$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa File: 604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa (raw, json) Hash identifier: Oyn9pwkL09poxXT0NetpzOpLGJFy/nhdtH9iYQ8QA8g= Subject key identifier: F6:EE:FD:78:B1:DA:14:2E:69:F3:87:E8:7A:8F:52:F1:4A:36:44:47 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D975561973707C57A28355900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 3561 IP address blocks: 142.111.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:61:97:37:07:c5:7a:28:35:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=09b9e341-2fc7-4442-9e82-7b2f96debb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:4d:c8:13:b1:1f:82:b8:3a:25:f0:09:e6: aa:b4:04:19:31:c2:12:b7:76:da:7f:b3:67:f5:6d: 56:d5:6e:35:2e:d4:a9:46:4e:0d:78:64:49:b6:61: 77:75:a0:ac:e9:b4:f1:69:b1:89:4a:9c:2c:f2:90: d6:3d:31:8f:c4:b7:7f:d3:f2:cf:1f:a9:da:3e:0a: eb:7f:e0:c5:e2:6f:7f:8c:23:f9:90:f8:64:52:30: ed:3d:4a:55:bc:6c:0f:de:31:ed:a3:b7:64:40:73: ab:75:f4:0b:b5:80:af:5e:74:a5:14:f8:2a:49:92: f6:2e:f1:86:0d:68:ba:53:22:4c:00:00:fd:16:de: a7:82:9f:75:cb:8c:86:b2:ba:22:c7:9c:14:ef:4d: 1c:28:a8:0d:44:56:02:cc:2d:02:21:09:a7:43:5f: af:bc:a4:9c:c8:88:9c:f9:ee:b1:e0:8e:02:c6:39: fe:b5:c6:8f:3e:94:aa:a1:36:dc:15:60:57:bb:cb: c3:6e:8d:d1:20:7e:3f:10:af:bc:2e:68:95:af:8f: 09:b8:fa:0f:54:d9:02:21:98:74:42:66:1c:05:fd: 0d:81:d8:ba:13:6c:f8:ca:22:86:aa:13:5b:eb:67: 5a:fa:69:4f:de:58:b7:4a:fe:84:c7:4c:38:a0:92: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:FD:78:B1:DA:14:2E:69:F3:87:E8:7A:8F:52:F1:4A:36:44:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5b:97:42:83:ae:da:07:e6:9f:35:e0:ef:78:8b:37:63:89: 17:fe:23:f7:11:74:16:e1:f4:3f:d7:42:dc:07:50:92:14:7e: 58:2a:33:eb:a3:16:7d:76:ed:7f:34:f4:f5:c3:13:cd:90:ee: c4:b2:39:8a:bf:64:ff:0a:8a:f2:19:8f:37:46:d9:fa:8b:b4: b7:be:48:cb:bb:ea:c8:b0:11:98:e8:1e:1f:8f:0e:4e:fb:2e: 64:5a:0a:6a:2b:19:ab:99:9c:d1:d2:8d:ae:a7:4d:20:e8:b6: 08:cc:62:39:3b:f2:e4:79:4b:73:86:4b:6e:4c:7e:ef:8f:1e: 08:c4:80:e4:a7:28:91:f1:23:16:6a:1d:f2:7b:4f:8c:3d:94: ee:29:9d:f7:bc:b1:2f:b3:81:30:a2:2e:00:e3:6d:35:af:df: 17:48:60:32:7b:1e:50:2b:d1:71:c9:0d:05:89:b9:71:ab:55: 5a:78:b0:f3:f1:6f:fe:fe:a3:15:cc:0c:bb:2a:15:ef:63:57: 94:5e:97:e8:22:55:5a:d1:d4:06:fd:87:06:ed:eb:61:b7:b4: 30:82:6c:ab:63:6d:ce:71:41:41:a7:d4:ab:82:41:a1:f8:ea: 30:84:74:f0:51:cd:1d:e9:ef:49:0a:dc:25:9a:34:78:04:8b: 93:c0:7f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWGXNwfFeig1WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk MDliOWUzNDEtMmZjNy00NDQyLTllODItN2IyZjk2ZGViYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPBNyBOxH4K4OiXwCeaqtAQZMcISt3baf7Nn 9W1W1W41LtSpRk4NeGRJtmF3daCs6bTxabGJSpws8pDWPTGPxLd/0/LPH6naPgrr f+DF4m9/jCP5kPhkUjDtPUpVvGwP3jHto7dkQHOrdfQLtYCvXnSlFPgqSZL2LvGG DWi6UyJMAAD9Ft6ngp91y4yGsroix5wU700cKKgNRFYCzC0CIQmnQ1+vvKScyIic +e6x4I4Cxjn+tcaPPpSqoTbcFWBXu8vDbo3RIH4/EK+8LmiVr48JuPoPVNkCIZh0 QmYcBf0Ngdi6E2z4yiKGqhNb62da+mlP3li3Sv6Ex0w4oJKiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbu/Xix2hQuafOH6HqPUvFKNkRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjA0YTMxYjctZGRiNy0z MDRiLWI4MjctMzQyN2VkMGNmOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVbl0KDrtoH5p814O94izdjiRf+I/cRdBbh9D/XQtwHUJIUflgqM+uj Fn127X809PXDE82Q7sSyOYq/ZP8KivIZjzdG2fqLtLe+SMu76siwEZjoHh+PDk77 LmRaCmorGauZnNHSja6nTSDotgjMYjk78uR5S3OGS25Mfu+PHgjEgOSnKJHxIxZq HfJ7T4w9lO4pnfe8sS+zgTCiLgDjbTWv3xdIYDJ7HlAr0XHJDQWJuXGrVVp4sPPx b/7+oxXMDLsqFe9jV5Rel+giVVrR1Ab9hwbt62G3tDCCbKtjbc5xQUGn1KuCQaH4 6jCEdPBRzR3p70kK3CWaNHgEi5PAf4M= -----END CERTIFICATE-----Generated at Wed May 13 10:17:08 2026 by rpki-client