$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa File: 3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa (raw, json) Hash identifier: GcMejvyeY7lPx4CBQYXGXm7E4q/EWqPCIL4hrMxhf6E= Subject key identifier: D3:7F:DA:27:C9:FA:3B:A1:8C:41:16:2E:36:DC:2C:35:C4:A2:6A:EC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E94EA67790E4A118781FA1FE0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 9009 IP address blocks: 142.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:67:79:0e:4a:11:87:81:fa:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=7be2eeba-1fd9-4b29-8144-affd2be94d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:da:39:bd:96:8c:81:cd:01:6d:34:3b:4f: 44:ce:ff:17:64:47:27:97:0f:a3:89:5d:d2:f9:d2: 2a:f3:58:46:7c:b9:29:1f:f8:25:a6:65:90:8f:01: e3:c9:82:cb:d8:fd:6f:0a:e7:5f:73:a1:01:89:2e: 07:d0:1e:c7:f9:a1:cb:aa:99:f8:89:07:10:d4:f1: 7c:c3:c3:b3:cc:20:5d:91:bd:1b:47:2d:31:e4:bc: 97:be:69:f3:46:a2:ef:df:7a:52:b5:9c:c1:82:99: 03:89:93:86:be:7a:b3:f6:02:39:58:f3:b4:3e:d6: 3b:59:2b:6d:c8:e8:07:1d:33:eb:1b:a0:37:18:9b: ce:dd:d0:d1:5d:bb:53:90:ad:32:fb:1f:ab:57:40: 3f:8f:bd:eb:b1:f5:23:70:38:e0:07:49:d0:6f:8a: 85:d0:e5:e9:62:72:8c:c4:9d:ef:78:42:83:0c:aa: 6e:0b:90:44:3b:44:b8:e1:b5:dc:33:25:69:17:71: ce:71:09:47:25:65:b5:de:aa:1b:bd:c1:fa:17:9a: ce:23:95:89:e2:75:83:2d:bd:37:2e:17:ac:e7:2a: 4f:0a:c0:02:93:e5:37:0b:5f:1e:7c:a7:33:bd:f8: ec:72:ed:a4:89:31:be:96:8c:b7:aa:da:d6:83:60: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7F:DA:27:C9:FA:3B:A1:8C:41:16:2E:36:DC:2C:35:C4:A2:6A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a2c63c4-46e7-3b24-ae57-0eaa3969b12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c9:2b:e0:7e:2f:41:e2:34:75:fd:98:6b:13:51:33:27:c6: 1e:f0:ff:6a:96:58:d1:1b:ea:0f:7c:b2:a6:45:1f:a8:0b:22: 09:98:e2:be:a8:03:c9:9e:26:37:ff:7f:35:c9:6c:0c:96:ac: e8:bc:52:02:8a:30:a2:86:76:4e:f1:23:be:77:6f:35:6e:8f: 72:17:2d:b0:20:91:f9:5b:2b:f6:b5:cc:d5:2f:53:6a:0d:cc: 93:b6:b5:ec:3e:6d:f5:47:0e:21:68:67:95:0b:b7:07:1d:27: 71:73:f0:5e:27:bd:51:7a:b7:3d:61:b1:4a:b6:18:d2:71:9c: 87:54:e1:2b:30:cd:14:4d:ec:62:c1:7b:4f:48:68:74:b8:62: 4b:cc:84:aa:e8:58:c6:7d:79:13:9d:95:a2:f1:60:c9:00:6c: 3a:bb:cd:c1:43:24:9b:15:f8:a2:45:41:b6:25:e3:3d:45:8e: f4:4e:bc:0c:e3:99:af:fe:37:27:3b:ff:64:30:da:41:09:13: f1:19:d4:9c:45:e3:35:4f:e6:43:10:87:81:9a:b6:21:41:28: c7:cf:11:d1:9e:a5:b5:51:c5:73:ac:8e:cb:3e:f0:30:e4:4a: 3d:98:8b:96:02:10:27:ef:cf:59:31:0d:b0:61:88:5d:65:72: 34:14:6a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6md5DkoRh4H6H+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk N2JlMmVlYmEtMWZkOS00YjI5LTgxNDQtYWZmZDJiZTk0ZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJDaOb2WjIHNAW00O09Ezv8XZEcnlw+jiV3S +dIq81hGfLkpH/glpmWQjwHjyYLL2P1vCudfc6EBiS4H0B7H+aHLqpn4iQcQ1PF8 w8OzzCBdkb0bRy0x5LyXvmnzRqLv33pStZzBgpkDiZOGvnqz9gI5WPO0PtY7WStt yOgHHTPrG6A3GJvO3dDRXbtTkK0y+x+rV0A/j73rsfUjcDjgB0nQb4qF0OXpYnKM xJ3veEKDDKpuC5BEO0S44bXcMyVpF3HOcQlHJWW13qobvcH6F5rOI5WJ4nWDLb03 Lhes5ypPCsACk+U3C18efKczvfjscu2kiTG+loy3qtrWg2BoxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN/2ifJ+juhjEEWLjbcLDXEomrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EyYzYzYzQtNDZlNy0z YjI0LWFlNTctMGVhYTM5NjliMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHJK+B+L0HiNHX9mGsTUTMnxh7w/2qWWNEb6g98sqZFH6gLIgmY4r6o A8meJjf/fzXJbAyWrOi8UgKKMKKGdk7xI753bzVuj3IXLbAgkflbK/a1zNUvU2oN zJO2tew+bfVHDiFoZ5ULtwcdJ3Fz8F4nvVF6tz1hsUq2GNJxnIdU4SswzRRN7GLB e09IaHS4YkvMhKroWMZ9eROdlaLxYMkAbDq7zcFDJJsV+KJFQbYl4z1FjvROvAzj ma/+Nyc7/2Qw2kEJE/EZ1JxF4zVP5kMQh4GatiFBKMfPEdGepbVRxXOsjss+8DDk Sj2Yi5YCECfvz1kxDbBhiF1lcjQUaqw= -----END CERTIFICATE-----Generated at Thu Jul 23 23:10:25 2026 by rpki-client