$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa File: 604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa (raw, json) Hash identifier: b3cXjuULhSIs8btigddwl4LRjPuUNl5GlwFhxYAem1o= Subject key identifier: 95:2F:A8:38:5B:1A:9F:48:91:B0:86:3A:D6:9C:5C:D9:52:F9:0A:0B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E779A2491F39194C3AC4857C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 3561 IP address blocks: 142.111.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:24:91:f3:91:94:c3:ac:48:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=0cbb171c-5e04-4604-969d-56aaa9a07bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:97:c7:22:51:32:38:48:e5:16:e7:7c:59: d9:d9:d1:34:8d:f0:37:77:4c:61:4f:92:13:66:b6: 5b:95:fb:81:f1:1c:9d:ec:5f:83:83:9b:79:c9:2c: 62:63:0e:cc:a2:e6:6d:47:df:97:20:0f:e9:70:9a: 9f:47:94:24:81:78:72:f8:2f:ff:66:0d:95:ce:1f: 98:af:09:13:7e:33:f8:b2:24:c3:bc:ea:fc:c7:37: d9:cc:69:c2:e8:96:bb:41:aa:5d:40:49:6d:c8:be: 44:9b:90:bb:2b:6d:0f:31:d3:3b:48:67:a3:60:35: 14:83:fb:8d:e3:44:81:92:d9:2e:4e:4e:50:66:04: 58:28:5c:59:87:2c:44:ab:a1:9f:00:6d:5b:e7:62: 6a:3b:fa:11:94:14:64:f8:15:b9:66:12:a7:3f:a1: c0:cc:69:08:3e:14:35:87:ef:b5:4a:5c:01:eb:a9: 2f:ed:0e:db:ca:17:30:04:13:3d:2d:53:29:1c:00: ec:1c:3f:99:1a:04:03:43:8b:bf:88:fd:c8:10:6d: c0:d9:9b:be:79:f8:44:c5:51:8c:32:bf:08:0b:c0: 31:da:b1:ec:4c:72:2d:7d:2c:ea:a1:9e:4d:87:d3: 60:8d:ca:85:d0:69:2d:f0:44:3a:83:ec:a5:8b:80: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2F:A8:38:5B:1A:9F:48:91:B0:86:3A:D6:9C:5C:D9:52:F9:0A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/604a31b7-ddb7-304b-b827-3427ed0cf8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:9a:f8:1d:22:6a:d3:86:61:38:56:28:85:0f:fa:a2:90:fc: 3e:ee:32:65:b9:bf:02:a3:f6:77:9e:55:30:44:06:42:d4:f3: 19:b1:fa:e9:c8:d9:8e:64:65:16:48:3e:e6:61:96:21:0a:bb: e5:99:b4:64:19:ba:71:23:59:96:80:1e:76:9a:21:22:23:23: ac:91:24:f6:4d:e5:79:44:ef:a3:cb:60:6d:7b:fe:7c:a2:47: 33:85:8e:5b:7b:f5:6b:55:97:54:8e:04:bf:0e:04:9e:90:45: 95:35:1a:c5:2d:19:cc:38:8a:04:4c:a0:8d:90:57:78:21:42: 53:f4:0e:9e:a6:2a:df:00:3f:b6:b2:f3:85:60:a2:d3:05:45: a1:ba:e7:6f:fd:20:d4:66:78:f8:56:fa:49:de:d7:51:91:a2: b8:38:ba:09:4a:12:7a:81:7a:57:52:93:6e:fb:44:c1:57:cf: 56:11:59:4b:d4:b0:7b:fe:6d:f3:f1:69:b6:79:c5:2f:31:17: 0a:0b:f0:89:72:d8:01:e9:e1:b4:c0:5a:b5:2a:38:e9:86:57: 67:75:a6:8b:22:99:c6:e1:1b:e1:1c:c3:b4:5e:45:cd:a3:bc: 50:2e:9a:a7:ae:e5:5e:51:7a:fc:be:4d:46:d8:65:21:8b:5e: 8b:e0:a7:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53miSR85GUw6xIV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MGNiYjE3MWMtNWUwNC00NjA0LTk2OWQtNTZhYWE5YTA3YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgWXxyJRMjhI5RbnfFnZ2dE0jfA3d0xhT5IT ZrZblfuB8Ryd7F+Dg5t5ySxiYw7MouZtR9+XIA/pcJqfR5QkgXhy+C//Zg2Vzh+Y rwkTfjP4siTDvOr8xzfZzGnC6Ja7QapdQEltyL5Em5C7K20PMdM7SGejYDUUg/uN 40SBktkuTk5QZgRYKFxZhyxEq6GfAG1b52JqO/oRlBRk+BW5ZhKnP6HAzGkIPhQ1 h++1SlwB66kv7Q7byhcwBBM9LVMpHADsHD+ZGgQDQ4u/iP3IEG3A2Zu+efhExVGM Mr8IC8Ax2rHsTHItfSzqoZ5Nh9NgjcqF0Gkt8EQ6g+yli4CnuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUvqDhbGp9IkbCGOtacXNlS+QoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjA0YTMxYjctZGRiNy0z MDRiLWI4MjctMzQyN2VkMGNmOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWa+B0iatOGYThWKIUP+qKQ/D7uMmW5vwKj9neeVTBEBkLU8xmx+unI 2Y5kZRZIPuZhliEKu+WZtGQZunEjWZaAHnaaISIjI6yRJPZN5XlE76PLYG17/nyi RzOFjlt79WtVl1SOBL8OBJ6QRZU1GsUtGcw4igRMoI2QV3ghQlP0Dp6mKt8AP7ay 84VgotMFRaG652/9INRmePhW+kne11GRorg4uglKEnqBeldSk277RMFXz1YRWUvU sHv+bfPxabZ5xS8xFwoL8Ily2AHp4bTAWrUqOOmGV2d1posimcbhG+Ecw7ReRc2j vFAumqeu5V5Revy+TUbYZSGLXovgpyU= -----END CERTIFICATE-----Generated at Mon Jul 13 11:40:54 2026 by rpki-client