$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ede7ce7-e9e4-3a05-b523-afd726203720.roa File: 2ede7ce7-e9e4-3a05-b523-afd726203720.roa (raw, json) Hash identifier: lQ0/8gHnJyG9VTG/tyhJEk6SqtaE9vy0kGwL+bjlRik= Subject key identifier: 41:50:19:9F:F2:BD:3D:A4:76:44:F8:F4:00:AD:23:60:78:D0:C8:1D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584C550137996D881334BC5EBA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ede7ce7-e9e4-3a05-b523-afd726203720.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 7018 IP address blocks: 142.111.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:37:99:6d:88:13:34:bc:5e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=4ba973fb-2da1-417c-86f2-9ac0beab1feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7f:eb:13:d3:58:13:ad:ad:b2:1a:97:57:07: de:02:f0:e0:43:f0:97:13:f9:df:a9:a7:6e:bb:f8: e2:9a:be:c2:b1:95:52:71:3e:07:18:b1:23:03:02: d1:f7:96:b3:d3:80:29:56:5e:7d:13:9e:16:8e:fc: f7:8d:88:0c:31:93:c7:f6:db:95:bf:f6:8e:12:28: 44:63:27:e9:51:03:2a:79:9c:0c:c9:cd:8c:3a:05: 32:11:c8:ad:1e:68:6c:0b:8e:3b:bc:ee:94:a4:44: 68:6f:9a:33:d8:15:1b:55:14:06:bd:9f:0e:c0:dd: 78:83:f6:32:6c:8f:1f:1d:1d:36:17:39:72:cb:0c: 76:b2:c1:dd:ee:a9:7b:64:6c:ba:f0:b5:9c:99:36: b7:a4:2d:2b:a2:8e:07:82:31:8a:82:a8:8c:86:c0: 88:45:d1:82:46:dc:c5:90:b5:9b:d2:8c:7a:31:3a: 77:7b:02:b7:16:c8:9b:ac:85:3e:08:fe:c9:5b:da: 54:d0:07:7f:3a:f0:98:90:06:db:aa:30:d7:28:83: e0:d8:c0:11:0b:d0:bc:1d:45:b1:a0:8d:d4:10:d0: c9:cb:90:1b:58:77:1b:03:27:5f:2c:0b:ca:e2:0f: 49:0f:86:97:13:7a:d8:91:dd:53:0a:bf:db:d7:5a: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:19:9F:F2:BD:3D:A4:76:44:F8:F4:00:AD:23:60:78:D0:C8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ede7ce7-e9e4-3a05-b523-afd726203720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8c:91:50:cf:5b:98:79:25:15:25:a0:b0:c9:ce:98:63:2a: 14:e4:39:a3:5e:ad:68:9c:39:97:6f:ac:63:c8:fc:3e:1f:c9: 80:5c:f2:e4:5d:6d:a0:31:99:c2:34:63:e1:b3:d8:a4:0a:5a: f9:99:36:88:97:ce:fd:e0:9a:da:2b:c5:d4:c0:c5:4a:1f:46: 73:4f:28:2c:82:b2:e9:49:8e:63:e8:a4:e0:2a:7e:02:81:aa: 1d:95:2e:fb:2e:76:55:a8:6d:aa:06:d7:ad:0a:7a:f4:2c:48: 9c:f0:da:64:bc:ed:45:63:b8:5a:50:65:21:49:19:70:d0:1c: 11:77:53:bc:15:45:17:b6:29:ea:b4:2c:33:fa:49:10:3c:7a: f1:f8:9d:bc:c7:d3:3a:b8:ce:1e:9e:a0:f8:d5:23:86:9f:4f: b5:23:ff:ea:cc:87:98:4a:37:0b:ec:62:b2:e3:d1:44:21:8b: 56:b4:71:32:ac:ae:14:8e:04:c1:6a:22:10:74:c8:93:01:d8: a8:34:14:16:2b:c8:20:6f:df:1f:03:ff:01:3f:4b:54:1b:0c: f8:50:24:d3:c3:1f:74:f9:3d:88:a5:a3:7a:47:4a:c8:05:08: 36:43:79:76:1b:ef:fe:b9:51:92:5f:f3:4f:93:d1:2d:ed:1c: 08:fe:d2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVATeZbYgTNLxeuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk NGJhOTczZmItMmRhMS00MTdjLTg2ZjItOWFjMGJlYWIxZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n/rE9NYE62tshqXVwfeAvDgQ/CXE/nfqadu u/jimr7CsZVScT4HGLEjAwLR95az04ApVl59E54Wjvz3jYgMMZPH9tuVv/aOEihE YyfpUQMqeZwMyc2MOgUyEcitHmhsC447vO6UpERob5oz2BUbVRQGvZ8OwN14g/Yy bI8fHR02Fzlyywx2ssHd7ql7ZGy68LWcmTa3pC0roo4HgjGKgqiMhsCIRdGCRtzF kLWb0ox6MTp3ewK3FsibrIU+CP7JW9pU0Ad/OvCYkAbbqjDXKIPg2MARC9C8HUWx oI3UENDJy5AbWHcbAydfLAvK4g9JD4aXE3rYkd1TCr/b11pJuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFQGZ/yvT2kdkT49ACtI2B40MgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmVkZTdjZTctZTllNC0z YTA1LWI1MjMtYWZkNzI2MjAzNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCMkVDPW5h5JRUloLDJzphjKhTkOaNerWicOZdvrGPI/D4fyYBc8uRd baAxmcI0Y+Gz2KQKWvmZNoiXzv3gmtorxdTAxUofRnNPKCyCsulJjmPopOAqfgKB qh2VLvsudlWobaoG160KevQsSJzw2mS87UVjuFpQZSFJGXDQHBF3U7wVRRe2Keq0 LDP6SRA8evH4nbzH0zq4zh6eoPjVI4afT7Uj/+rMh5hKNwvsYrLj0UQhi1a0cTKs rhSOBMFqIhB0yJMB2Kg0FBYryCBv3x8D/wE/S1QbDPhQJNPDH3T5PYilo3pHSsgF CDZDeXYb7/65UZJf80+T0S3tHAj+0i4= -----END CERTIFICATE-----Generated at Thu Feb 26 09:27:32 2026 by rpki-client