$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8af67c48-4c4d-3ef2-bd3a-29fa7a02667c.roa File: 8af67c48-4c4d-3ef2-bd3a-29fa7a02667c.roa (raw, json) Hash identifier: AwfIonAQ4q6juqw5TW03i0+JTxRfihDCTEFyA5nMvwE= Subject key identifier: 7E:89:EC:CE:29:95:86:25:E9:73:49:D0:CE:7D:83:7E:50:AF:C0:F6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DAE4FBFEB0F4C05ABA6411740 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8af67c48-4c4d-3ef2-bd3a-29fa7a02667c.roa Signing time: Thu 30 Apr 2026 18:32:55 +0000 ROA not before: Thu 30 Apr 2026 18:32:55 +0000 ROA not after: Wed 29 Jul 2026 18:32:55 +0000 asID: 44559 IP address blocks: 142.111.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:bf:eb:0f:4c:05:ab:a6:41:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 30 18:32:55 2026 GMT Not After : Jul 29 18:32:55 2026 GMT Subject: CN=6cd80dfc-220e-4c20-8655-ea883d54472c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:05:16:79:23:d1:59:69:b3:fe:d0:d3:2e: 28:f1:59:62:76:1d:a1:58:b5:7e:98:4c:ba:b2:23: 91:30:bb:8a:05:bc:36:ac:a2:67:aa:89:c7:fc:6a: 90:d8:09:1b:30:0c:b5:e7:01:e4:88:18:ec:f1:f0: 7e:8f:00:40:49:cb:f5:ab:9f:cc:a2:6b:54:96:3a: f3:df:ed:56:5b:97:e7:df:59:e8:94:ae:29:39:34: 53:7c:ce:fe:9c:a8:93:07:b4:33:2c:b6:e1:7b:00: 62:58:77:c6:d8:a2:48:16:9c:5a:2b:ca:7e:d6:ce: 6f:7f:fc:be:cd:f2:e1:e7:3c:11:5d:68:34:4f:1b: 82:7a:44:19:d5:d7:b0:89:88:3f:31:cc:d6:2c:06: 80:8d:6a:47:45:f2:68:c1:70:06:d0:35:11:9a:1e: 26:28:58:a7:00:d1:dc:e0:58:2c:e1:3a:27:8f:a9: da:46:ae:02:73:25:02:75:b5:ef:ae:c8:ed:a2:9e: b0:90:4f:58:58:70:62:21:de:63:6f:bf:48:20:b5: b3:62:61:dd:23:4a:d7:d3:c1:cb:a2:71:df:0f:97: 5f:4a:3d:6b:44:35:f4:0d:24:18:97:e3:cb:0b:02: 98:f1:23:8d:0c:2e:25:2f:14:37:c0:f0:84:61:a9: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:EC:CE:29:95:86:25:E9:73:49:D0:CE:7D:83:7E:50:AF:C0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8af67c48-4c4d-3ef2-bd3a-29fa7a02667c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:70:3c:d9:90:8f:4a:0f:cf:24:fa:80:fc:b2:5a:ea:68:f4: c1:30:f3:4b:54:22:5c:43:9c:12:a4:99:2c:70:1e:94:7b:18: 58:c8:be:61:43:10:69:ff:56:d8:d7:aa:cd:c7:7b:e2:85:0d: 83:2c:0b:05:d6:85:31:4a:fa:21:a2:49:70:4f:7b:92:67:bf: 67:54:9c:bf:39:57:7e:36:9b:ff:99:ab:95:20:65:f6:3f:0a: 68:02:a7:15:76:96:ba:67:21:69:3e:6c:f3:bc:27:a1:f3:f9: 77:d8:ba:e8:1b:64:8c:ae:71:4c:8b:a7:53:e7:d4:a7:d3:c5: 06:36:8e:2c:71:64:46:7a:68:9a:74:0b:a1:72:06:dc:28:90: a2:3c:19:47:2d:ed:ab:12:11:6c:46:94:1d:24:38:17:35:33: e2:17:81:c3:86:64:a3:e0:f4:3a:3a:b2:93:c5:a4:14:54:15: 6f:6a:52:52:c7:58:19:b8:eb:f5:1b:01:ec:c6:e7:49:19:45: 01:a2:97:30:87:7f:bd:63:14:ec:ce:17:cf:e3:38:24:9b:be: aa:db:14:90:d7:8a:1e:83:0d:f2:4b:99:c5:45:f8:6b:e4:81: 73:e9:72:ec:d5:89:78:39:22:84:49:97:94:64:d3:46:21:72: d9:94:a9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT7/rD0wFq6ZBF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQzMDE4MzI1NVoXDTI2MDcyOTE4MzI1NVowLzEtMCsGA1UEAxMk NmNkODBkZmMtMjIwZS00YzIwLTg2NTUtZWE4ODNkNTQ0NzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5QFFnkj0Vlps/7Q0y4o8Vlidh2hWLV+mEy6 siORMLuKBbw2rKJnqonH/GqQ2AkbMAy15wHkiBjs8fB+jwBAScv1q5/MomtUljrz 3+1WW5fn31nolK4pOTRTfM7+nKiTB7QzLLbhewBiWHfG2KJIFpxaK8p+1s5vf/y+ zfLh5zwRXWg0TxuCekQZ1dewiYg/MczWLAaAjWpHRfJowXAG0DURmh4mKFinANHc 4Fgs4Tonj6naRq4CcyUCdbXvrsjtop6wkE9YWHBiId5jb79IILWzYmHdI0rX08HL onHfD5dfSj1rRDX0DSQYl+PLCwKY8SONDC4lLxQ3wPCEYan1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6J7M4plYYl6XNJ0M59g35Qr8D2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGFmNjdjNDgtNGM0ZC0z ZWYyLWJkM2EtMjlmYTdhMDI2NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdwPNmQj0oPzyT6gPyyWupo9MEw80tUIlxDnBKkmSxwHpR7GFjIvmFD EGn/VtjXqs3He+KFDYMsCwXWhTFK+iGiSXBPe5Jnv2dUnL85V342m/+Zq5UgZfY/ CmgCpxV2lrpnIWk+bPO8J6Hz+XfYuugbZIyucUyLp1Pn1KfTxQY2jixxZEZ6aJp0 C6FyBtwokKI8GUct7asSEWxGlB0kOBc1M+IXgcOGZKPg9Do6spPFpBRUFW9qUlLH WBm46/UbAezG50kZRQGilzCHf71jFOzOF8/jOCSbvqrbFJDXih6DDfJLmcVF+Gvk gXPpcuzViXg5IoRJl5Rk00YhctmUqRI= -----END CERTIFICATE-----Generated at Wed May 13 04:15:51 2026 by rpki-client