$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa File: 9825f336-3da9-3d61-ab77-7695e2a1309e.roa (raw, json) Hash identifier: P1+dtkcOotCw3JXVr4vVyiuhPTZUzg9NB6gjAXp1Jfk= Subject key identifier: 48:4E:05:1D:D6:9C:35:21:7E:D7:5D:E8:66:B0:FA:C9:E8:F5:62:6B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D3195CE9A009EDA2A600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 142.111.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d3:19:5c:e9:a0:09:ed:a2:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=c8b421bb-30a6-4e62-ae95-856e53e12376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:ee:f6:cf:78:b0:5f:dc:ce:9c:89:df:56: 70:85:c4:b3:91:53:3e:8a:d9:a1:dc:ad:38:ac:90: 57:86:1b:c7:83:41:9e:ee:54:9b:40:9b:10:85:0a: 50:92:7b:9a:03:96:5e:98:d2:fa:72:97:38:fb:5d: 0f:da:96:6e:ed:55:a2:d3:9d:5a:12:76:f5:3c:f8: 25:b9:e5:6c:cb:87:bc:e2:4e:a2:5b:e2:7c:2b:fa: 9e:e6:84:7f:cf:e4:a1:b5:5f:53:a6:fc:ec:16:d9: 5d:cd:32:b4:a0:84:34:df:06:a1:08:38:a0:d6:2a: 5c:c5:dc:17:5f:30:5a:1e:66:6b:45:b8:54:20:35: 0e:40:36:de:82:61:aa:ab:09:f1:3b:7a:d6:47:5c: 95:78:45:f4:a9:39:01:41:c5:e7:75:f8:e9:80:e4: fa:cd:46:64:d5:d7:09:16:c7:30:76:a1:00:4f:72: e9:fe:6d:52:9c:a6:bc:a7:dd:2b:64:f4:19:79:8e: eb:c4:8c:83:4a:4a:33:77:4b:22:e5:97:9c:08:6d: 66:ef:ba:c3:49:f1:db:7f:79:26:79:5c:2f:d8:39: ab:a1:d9:bf:27:a2:46:ec:4c:59:49:07:c3:58:da: a8:56:66:63:c1:71:1e:f9:cd:c4:d4:71:18:6f:50: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4E:05:1D:D6:9C:35:21:7E:D7:5D:E8:66:B0:FA:C9:E8:F5:62:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9825f336-3da9-3d61-ab77-7695e2a1309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cb:49:eb:c4:66:53:db:a0:12:e2:92:55:a5:2f:2c:09:ee: 64:b2:9d:7e:66:31:b0:a7:3b:29:fa:ae:e6:c1:a8:98:a3:51: 7e:a4:c1:77:61:57:ec:fc:2b:71:ad:76:2e:9b:85:c0:7c:86: 55:e1:96:59:e5:1d:f7:11:f8:42:74:db:4e:91:6b:cf:3a:da: b5:86:37:c9:fb:fa:5d:01:c2:04:08:af:0a:ff:5f:4b:21:bc: d4:77:98:5f:07:5f:90:e2:75:76:b3:f1:64:7f:a3:a3:a8:82: 65:34:57:89:8c:27:13:b2:69:dd:d4:37:4e:48:a7:93:58:1c: f0:70:9e:da:2a:a1:9e:ee:ed:b4:25:d0:92:2b:2c:62:cd:4d: 30:3a:1c:e8:73:38:55:98:87:0f:b3:27:88:3e:7e:b0:12:98: 77:e0:43:54:f2:e4:07:de:b3:4b:2c:57:62:83:24:fd:7c:d4: 3b:a3:17:c6:8a:24:40:b1:f7:93:44:27:f5:4e:e0:3f:40:9a: b7:e9:75:36:af:d0:2d:d6:36:09:b8:65:d0:51:bd:47:e3:28: 4d:75:40:d9:5d:44:21:d2:88:77:d2:e2:73:f8:6b:57:c7:d8: 45:bc:81:f6:b5:ac:40:9b:bd:91:e3:0b:1b:29:c9:e4:b7:ee: 05:15:77:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9MZXOmgCe2ipgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YzhiNDIxYmItMzBhNi00ZTYyLWFlOTUtODU2ZTUzZTEyMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Pu9s94sF/czpyJ31ZwhcSzkVM+itmh3K04 rJBXhhvHg0Ge7lSbQJsQhQpQknuaA5ZemNL6cpc4+10P2pZu7VWi051aEnb1PPgl ueVsy4e84k6iW+J8K/qe5oR/z+ShtV9TpvzsFtldzTK0oIQ03wahCDig1ipcxdwX XzBaHmZrRbhUIDUOQDbegmGqqwnxO3rWR1yVeEX0qTkBQcXndfjpgOT6zUZk1dcJ FscwdqEAT3Lp/m1SnKa8p90rZPQZeY7rxIyDSkozd0si5ZecCG1m77rDSfHbf3km eVwv2Dmrodm/J6JG7ExZSQfDWNqoVmZjwXEe+c3E1HEYb1AxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhOBR3WnDUhftdd6Gaw+sno9WJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTgyNWYzMzYtM2RhOS0z ZDYxLWFiNzctNzY5NWUyYTEzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDLSevEZlPboBLiklWlLywJ7mSynX5mMbCnOyn6rubBqJijUX6kwXdh V+z8K3Gtdi6bhcB8hlXhllnlHfcR+EJ0206Ra8862rWGN8n7+l0BwgQIrwr/X0sh vNR3mF8HX5DidXaz8WR/o6OogmU0V4mMJxOyad3UN05Ip5NYHPBwntoqoZ7u7bQl 0JIrLGLNTTA6HOhzOFWYhw+zJ4g+frASmHfgQ1Ty5Afes0ssV2KDJP181DujF8aK JECx95NEJ/VO4D9AmrfpdTav0C3WNgm4ZdBRvUfjKE11QNldRCHSiHfS4nP4a1fH 2EW8gfa1rECbvZHjCxspyeS37gUVdyI= -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:23 2026 by rpki-client