2C:B9:8D:97:BE:03:CB:30:F4:6C:05:76:33:C5:2A:D6:3F:97:E6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B13D6D5070752B81B7F2A9A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef17d8ab-6569-3e70-85bf-c24bf03520da.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 142.111.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d5:07:07:52:b8:1b:7f:2a:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=2fa4eb05-1af5-4c0c-a564-8349c0d6cebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:39:9c:e9:9a:a2:07:da:eb:fb:b4:54:5f: bb:b1:75:08:41:11:12:ad:d0:5c:81:59:cc:73:01: 93:86:1a:12:22:3f:66:a3:ea:40:e3:b0:5a:f2:0b: 08:48:e4:78:4d:f0:d2:ce:22:2c:d2:4c:c1:06:83: a4:9f:05:01:96:1c:5a:2e:99:39:75:94:58:a7:c3: a3:e4:23:a1:52:48:b6:eb:c6:3c:4d:9f:88:2b:b3: 46:ac:1e:aa:bf:55:74:44:5f:83:7b:5f:3a:74:33: 5c:06:e4:dc:86:c1:1c:b5:fc:7c:18:6a:b6:47:9e: 97:36:a9:8a:7b:5c:12:18:3d:4b:7c:22:4b:b5:52: c9:2f:9f:07:51:f2:af:13:46:70:10:ed:1f:1f:2d: 95:6a:95:04:89:69:4f:62:e3:c2:09:50:84:31:97: c1:0f:13:b9:ad:0e:2d:47:80:d0:97:ca:aa:20:8e: 4a:e8:22:15:98:c9:f1:17:08:05:dc:bf:be:b0:b5: 4a:74:8d:22:27:fc:0d:cb:90:0c:02:01:5b:a7:71: 56:f8:32:9a:94:c2:17:46:0c:2f:22:98:39:9d:e6: e4:d1:75:04:cd:d1:e7:b5:d2:15:df:7b:72:f1:f7: 26:71:50:05:76:96:76:8a:4d:c8:3f:57:fb:34:0c: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2C:B9:8D:97:BE:03:CB:30:F4:6C:05:76:33:C5:2A:D6:3F:97:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef17d8ab-6569-3e70-85bf-c24bf03520da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:32:96:02:cc:2a:e6:8b:cb:7c:55:07:14:3e:71:3e:f8:43: 82:57:4e:54:f6:b5:80:b6:c6:ce:63:70:a3:03:f3:fd:1d:fa: 21:a5:d9:c6:a0:01:71:36:86:23:75:4b:2c:a4:8f:d9:aa:38: 68:4b:be:d1:e4:cb:db:07:20:d1:fe:bb:97:ce:83:82:0f:a4: c5:25:a0:59:e7:59:1a:36:fc:83:5c:2e:1d:52:dd:17:90:8c: f5:2a:fb:fc:96:ab:d1:2c:63:90:df:09:fa:35:66:96:11:6c: ac:ad:8a:4a:9e:79:29:45:db:a6:5b:90:80:fb:48:94:65:4d: 88:92:10:b1:99:63:37:53:9c:f6:93:29:41:c9:a9:8b:12:d7: 5c:e5:4c:73:b4:0f:5a:33:5b:5e:4f:94:39:a1:90:9d:97:04: 0e:69:ae:28:16:ea:a5:35:da:ba:ff:54:28:a2:da:3e:70:0f: 14:52:d8:53:df:97:1e:8a:3c:8a:d7:99:88:07:57:1c:21:0c: 10:8e:3a:57:fe:3c:28:87:f1:fd:34:7b:26:08:fc:62:17:28: bf:5d:8c:57:24:07:15:c2:cd:d7:cd:53:b5:1f:48:d2:de:93: 07:bf:6c:63:9b:c9:ff:1b:64:c9:8c:a7:7f:83:cb:4d:a9:7e: 52:21:94:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1tUHB1K4G38qmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MmZhNGViMDUtMWFmNS00YzBjLWE1NjQtODM0OWMwZDZjZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ic5nOmaogfa6/u0VF+7sXUIQRESrdBcgVnM cwGThhoSIj9mo+pA47Ba8gsISOR4TfDSziIs0kzBBoOknwUBlhxaLpk5dZRYp8Oj 5COhUki268Y8TZ+IK7NGrB6qv1V0RF+De186dDNcBuTchsEctfx8GGq2R56XNqmK e1wSGD1LfCJLtVLJL58HUfKvE0ZwEO0fHy2VapUEiWlPYuPCCVCEMZfBDxO5rQ4t R4DQl8qqII5K6CIVmMnxFwgF3L++sLVKdI0iJ/wNy5AMAgFbp3FW+DKalMIXRgwv Ipg5nebk0XUEzdHntdIV33ty8fcmcVAFdpZ2ik3IP1f7NAwg5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEosuY2XvgPLMPRsBXYzxSrWP5fmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWYxN2Q4YWItNjU2OS0z ZTcwLTg1YmYtYzI0YmYwMzUyMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwylgLMKuaLy3xVBxQ+cT74Q4JXTlT2tYC2xs5jcKMD8/0d+iGl2cag AXE2hiN1Syykj9mqOGhLvtHky9sHINH+u5fOg4IPpMUloFnnWRo2/INcLh1S3ReQ jPUq+/yWq9EsY5DfCfo1ZpYRbKytikqeeSlF26ZbkID7SJRlTYiSELGZYzdTnPaT KUHJqYsS11zlTHO0D1ozW15PlDmhkJ2XBA5prigW6qU12rr/VCii2j5wDxRS2FPf lx6KPIrXmYgHVxwhDBCOOlf+PCiH8f00eyYI/GIXKL9djFckBxXCzdfNU7UfSNLe kwe/bGObyf8bZMmMp3+Dy02pflIhlCQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:19 2025 by rpki-client