$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a6aebf3f-d59e-3d1a-8f6c-46e090c18db5.roa File: a6aebf3f-d59e-3d1a-8f6c-46e090c18db5.roa (raw, json) Hash identifier: ci0UHmEbccThmw4nhxH9K7Yi7mvwjD6CwsQ3DTPPa3I= Subject key identifier: 61:02:90:08:FE:44:C7:1B:B3:4F:3F:00:6E:57:B8:CB:B3:B4:D6:C3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D3E00113D1F2EDA0CD271E300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a6aebf3f-d59e-3d1a-8f6c-46e090c18db5.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 9009 IP address blocks: 142.111.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:11:3d:1f:2e:da:0c:d2:71:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=2e2e5aef-c7e3-4ecf-877b-ef80afd10ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:26:9a:a0:80:a4:24:45:9d:7d:5b:c2:46: 2e:f7:37:e8:a1:c2:a2:2a:65:1f:15:d8:a3:31:36: 60:d1:90:f5:3b:10:5d:87:30:68:ef:c3:71:46:34: 69:6c:0a:84:af:79:f8:e3:ff:05:c4:6a:db:1d:e3: 05:e2:00:ee:4a:70:34:b6:25:2f:12:73:ec:ea:dd: 81:05:2b:a7:39:fa:23:50:05:64:cd:fb:c6:97:66: 10:42:41:30:09:e7:f4:0c:e6:74:97:cd:a2:bc:9c: b6:84:0a:d9:22:8e:f6:78:1c:a9:b5:14:ff:94:fd: 6e:de:1d:09:20:e5:5f:63:b2:38:06:c6:8b:44:4f: e0:19:1c:2f:47:82:7f:4a:7a:8b:cf:70:88:fd:bf: 69:41:a5:0c:89:eb:a2:5c:01:0f:e2:b9:0f:3e:fd: 32:5d:0b:f0:b6:82:51:59:c9:5e:00:30:f4:78:e3: 38:ad:82:93:e2:95:29:02:9f:57:bb:7b:94:1c:0d: 39:7b:f4:02:ee:ab:43:08:41:2e:c1:7a:64:3c:fa: fa:f9:51:4c:b1:fd:e7:f3:56:05:8a:ac:96:52:54: ac:2d:f2:a1:90:73:f1:d2:dc:70:1a:77:ff:33:68: 02:0d:e9:e7:e1:b5:e1:c8:e0:62:95:7c:37:76:e9: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:02:90:08:FE:44:C7:1B:B3:4F:3F:00:6E:57:B8:CB:B3:B4:D6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a6aebf3f-d59e-3d1a-8f6c-46e090c18db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:14:35:f9:3d:97:15:ae:85:14:3e:ee:f2:16:78:bc:26:cf: 17:56:f1:18:e5:6c:c7:1a:9c:33:6c:3a:ed:7b:0d:77:2f:73: 0e:e3:6d:8c:62:fb:c8:45:0f:df:cf:ca:42:7f:36:e5:d5:85: a2:8b:3e:8b:e2:0f:54:32:ce:ef:21:44:1c:f5:67:12:5e:6f: e7:ff:ed:fc:e5:e4:24:64:84:5e:af:31:77:13:30:61:e3:f2: 70:95:00:89:6b:1a:f8:7c:1e:42:c8:5e:fe:1b:b6:49:cb:6f: 16:fe:55:f8:17:cd:72:c9:00:ff:5a:5e:23:eb:08:e3:06:24: f3:f3:d9:bd:d4:a8:45:63:94:ac:90:d3:f9:c2:bd:95:d9:ce: 14:dc:29:02:2f:40:33:9c:de:5f:e0:b6:7b:2d:41:36:db:29: d3:08:b6:67:ac:4f:cb:f5:bb:8d:82:6e:01:5c:a4:3a:ba:43: bd:6a:d6:85:11:4b:67:75:fa:2c:c1:6e:d1:66:55:19:ca:fd: 60:da:94:c6:b7:21:d0:59:98:42:36:03:39:8d:f8:f3:fc:2b: 62:11:a3:01:d0:3f:b7:66:e0:49:b0:28:61:8d:6a:d3:73:aa: 07:c0:64:a4:f9:af:0b:06:15:7d:76:a5:c7:27:a0:b5:9f:b3: ab:3a:2d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABE9Hy7aDNJx4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MmUyZTVhZWYtYzdlMy00ZWNmLTg3N2ItZWY4MGFmZDEwY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/UmmqCApCRFnX1bwkYu9zfoocKiKmUfFdij MTZg0ZD1OxBdhzBo78NxRjRpbAqEr3n44/8FxGrbHeMF4gDuSnA0tiUvEnPs6t2B BSunOfojUAVkzfvGl2YQQkEwCef0DOZ0l82ivJy2hArZIo72eByptRT/lP1u3h0J IOVfY7I4BsaLRE/gGRwvR4J/SnqLz3CI/b9pQaUMieuiXAEP4rkPPv0yXQvwtoJR WcleADD0eOM4rYKT4pUpAp9Xu3uUHA05e/QC7qtDCEEuwXpkPPr6+VFMsf3n81YF iqyWUlSsLfKhkHPx0txwGnf/M2gCDenn4bXhyOBilXw3dukZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGECkAj+RMcbs08/AG5XuMuztNbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTZhZWJmM2YtZDU5ZS0z ZDFhLThmNmMtNDZlMDkwYzE4ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkUNfk9lxWuhRQ+7vIWeLwmzxdW8RjlbMcanDNsOu17DXcvcw7jbYxi +8hFD9/PykJ/NuXVhaKLPoviD1Qyzu8hRBz1ZxJeb+f/7fzl5CRkhF6vMXcTMGHj 8nCVAIlrGvh8HkLIXv4btknLbxb+VfgXzXLJAP9aXiPrCOMGJPPz2b3UqEVjlKyQ 0/nCvZXZzhTcKQIvQDOc3l/gtnstQTbbKdMItmesT8v1u42CbgFcpDq6Q71q1oUR S2d1+izBbtFmVRnK/WDalMa3IdBZmEI2AzmN+PP8K2IRowHQP7dm4EmwKGGNatNz qgfAZKT5rwsGFX12pccnoLWfs6s6LTM= -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:03 2026 by rpki-client