$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/067149e8-7d94-35f0-9462-97a1143b3303.roa File: 067149e8-7d94-35f0-9462-97a1143b3303.roa (raw, json) Hash identifier: 32oEE1xK60vGM5S5KC5uIw0LUPaEeJlJrDZAyYsys78= Subject key identifier: 38:BA:17:5F:69:B2:96:38:2A:F5:47:6C:7D:3C:A7:82:42:AD:FE:7D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D65CBEB28FAA97BD0A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/067149e8-7d94-35f0-9462-97a1143b3303.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 142.111.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d6:5c:be:b2:8f:aa:97:bd:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=014127a9-b190-4dd0-95ed-f4c972042078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:76:4d:5e:f0:51:34:ac:d2:1a:6b:59:ba: 18:1d:44:33:3a:32:25:7e:85:76:4a:11:5d:4b:92: 9a:09:ff:ad:25:d3:f5:09:c5:5c:c6:1b:f9:8d:02: db:e0:0c:f9:8d:3b:08:dc:a2:51:30:12:58:31:89: a5:59:e3:40:c4:43:d3:64:ac:0f:64:08:09:d1:b1: 55:5f:6d:d2:2c:40:be:32:ba:1a:ad:66:f7:eb:3c: 2b:cd:ad:71:7c:bf:7f:3d:af:d7:cb:5c:07:b7:a2: 52:f7:e9:10:5d:26:e1:6d:45:5d:d9:8a:6c:82:d4: 1b:51:a7:c4:42:27:3b:46:b9:b8:3b:1f:24:5e:d2: 4b:54:52:8c:c9:9a:77:97:c4:a7:11:0b:c1:50:f4: 50:08:80:20:f0:e4:f2:3e:bf:67:d7:1b:a8:51:e9: 6f:8f:b9:f9:8a:13:01:ca:40:d7:5a:35:0d:b8:e5: 90:5a:b9:63:ae:42:e6:cf:32:c4:78:f8:65:c4:4e: b4:ce:3e:e3:4a:ee:f8:bb:82:58:e8:1c:08:f9:31: ba:2f:d2:2a:66:21:59:c5:b9:c0:a5:35:a7:58:89: c5:c5:9e:18:20:e8:89:b9:4e:f1:93:b4:f7:1e:6c: 1a:de:01:44:5e:78:c6:4f:34:58:59:d9:b0:73:c4: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BA:17:5F:69:B2:96:38:2A:F5:47:6C:7D:3C:A7:82:42:AD:FE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/067149e8-7d94-35f0-9462-97a1143b3303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:49:75:2a:1f:6e:a1:0f:af:35:20:a4:0f:22:9c:c9:b9:84: 88:1a:81:76:9a:e1:c8:ec:66:54:f5:73:a4:03:72:6f:a8:7c: f3:e5:ce:ad:cb:79:7a:46:9f:86:99:ee:d4:df:70:1c:b0:de: 11:6b:70:16:6b:aa:8c:13:31:af:15:62:cb:53:57:96:e1:cd: 37:30:d3:1c:ca:8f:ac:85:27:6a:b6:8f:16:f6:ec:fc:d1:b9: ba:6b:45:a0:c9:f5:d9:49:94:eb:fd:ac:9e:57:b2:8c:d0:ac: d7:6b:93:05:9d:39:73:a5:95:70:32:62:27:5a:8f:96:b7:35: f0:14:09:cb:cb:88:24:0c:61:ae:76:cb:14:10:3f:61:fe:24: 7f:56:ee:7b:47:7e:66:7b:cf:98:4b:cc:5b:a1:82:17:d7:65: 5b:8d:e0:e7:94:30:17:51:c1:6e:8e:b7:16:2d:55:b9:45:b2: 9e:5e:84:a6:10:8b:3b:45:32:32:0b:41:67:f0:6a:c1:84:e5: f5:32:26:c1:78:4d:63:ae:f4:e3:b7:78:2d:26:ad:7e:26:04: 84:fa:30:fe:25:7a:2b:2e:6c:3e:5f:c8:42:13:a5:ed:0c:9e: b7:74:75:04:1c:3f:35:64:2b:1e:52:5b:d9:ec:01:45:a1:75: 94:3b:21:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9ZcvrKPqpe9CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MDE0MTI3YTktYjE5MC00ZGQwLTk1ZWQtZjRjOTcyMDQyMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Z2TV7wUTSs0hprWboYHUQzOjIlfoV2ShFd S5KaCf+tJdP1CcVcxhv5jQLb4Az5jTsI3KJRMBJYMYmlWeNAxEPTZKwPZAgJ0bFV X23SLEC+MroarWb36zwrza1xfL9/Pa/Xy1wHt6JS9+kQXSbhbUVd2YpsgtQbUafE Qic7Rrm4Ox8kXtJLVFKMyZp3l8SnEQvBUPRQCIAg8OTyPr9n1xuoUelvj7n5ihMB ykDXWjUNuOWQWrljrkLmzzLEePhlxE60zj7jSu74u4JY6BwI+TG6L9IqZiFZxbnA pTWnWInFxZ4YIOiJuU7xk7T3Hmwa3gFEXnjGTzRYWdmwc8SfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi6F19pspY4KvVHbH08p4JCrf59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDY3MTQ5ZTgtN2Q5NC0z NWYwLTk0NjItOTdhMTE0M2IzMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtJdSofbqEPrzUgpA8inMm5hIgagXaa4cjsZlT1c6QDcm+ofPPlzq3L eXpGn4aZ7tTfcByw3hFrcBZrqowTMa8VYstTV5bhzTcw0xzKj6yFJ2q2jxb27PzR ubprRaDJ9dlJlOv9rJ5XsozQrNdrkwWdOXOllXAyYidaj5a3NfAUCcvLiCQMYa52 yxQQP2H+JH9W7ntHfmZ7z5hLzFuhghfXZVuN4OeUMBdRwW6OtxYtVblFsp5ehKYQ iztFMjILQWfwasGE5fUyJsF4TWOu9OO3eC0mrX4mBIT6MP4leisubD5fyEITpe0M nrd0dQQcPzVkKx5SW9nsAUWhdZQ7IVQ= -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:03 2026 by rpki-client