$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d5c1f71-e17b-3acf-8dd7-21520f72f859.roa File: 6d5c1f71-e17b-3acf-8dd7-21520f72f859.roa (raw, json) Hash identifier: lrvS1y2vUnQFPJXbUshdoVj30MArk0aHjDwgulwdySM= Subject key identifier: E2:87:9B:E2:05:56:7F:81:25:28:71:B2:B8:56:4E:6C:35:FD:9A:C4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4972C4AFDF68EA76750D7900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d5c1f71-e17b-3acf-8dd7-21520f72f859.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 210356 IP address blocks: 144.225.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c4:af:df:68:ea:76:75:0d:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5a9a42cd-2ae1-44c4-8754-cd22ce0a9f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:7f:77:cd:13:51:6f:4e:ec:32:09:05:9d: 93:f8:08:f0:81:9e:d0:19:75:bf:61:91:4e:96:71: e4:86:82:d0:bd:db:9b:48:19:1d:83:b3:04:33:0b: d5:ca:cd:c6:8c:0f:1e:e7:4f:dd:2b:ac:88:b9:26: 30:a2:f7:ae:82:d7:66:69:b4:e4:5d:f2:c4:ae:b0: 99:30:c7:6e:a2:d7:de:58:f5:5b:65:2e:a7:b3:ec: 07:f9:ed:79:0f:31:88:f6:f1:fd:a2:b2:15:08:f1: c0:78:3b:43:2e:0f:7a:41:3b:42:3f:df:93:82:5f: c8:64:ef:c7:a1:86:e7:8a:78:d6:b3:d8:75:26:fd: 2a:94:01:c2:a5:2d:86:fb:a3:04:7b:80:3e:87:87: 71:17:26:50:7d:3b:aa:99:6b:9f:b4:84:a6:ac:99: f7:e7:11:6b:5f:7b:a7:1f:62:c7:72:6e:1c:b2:9c: c8:71:11:08:53:52:3d:da:17:dc:ed:a5:5a:fc:28: ff:c3:59:94:cc:4d:c8:a9:08:63:23:dd:5e:b1:1e: 3b:f1:00:43:e8:a6:56:5b:d4:17:56:0c:be:b5:aa: 3e:e5:e0:21:4a:37:d7:03:e0:28:c0:78:60:d6:00: 22:9a:73:5f:7f:c7:5f:d2:02:54:2c:87:54:bf:7a: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:87:9B:E2:05:56:7F:81:25:28:71:B2:B8:56:4E:6C:35:FD:9A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d5c1f71-e17b-3acf-8dd7-21520f72f859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e1:d5:0a:18:40:da:2b:b8:68:c9:e1:6d:7e:7d:42:60:d6: 9a:7c:97:ce:4b:e4:b5:a9:e2:93:60:93:5a:85:4e:5c:69:83: 4d:80:7f:d3:52:a9:8b:ac:6f:af:7e:4c:06:aa:53:8b:0f:c4: dc:0c:35:1d:dc:28:3d:05:d2:c8:8f:91:8d:aa:5d:82:f6:87: 9f:b1:81:6d:b6:92:de:19:6d:a1:42:af:c8:24:4a:41:60:88: 23:c6:98:c5:7b:aa:2e:f6:01:de:b3:e3:78:d4:54:50:d4:c8: d4:c1:c9:9f:9b:7a:4d:dc:8c:a8:84:9f:9a:f2:a8:73:b9:f8: fe:21:6d:d0:15:b5:90:e5:f0:f8:55:80:d8:58:d7:a5:28:4c: ad:bf:61:a4:41:64:29:93:37:34:86:c3:51:97:46:01:e8:4f: e5:95:0c:8a:23:de:ba:ed:fa:5f:cc:17:7e:2f:f1:41:6f:3c: 8f:1e:80:dd:44:5e:a0:87:92:bc:76:7c:00:49:38:b7:63:74: ac:b7:26:79:bb:5d:46:25:be:32:97:3a:0e:df:e3:9e:f0:81: b7:5e:6d:87:97:60:07:59:ef:6b:3d:f5:69:49:bd:61:9b:30: f6:64:1f:7e:03:e8:49:42:2f:68:ed:38:90:95:2c:2c:c1:dc: ac:95:52:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsSv32jqdnUNeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWE5YTQyY2QtMmFlMS00NGM0LTg3NTQtY2QyMmNlMGE5ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTV/d80TUW9O7DIJBZ2T+AjwgZ7QGXW/YZFO lnHkhoLQvdubSBkdg7MEMwvVys3GjA8e50/dK6yIuSYwoveugtdmabTkXfLErrCZ MMduotfeWPVbZS6ns+wH+e15DzGI9vH9orIVCPHAeDtDLg96QTtCP9+Tgl/IZO/H oYbninjWs9h1Jv0qlAHCpS2G+6MEe4A+h4dxFyZQfTuqmWuftISmrJn35xFrX3un H2LHcm4cspzIcREIU1I92hfc7aVa/Cj/w1mUzE3IqQhjI91esR478QBD6KZWW9QX Vgy+tao+5eAhSjfXA+AowHhg1gAimnNff8df0gJULIdUv3ol0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKHm+IFVn+BJShxsrhWTmw1/ZrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmQ1YzFmNzEtZTE3Yi0z YWNmLThkZDctMjE1MjBmNzJmODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/h1QoYQNoruGjJ4W1+fUJg1pp8l85L5LWp4pNgk1qFTlxpg02Af9NS qYusb69+TAaqU4sPxNwMNR3cKD0F0siPkY2qXYL2h5+xgW22kt4ZbaFCr8gkSkFg iCPGmMV7qi72Ad6z43jUVFDUyNTByZ+bek3cjKiEn5ryqHO5+P4hbdAVtZDl8PhV gNhY16UoTK2/YaRBZCmTNzSGw1GXRgHoT+WVDIoj3rrt+l/MF34v8UFvPI8egN1E XqCHkrx2fABJOLdjdKy3Jnm7XUYlvjKXOg7f457wgbdebYeXYAdZ72s99WlJvWGb MPZkH34D6ElCL2jtOJCVLCzB3KyVUqo= -----END CERTIFICATE-----Generated at Tue Oct 13 12:53:22 2026 by rpki-client