$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36449c2b-ab92-31cc-8b8d-a5962f43e36a.roa File: 36449c2b-ab92-31cc-8b8d-a5962f43e36a.roa (raw, json) Hash identifier: aEjt3djDh5PZScd+N+OsRipUyqXlOU7H4V12ve29ljY= Subject key identifier: AE:F4:CC:65:63:6B:5F:EE:16:C1:29:E2:8C:44:35:5A:AC:43:98:72 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F68281C87EF5EF8A15E81FB40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36449c2b-ab92-31cc-8b8d-a5962f43e36a.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 11798 IP address blocks: 142.111.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:1c:87:ef:5e:f8:a1:5e:81:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=032e3c73-cbb8-402c-91ff-7a202758fe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:ee:ac:3c:7e:87:66:27:25:d3:44:22:ba: 22:c9:cb:33:37:99:eb:2c:db:e6:d8:07:8b:9f:2c: 21:25:6f:d3:92:8b:75:2c:c0:e4:75:bf:ed:ba:2c: 01:c8:54:82:86:b8:51:f4:4f:0f:d1:db:36:f3:23: 5a:fa:05:71:5d:71:38:f7:11:48:80:e6:00:5b:72: 68:be:8b:7d:98:a6:fe:27:90:c9:49:72:a0:86:6b: 67:87:9f:f2:62:f9:e8:85:3b:54:c1:d1:25:a7:41: 8c:11:91:2d:d8:e3:bc:df:ee:5f:7e:b9:03:3a:02: 3f:75:51:a2:5c:cf:8b:35:37:6f:b7:f7:50:cc:6b: 97:49:40:cb:25:6b:fb:59:4d:e5:55:89:a6:d9:fd: bd:a0:33:98:02:24:7f:92:27:60:46:d1:81:b6:1d: 7b:c0:14:de:0d:64:04:1f:2c:b6:09:0b:3c:2b:7e: b9:eb:42:0d:33:e1:52:d9:72:d8:db:b3:90:f7:59: 1f:a8:b4:68:78:55:7f:30:0d:a8:46:59:a0:67:33: 95:c8:8c:3d:8e:2c:55:04:51:c0:8b:5c:aa:a4:ee: 6b:83:d6:50:96:00:5e:36:cc:e8:4f:64:16:de:32: 4e:f0:7b:7b:d7:97:3e:9e:a1:55:43:6c:90:fb:b4: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F4:CC:65:63:6B:5F:EE:16:C1:29:E2:8C:44:35:5A:AC:43:98:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36449c2b-ab92-31cc-8b8d-a5962f43e36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:40:4c:a0:c5:a0:c2:8c:9b:c6:2f:29:77:de:92:fe:13:6b: b2:48:21:03:ca:ae:57:69:ac:9d:13:86:e7:d6:eb:b0:14:88: d3:89:38:20:41:fa:3d:1d:57:ab:a9:48:7c:2f:3e:28:ee:3b: ff:73:a3:24:1a:f1:d5:b8:9f:2c:48:10:62:66:87:a4:b4:89: e0:3b:bb:34:54:4b:54:95:79:0d:16:fe:83:2f:43:74:94:33: d7:a1:ef:76:bd:c4:e5:dd:33:5c:61:a2:f0:d0:73:9c:37:ce: 46:cc:9e:10:db:45:b5:2f:1a:49:e1:28:4c:00:98:d2:15:1a: 01:86:08:33:86:f3:c5:cc:67:19:e7:9e:b3:c6:ab:3c:2f:ff: 7b:79:ff:4c:b5:a1:ef:07:c7:ee:93:ae:47:dd:8b:fc:e4:93: 7a:16:fb:4c:0f:ec:91:b1:2c:68:58:f9:c5:4d:f6:a1:9d:4f: d8:04:a6:6f:1f:7e:b1:0d:9a:2d:0c:a6:96:91:71:3d:e2:a1: 9f:7e:54:d3:37:a3:b9:50:65:42:90:9e:76:2e:c6:87:f6:dd: c5:25:b9:cb:85:b1:35:c5:12:c1:fe:1b:15:6b:76:dd:3a:07: 82:74:f2:1c:b1:25:fe:5e:90:2e:51:a7:ef:f1:9d:fb:af:d8: d6:31:28:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKByH7174oV6B+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk MDMyZTNjNzMtY2JiOC00MDJjLTkxZmYtN2EyMDI3NThmZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDLurDx+h2YnJdNEIroiycszN5nrLNvm2AeL nywhJW/Tkot1LMDkdb/tuiwByFSChrhR9E8P0ds28yNa+gVxXXE49xFIgOYAW3Jo vot9mKb+J5DJSXKghmtnh5/yYvnohTtUwdElp0GMEZEt2OO83+5ffrkDOgI/dVGi XM+LNTdvt/dQzGuXSUDLJWv7WU3lVYmm2f29oDOYAiR/kidgRtGBth17wBTeDWQE Hyy2CQs8K36560INM+FS2XLY27OQ91kfqLRoeFV/MA2oRlmgZzOVyIw9jixVBFHA i1yqpO5rg9ZQlgBeNszoT2QW3jJO8Ht715c+nqFVQ2yQ+7R8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK70zGVja1/uFsEp4oxENVqsQ5hyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzY0NDljMmItYWI5Mi0z MWNjLThiOGQtYTU5NjJmNDNlMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlATKDFoMKMm8YvKXfekv4Ta7JIIQPKrldprJ0ThufW67AUiNOJOCBB +j0dV6upSHwvPijuO/9zoyQa8dW4nyxIEGJmh6S0ieA7uzRUS1SVeQ0W/oMvQ3SU M9eh73a9xOXdM1xhovDQc5w3zkbMnhDbRbUvGknhKEwAmNIVGgGGCDOG88XMZxnn nrPGqzwv/3t5/0y1oe8Hx+6Trkfdi/zkk3oW+0wP7JGxLGhY+cVN9qGdT9gEpm8f frENmi0MppaRcT3ioZ9+VNM3o7lQZUKQnnYuxof23cUlucuFsTXFEsH+GxVrdt06 B4J08hyxJf5ekC5Rp+/xnfuv2NYxKBw= -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:49 2026 by rpki-client