$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa File: 3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa (raw, json) Hash identifier: w1DmoBoiV/69NOKJQ2YHuXh6cw3vicOyLrbIP5K15cM= Subject key identifier: BF:8F:A9:FB:0C:AF:EE:AF:3B:C7:36:34:2F:79:F5:21:EA:17:26:46 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D343A3007DCFEA5894E522900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 7018 IP address blocks: 142.111.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:30:07:dc:fe:a5:89:4e:52:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=95d26a82-f0fe-4425-a04f-454654b45044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:7f:ec:44:1d:bc:f6:54:f9:5b:63:da:a1: 51:7a:c3:46:04:03:8c:31:0a:a9:10:1a:19:7e:0d: 31:56:53:49:7d:c4:38:aa:ee:be:44:61:63:a0:98: e3:11:dc:2b:1b:0e:8e:14:3a:96:35:8e:bc:0a:b6: d0:b7:a1:c2:e2:b7:b5:a3:b6:ad:8b:37:85:89:47: 17:0e:ed:0a:76:bc:56:22:cf:38:62:a5:37:c4:73: 2e:47:c3:6f:19:4e:e6:6f:c4:1b:0b:45:7b:2a:7b: 6d:63:4a:fb:de:62:17:5a:06:fb:0e:90:72:5c:3c: f8:74:1e:65:a6:ac:72:8e:34:55:6f:16:5b:84:10: 03:e5:6c:07:d5:7d:9d:74:fa:fe:a9:c3:be:1a:d1: 1b:cd:52:4b:ef:48:5b:50:bd:6b:29:4e:80:b5:c1: 77:7d:82:f7:4d:b7:f9:54:ec:7b:96:68:9c:6d:f9: a2:d9:ec:a4:1e:9e:e2:ac:3a:ef:d8:1c:6c:0f:42: 02:09:3f:29:b9:99:7c:d5:16:e3:eb:2d:25:b4:9d: c1:73:82:79:1b:1c:9e:a1:59:a1:40:ec:22:be:7c: 11:05:7c:b0:8c:50:c1:31:33:87:35:54:01:cd:23: 49:a2:a5:37:1d:c4:bb:19:21:a2:03:66:18:d3:0e: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:A9:FB:0C:AF:EE:AF:3B:C7:36:34:2F:79:F5:21:EA:17:26:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3220700d-0c95-3a68-8d58-afa2cd5cd3c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:87:5a:7a:19:17:d1:22:fa:e8:dc:38:f8:af:03:0a:53:6f: 92:52:88:ec:c4:24:02:17:a2:29:ce:04:a8:48:a3:d6:8e:01: eb:a0:72:dd:9c:6d:00:2c:c8:62:24:0c:7a:77:ca:e6:5f:a7: 0b:28:b7:ca:38:5f:cd:ca:58:77:61:85:81:63:fe:ec:86:b1: 68:dd:c8:57:aa:c1:9c:88:00:73:0b:f6:93:d8:35:9c:83:1b: aa:8c:3a:ce:ef:13:35:8c:19:13:af:53:b6:cd:3a:55:2b:ba: ba:3a:2b:4d:28:b9:2f:38:12:33:fa:84:fb:a8:9b:6d:bd:6f: 4e:6a:68:71:ed:ec:a1:06:23:7d:34:85:f3:23:e3:77:42:d4: 19:32:b2:2f:61:87:e1:85:21:1c:1a:eb:1b:8d:08:eb:52:ea: 20:01:81:97:de:85:88:b5:44:88:8d:f9:a9:d6:a4:da:54:d5: d1:2f:71:e6:1d:86:6f:4e:cc:e7:d1:8a:6e:60:de:9d:c3:42: ef:ef:8c:91:18:62:2b:70:55:00:92:ca:17:fc:59:27:e7:b1: b7:f5:9d:7a:a8:9a:be:70:e0:4b:d8:3e:e8:36:a3:2c:ab:02: 29:63:f8:82:19:35:db:57:9c:23:9e:f7:d5:33:eb:c0:87:06: dd:c7:0d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OjAH3P6liU5SKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk OTVkMjZhODItZjBmZS00NDI1LWEwNGYtNDU0NjU0YjQ1MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm1/7EQdvPZU+Vtj2qFResNGBAOMMQqpEBoZ fg0xVlNJfcQ4qu6+RGFjoJjjEdwrGw6OFDqWNY68CrbQt6HC4re1o7atizeFiUcX Du0KdrxWIs84YqU3xHMuR8NvGU7mb8QbC0V7KnttY0r73mIXWgb7DpByXDz4dB5l pqxyjjRVbxZbhBAD5WwH1X2ddPr+qcO+GtEbzVJL70hbUL1rKU6AtcF3fYL3Tbf5 VOx7lmicbfmi2eykHp7irDrv2BxsD0ICCT8puZl81Rbj6y0ltJ3Bc4J5GxyeoVmh QOwivnwRBXywjFDBMTOHNVQBzSNJoqU3HcS7GSGiA2YY0w4fAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+PqfsMr+6vO8c2NC959SHqFyZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzIyMDcwMGQtMGM5NS0z YTY4LThkNTgtYWZhMmNkNWNkM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCHWnoZF9Ei+ujcOPivAwpTb5JSiOzEJAIXoinOBKhIo9aOAeugct2c bQAsyGIkDHp3yuZfpwsot8o4X83KWHdhhYFj/uyGsWjdyFeqwZyIAHML9pPYNZyD G6qMOs7vEzWMGROvU7bNOlUruro6K00ouS84EjP6hPuom229b05qaHHt7KEGI300 hfMj43dC1Bkysi9hh+GFIRwa6xuNCOtS6iABgZfehYi1RIiN+anWpNpU1dEvceYd hm9OzOfRim5g3p3DQu/vjJEYYitwVQCSyhf8WSfnsbf1nXqomr5w4EvYPug2oyyr Ailj+IIZNdtXnCOe99Uz68CHBt3HDeI= -----END CERTIFICATE-----Generated at Wed Mar 25 21:29:04 2026 by rpki-client