$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28323f1f-3866-305a-9aa7-c3f75d4f6cd2.roa File: 28323f1f-3866-305a-9aa7-c3f75d4f6cd2.roa (raw, json) Hash identifier: z4loOkwTtspNh+Qa2Lx8MsaINdbBNBXWnqD1boAMqPo= Subject key identifier: F2:D8:73:3A:9C:C9:49:60:09:A0:F3:2D:06:91:C5:FE:AD:12:17:EA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F77835AED23DF72029EA98900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28323f1f-3866-305a-9aa7-c3f75d4f6cd2.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 47690 IP address blocks: 142.111.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5a:ed:23:df:72:02:9e:a9:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=21a88669-149d-4c04-9166-68ff01bbbf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:b5:85:c2:5e:18:48:62:d5:22:0e:bf:50: 3e:7d:ff:e1:65:46:d5:a7:2d:7e:1b:1b:28:fd:3b: 21:fe:8a:79:ac:cc:fd:4f:a9:1b:99:7e:1c:20:fa: 38:b7:d8:5e:d3:4c:5f:84:d0:84:1f:a0:1d:6f:a5: 45:2c:30:b3:9f:e0:65:a4:02:72:02:4c:47:20:6f: bd:11:99:a0:b7:b2:8d:a1:9e:05:8e:bb:24:82:66: 82:f7:f0:12:01:65:54:d7:62:7f:d5:7e:b9:79:6a: a0:19:43:d2:24:47:46:a4:dd:94:d8:c8:13:90:24: 6f:3b:00:43:5e:19:2e:30:40:a6:85:71:12:5c:22: 84:66:ff:ba:a1:f6:b6:33:b7:70:c4:02:db:4f:36: 10:39:ec:08:fe:94:e8:09:f8:88:4e:83:02:8c:b7: e2:c6:87:d7:81:3b:8a:70:01:00:f9:1c:a1:e5:25: fb:30:12:2e:7c:13:95:3a:b2:92:15:5c:77:4d:98: a7:54:ec:fb:9c:ac:73:b2:fc:2e:d8:4f:6e:b2:6f: f4:5f:59:8e:23:48:49:77:a9:7d:08:3f:40:2d:58: 5e:aa:37:58:c5:60:87:a6:ca:13:fa:e7:86:56:7d: 8a:31:fd:7e:94:8b:1b:8f:3d:cd:93:19:ab:43:c3: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D8:73:3A:9C:C9:49:60:09:A0:F3:2D:06:91:C5:FE:AD:12:17:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28323f1f-3866-305a-9aa7-c3f75d4f6cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:06:f5:43:a2:37:ef:12:8b:ea:72:86:bd:81:58:8e:e0:23: 35:b5:5c:ea:7b:3a:f9:40:12:92:0b:43:8b:36:27:e7:00:75: f1:cc:cb:2a:ae:22:b1:75:93:8c:c6:62:95:8d:00:a2:09:1a: 3c:f7:ce:f2:f0:3c:43:da:2a:b5:db:44:7f:c6:b0:64:de:0f: e8:90:26:bb:f4:1a:ab:5d:58:5d:70:cf:48:0b:af:1d:2c:0c: 5e:e6:76:07:80:33:c7:d6:df:67:8f:b0:d2:76:9c:eb:6e:0e: 87:4f:43:ba:48:a1:b0:c4:6f:c7:9a:eb:be:9c:99:a2:5c:98: 1b:28:35:cd:2c:27:65:f2:56:b4:19:37:a4:44:89:b9:d1:65: 5d:63:b3:14:07:ea:a8:72:4a:5b:5b:bf:50:0b:28:a6:af:60: 2c:27:ed:38:74:ac:9c:6b:a4:e1:52:1c:e2:45:db:9a:50:bd: c1:67:77:43:d9:df:64:f3:44:dd:1f:31:20:05:73:39:4f:4c: e5:70:27:84:72:b4:0b:25:40:f9:11:0e:51:3f:4d:16:3a:48: 14:11:a4:a2:76:b9:c8:ea:86:a6:e6:3f:5d:a7:f4:e2:e0:1e: 59:c7:8c:de:08:9f:2b:2f:1f:4b:5b:9c:14:b4:31:4e:60:2c: 4a:69:cb:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1rtI99yAp6piQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjFhODg2NjktMTQ5ZC00YzA0LTkxNjYtNjhmZjAxYmJiZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+K1hcJeGEhi1SIOv1A+ff/hZUbVpy1+Gxso /Tsh/op5rMz9T6kbmX4cIPo4t9he00xfhNCEH6Adb6VFLDCzn+BlpAJyAkxHIG+9 EZmgt7KNoZ4FjrskgmaC9/ASAWVU12J/1X65eWqgGUPSJEdGpN2U2MgTkCRvOwBD XhkuMECmhXESXCKEZv+6ofa2M7dwxALbTzYQOewI/pToCfiIToMCjLfixofXgTuK cAEA+Ryh5SX7MBIufBOVOrKSFVx3TZinVOz7nKxzsvwu2E9usm/0X1mOI0hJd6l9 CD9ALVheqjdYxWCHpsoT+ueGVn2KMf1+lIsbjz3NkxmrQ8NqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLYczqcyUlgCaDzLQaRxf6tEhfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjgzMjNmMWYtMzg2Ni0z MDVhLTlhYTctYzNmNzVkNGY2Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4G9UOiN+8Si+pyhr2BWI7gIzW1XOp7OvlAEpILQ4s2J+cAdfHMyyqu IrF1k4zGYpWNAKIJGjz3zvLwPEPaKrXbRH/GsGTeD+iQJrv0GqtdWF1wz0gLrx0s DF7mdgeAM8fW32ePsNJ2nOtuDodPQ7pIobDEb8ea676cmaJcmBsoNc0sJ2XyVrQZ N6REibnRZV1jsxQH6qhySltbv1ALKKavYCwn7Th0rJxrpOFSHOJF25pQvcFnd0PZ 32TzRN0fMSAFczlPTOVwJ4RytAslQPkRDlE/TRY6SBQRpKJ2ucjqhqbmP12n9OLg HlnHjN4InysvH0tbnBS0MU5gLEppy+s= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:05 2026 by rpki-client