$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/636ac5b5-9664-3052-90a2-53e50be4c812.roa File: 636ac5b5-9664-3052-90a2-53e50be4c812.roa (raw, json) Hash identifier: tZI2X2Vyp/ElNPi77aG2qEotkJMhC2RlDCud1nIsPvY= Subject key identifier: 92:71:94:41:68:9D:A0:6F:BD:2D:F2:01:76:F0:74:73:B9:0A:C0:82 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AC8765DCB305ABA77BB40DE00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/636ac5b5-9664-3052-90a2-53e50be4c812.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 393886 IP address blocks: 142.111.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5d:cb:30:5a:ba:77:bb:40:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=322faab3-67bf-4f3a-904d-379150ea4f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:84:1e:cf:56:d7:b6:ac:82:39:15:55:15: 35:71:0f:33:78:af:c3:09:e8:37:0f:a0:73:de:10: af:7a:65:df:a4:f6:8c:1e:8d:6b:5a:c0:77:0b:78: a6:c8:70:5c:fa:65:5b:b8:01:ae:23:13:1a:1a:4d: a2:f3:d2:49:7f:98:4a:af:6b:bf:1a:b2:f8:22:42: e1:ab:01:09:96:96:d4:01:21:13:65:18:07:6d:6e: 5e:d3:74:e5:a0:26:1e:dd:18:2e:14:68:38:6a:59: 2f:cf:b9:b0:60:8a:78:cc:f1:75:dc:4a:c3:13:e3: e2:f3:9c:d1:6e:7f:56:ee:41:ab:7e:f4:18:c6:6c: 0b:10:e9:6a:50:f7:74:4d:0c:19:87:fb:0d:33:24: fb:4f:d1:71:bc:7d:d7:19:06:8b:20:73:82:48:40: e8:00:82:b5:2b:8c:8b:83:74:5e:0e:c1:ff:08:7a: 2c:cd:70:18:89:8d:9a:1e:0e:6e:d2:d2:07:ae:7d: db:16:8a:b0:d1:5f:73:ae:47:f0:86:c2:11:d4:61: c5:95:8a:c6:df:3b:49:0e:79:23:1d:fd:3e:05:ef: 25:9b:be:77:4d:05:bd:a3:47:58:ff:33:a8:cf:fa: 6b:2a:c8:e4:e6:1f:c0:0f:48:98:84:3e:fb:f0:7d: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:71:94:41:68:9D:A0:6F:BD:2D:F2:01:76:F0:74:73:B9:0A:C0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/636ac5b5-9664-3052-90a2-53e50be4c812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b1:c1:e6:ed:d7:71:e8:46:f1:ba:07:3d:3e:6b:9c:a3:8b: 3a:06:68:c7:3f:72:ea:bd:a4:2f:fd:cf:6f:03:79:2b:3e:83: 48:a1:5a:60:c5:92:e2:62:a4:a9:5c:c1:02:7a:a9:cb:31:ba: 5f:ac:3c:85:f1:2e:13:29:d6:e1:2d:c5:83:2e:89:65:81:00: a9:40:51:ee:95:38:95:e1:58:69:90:8a:20:a1:1a:33:cf:c5: b6:fe:18:60:d0:ef:3a:04:36:a3:42:ac:d7:ac:6d:7f:b2:31: 4b:94:a6:d2:36:67:04:67:7b:7b:a5:b3:a3:d6:ca:36:d1:7f: 6e:17:b3:ba:59:ce:5f:22:8e:a3:9f:75:13:78:9f:cd:7d:61: 61:2a:c4:33:79:87:c8:f3:f3:12:51:cb:73:5b:86:54:01:e2: 99:0b:1c:9f:b2:12:c9:9c:c3:b0:8f:71:b2:ee:e9:63:27:c3: eb:7c:5b:69:dd:5a:ad:66:22:c6:b9:22:1f:ac:28:2f:3b:89: c5:70:8b:c6:39:18:68:72:e2:9b:02:10:ae:da:bb:30:7a:44: 87:f9:a3:0f:d6:83:c7:ec:e5:b9:c0:97:3c:8b:bf:85:04:b5: f3:de:27:a8:8d:8e:e8:a3:65:78:f6:d9:50:97:0b:99:ad:e2: 3e:12:1e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdl3LMFq6d7tA3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzIyZmFhYjMtNjdiZi00ZjNhLTkwNGQtMzc5MTUwZWE0ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhSEHs9W17asgjkVVRU1cQ8zeK/DCeg3D6Bz 3hCvemXfpPaMHo1rWsB3C3imyHBc+mVbuAGuIxMaGk2i89JJf5hKr2u/GrL4IkLh qwEJlpbUASETZRgHbW5e03TloCYe3RguFGg4alkvz7mwYIp4zPF13ErDE+Pi85zR bn9W7kGrfvQYxmwLEOlqUPd0TQwZh/sNMyT7T9FxvH3XGQaLIHOCSEDoAIK1K4yL g3ReDsH/CHoszXAYiY2aHg5u0tIHrn3bFoqw0V9zrkfwhsIR1GHFlYrG3ztJDnkj Hf0+Be8lm753TQW9o0dY/zOoz/prKsjk5h/AD0iYhD778H04YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJxlEFonaBvvS3yAXbwdHO5CsCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjM2YWM1YjUtOTY2NC0z MDUyLTkwYTItNTNlNTBiZTRjODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOxwebt13HoRvG6Bz0+a5yjizoGaMc/cuq9pC/9z28DeSs+g0ihWmDF kuJipKlcwQJ6qcsxul+sPIXxLhMp1uEtxYMuiWWBAKlAUe6VOJXhWGmQiiChGjPP xbb+GGDQ7zoENqNCrNesbX+yMUuUptI2ZwRne3uls6PWyjbRf24Xs7pZzl8ijqOf dRN4n819YWEqxDN5h8jz8xJRy3NbhlQB4pkLHJ+yEsmcw7CPcbLu6WMnw+t8W2nd Wq1mIsa5Ih+sKC87icVwi8Y5GGhy4psCEK7auzB6RIf5ow/Wg8fs5bnAlzyLv4UE tfPeJ6iNjuijZXj22VCXC5mt4j4SHlo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:26 2025 by rpki-client