$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/66b83211-f7c1-39f0-9a2a-91bcbe27ad60.roa File: 66b83211-f7c1-39f0-9a2a-91bcbe27ad60.roa (raw, json) Hash identifier: QXAneTa9TQVeAyxGZTYHr9rdKLQ+iWRkHPalf+Ouk+I= Subject key identifier: 60:1A:52:00:CC:42:05:2C:C8:9B:08:93:79:D1:CA:C1:D5:AA:02:7F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D61E6FA261C48A340A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/66b83211-f7c1-39f0-9a2a-91bcbe27ad60.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 142.111.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d6:1e:6f:a2:61:c4:8a:34:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=7715e4bf-d0a5-417f-ba4b-3f9326ce90c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b7:2b:4c:17:35:a7:58:2f:90:57:a0:ae:89: 65:ff:dd:c6:1f:f0:4c:a2:eb:05:1d:59:bf:66:67: 57:23:0f:0b:2c:63:9a:13:0c:3d:9f:9f:40:8a:b4: 38:dc:d0:bd:77:a4:70:b3:3a:27:73:d3:ac:6b:44: 40:80:fd:11:22:24:ff:3b:b1:bd:36:d9:e7:d5:cf: 57:d8:48:22:d0:48:1e:7a:8a:f4:f4:18:62:1e:6e: b9:88:59:ae:c0:44:04:07:0e:52:3d:79:eb:c5:7f: b3:f0:d0:dc:22:bb:22:8b:d9:7b:ca:b6:5e:eb:71: 66:a4:4d:51:dc:6c:9d:2e:d5:ce:d8:21:56:b5:d5: 87:ef:29:1c:23:48:10:fc:19:c1:dc:b8:22:0e:fb: 88:d8:23:ea:f6:ef:e2:b1:60:b8:50:c4:84:b6:e9: 9f:e2:ee:4b:23:91:76:ba:e4:e4:4f:96:d7:0e:f3: ea:16:0c:d1:68:91:82:25:07:d5:23:0c:cc:90:1c: 32:cb:3f:a6:b5:ca:c0:42:cb:b6:fc:7b:c1:bb:a8: a6:8c:9f:2e:74:fb:e7:43:c1:23:2f:b6:37:52:c3: 14:c1:0e:90:4b:62:f5:0c:96:17:b6:fe:3b:2f:7a: b6:0a:74:c1:c8:c7:e4:5c:27:00:1f:2b:c7:d2:60: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1A:52:00:CC:42:05:2C:C8:9B:08:93:79:D1:CA:C1:D5:AA:02:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/66b83211-f7c1-39f0-9a2a-91bcbe27ad60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4d:33:1e:2e:67:58:8e:33:86:e0:55:f5:8e:6a:a0:db:be: 80:6a:de:41:a8:7a:9a:2a:ac:da:58:e8:3d:5b:80:aa:ef:d5: cf:8d:de:92:9f:a7:2e:25:5b:f0:af:29:ba:07:fc:c2:f5:fd: 65:10:31:e0:7b:ab:91:a5:0b:12:a7:80:17:02:83:49:82:b6: 9f:4e:1c:b7:49:0b:3c:c7:e6:d0:95:cb:71:d9:09:57:0a:f8: d8:86:96:61:29:7f:31:37:3b:da:af:97:8b:85:3d:d3:c3:3f: 4e:27:0c:56:a0:93:49:93:b8:65:fe:b2:2c:8e:5c:cf:dd:9e: 67:c7:e7:82:0d:c4:a6:6f:a0:94:fb:1a:19:2d:65:f5:58:53: d6:99:bd:7d:25:22:33:de:57:c5:ab:14:41:db:02:c4:13:36: 58:8f:3b:1e:7d:96:0a:7c:c0:b7:e0:33:27:2a:c5:09:96:04: 72:66:6d:41:ce:79:b4:b0:d8:92:98:e1:b1:a5:87:18:4a:3b: 2c:ba:19:7a:a5:61:ae:e0:b0:ce:29:0c:e4:76:51:20:d5:ac: e5:53:06:73:ed:39:e7:aa:6a:a7:b9:2f:39:08:bc:05:d6:1a: ca:e6:2e:63:1c:11:c2:1c:b9:00:59:38:1e:29:06:6c:d2:17: bd:e2:49:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9Yeb6JhxIo0CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NzcxNWU0YmYtZDBhNS00MTdmLWJhNGItM2Y5MzI2Y2U5MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLcrTBc1p1gvkFegroll/93GH/BMousFHVm/ ZmdXIw8LLGOaEww9n59AirQ43NC9d6Rwszonc9Osa0RAgP0RIiT/O7G9Ntnn1c9X 2Egi0Egeeor09BhiHm65iFmuwEQEBw5SPXnrxX+z8NDcIrsii9l7yrZe63FmpE1R 3GydLtXO2CFWtdWH7ykcI0gQ/BnB3LgiDvuI2CPq9u/isWC4UMSEtumf4u5LI5F2 uuTkT5bXDvPqFgzRaJGCJQfVIwzMkBwyyz+mtcrAQsu2/HvBu6imjJ8udPvnQ8Ej L7Y3UsMUwQ6QS2L1DJYXtv47L3q2CnTByMfkXCcAHyvH0mB+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAaUgDMQgUsyJsIk3nRysHVqgJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjZiODMyMTEtZjdjMS0z OWYwLTlhMmEtOTFiY2JlMjdhZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpNMx4uZ1iOM4bgVfWOaqDbvoBq3kGoepoqrNpY6D1bgKrv1c+N3pKf py4lW/CvKboH/ML1/WUQMeB7q5GlCxKngBcCg0mCtp9OHLdJCzzH5tCVy3HZCVcK +NiGlmEpfzE3O9qvl4uFPdPDP04nDFagk0mTuGX+siyOXM/dnmfH54INxKZvoJT7 GhktZfVYU9aZvX0lIjPeV8WrFEHbAsQTNliPOx59lgp8wLfgMycqxQmWBHJmbUHO ebSw2JKY4bGlhxhKOyy6GXqlYa7gsM4pDOR2USDVrOVTBnPtOeeqaqe5LzkIvAXW GsrmLmMcEcIcuQBZOB4pBmzSF73iScs= -----END CERTIFICATE-----Generated at Thu Mar 26 02:15:16 2026 by rpki-client