$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa File: fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa (raw, json) Hash identifier: Hu/Rv5+t+yiNLP/q/h8Irzzt8VeBCrheJTgsXll96Z0= Subject key identifier: 0A:92:D3:44:93:78:E5:FF:59:33:7E:EE:AA:49:24:81:FF:A5:30:F7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B91776F8A8D37EA9EFF547600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 44477 IP address blocks: 142.111.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:6f:8a:8d:37:ea:9e:ff:54:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=4df839de-94cb-4668-8409-d52e4aa06c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:bb:f2:0e:bd:22:1e:11:2f:b2:4a:7a:fd: 3d:d8:7f:9a:64:4a:f9:6a:eb:a4:15:d7:de:44:b2: d1:1a:9e:4c:0c:52:76:82:ea:78:d3:e9:c4:88:e7: 6b:45:39:3f:31:61:f4:21:7e:2b:e4:3b:a1:40:a2: 8e:74:19:f1:7e:e4:7a:2b:4b:a0:2b:60:79:66:74: 07:e5:c1:e3:a2:48:be:c9:84:7d:49:52:43:bd:f0: 5b:cc:9f:58:a5:bd:21:9d:0a:e0:9e:f0:0a:d2:c6: 28:15:62:eb:80:17:75:84:8b:f0:6d:23:3e:fc:40: 5e:da:07:c5:e1:31:5e:d2:d5:aa:20:b5:2f:5f:c6: b7:0f:1c:41:be:4c:96:e0:92:cc:da:9f:ee:9a:a8: 11:45:47:4e:ea:b7:b5:c0:85:f7:d0:bf:8d:4e:f5: 8b:05:42:6d:cc:1b:76:ee:8c:65:a7:43:69:14:f2: 7c:90:70:44:bf:85:bb:1a:b6:82:8a:34:29:18:fa: 92:29:79:c6:ac:72:90:38:1a:30:4c:56:50:9f:43: 30:e7:50:f4:8c:49:2a:2e:2b:74:63:7c:4c:fb:70: c8:ed:5c:bb:df:26:79:60:de:af:3d:15:bb:fa:fe: 21:db:4f:9a:2a:e9:a5:41:34:0b:14:3d:20:ca:d8: d5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:92:D3:44:93:78:E5:FF:59:33:7E:EE:AA:49:24:81:FF:A5:30:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa1a4a35-5d34-34f8-8162-3f88de8365c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b7:d2:eb:fc:d5:e6:0d:8d:70:ff:81:ff:56:5a:7b:56:10: 78:0b:61:e0:2d:54:e7:49:36:38:f9:e1:f3:51:08:f0:de:93: 11:f8:78:6f:a9:aa:9a:99:8f:2a:dd:b2:5e:99:1f:77:4d:4b: 42:d5:6b:8e:a5:4c:ec:4e:71:3c:07:a6:93:1f:d8:03:df:be: 1e:8c:c4:8d:7d:0f:b5:46:7f:d5:21:6c:a1:b1:eb:a7:1e:63: 15:99:cc:64:ea:ca:29:82:b5:0d:0c:aa:c0:88:00:5b:41:52: 1f:c5:80:48:45:40:43:8a:f4:99:e2:4d:d1:46:10:da:e3:fe: 71:e1:11:b7:42:4b:ec:e5:8a:2e:65:14:9e:43:20:0c:19:e0: 17:3d:d4:f5:d1:a0:0b:81:0a:8d:48:ff:46:cf:00:e0:1b:41: 86:aa:64:61:74:9b:92:1c:f6:8e:db:7f:6a:a7:58:8a:2e:15: 64:16:2d:5e:21:ee:1c:f0:40:cb:9a:33:d2:0b:0a:31:ec:73: c9:9c:63:3f:f8:ed:80:c8:86:64:8f:f9:4f:b1:f3:9e:75:15: f9:f0:0f:cb:53:30:c3:ab:d7:d2:28:0b:26:61:0a:33:a8:cc: 63:e1:3f:af:5d:07:26:f8:95:ec:7d:90:5e:6a:10:dd:47:5f: ab:3d:75:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd2+KjTfqnv9UdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk NGRmODM5ZGUtOTRjYi00NjY4LTg0MDktZDUyZTRhYTA2Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP678g69Ih4RL7JKev092H+aZEr5auukFdfe RLLRGp5MDFJ2gup40+nEiOdrRTk/MWH0IX4r5DuhQKKOdBnxfuR6K0ugK2B5ZnQH 5cHjoki+yYR9SVJDvfBbzJ9Ypb0hnQrgnvAK0sYoFWLrgBd1hIvwbSM+/EBe2gfF 4TFe0tWqILUvX8a3DxxBvkyW4JLM2p/umqgRRUdO6re1wIX30L+NTvWLBUJtzBt2 7oxlp0NpFPJ8kHBEv4W7GraCijQpGPqSKXnGrHKQOBowTFZQn0Mw51D0jEkqLit0 Y3xM+3DI7Vy73yZ5YN6vPRW7+v4h20+aKumlQTQLFD0gytjV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqS00STeOX/WTN+7qpJJIH/pTD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmExYTRhMzUtNWQzNC0z NGY4LTgxNjItM2Y4OGRlODM2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy30uv81eYNjXD/gf9WWntWEHgLYeAtVOdJNjj54fNRCPDekxH4eG+p qpqZjyrdsl6ZH3dNS0LVa46lTOxOcTwHppMf2APfvh6MxI19D7VGf9UhbKGx66ce YxWZzGTqyimCtQ0MqsCIAFtBUh/FgEhFQEOK9JniTdFGENrj/nHhEbdCS+zlii5l FJ5DIAwZ4Bc91PXRoAuBCo1I/0bPAOAbQYaqZGF0m5Ic9o7bf2qnWIouFWQWLV4h 7hzwQMuaM9ILCjHsc8mcYz/47YDIhmSP+U+x8551FfnwD8tTMMOr19IoCyZhCjOo zGPhP69dByb4lex9kF5qEN1HX6s9dZo= -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:16 2025 by rpki-client