$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/821ed592-1b40-3892-bbe2-985f05ec177f.roa File: 821ed592-1b40-3892-bbe2-985f05ec177f.roa (raw, json) Hash identifier: Pjtt2g2CXKvjL3n4ShQzpCbBuyAt5YbNcew3WuQrheQ= Subject key identifier: 78:DF:F7:C5:02:B4:2A:AC:E5:4F:74:77:4B:62:19:57:EA:16:DC:72 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F7352DE31A49DE113A2EC9B20 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/821ed592-1b40-3892-bbe2-985f05ec177f.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 40676 IP address blocks: 144.225.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:de:31:a4:9d:e1:13:a2:ec:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=2f23947c-5d7b-46ce-b2d5-6b59545e85a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:78:81:16:d2:5f:43:19:00:ac:3d:2d:11: 2b:30:70:95:3b:04:05:49:e2:b5:35:dc:86:38:ab: d0:c8:c1:93:80:db:f0:7b:ac:e0:16:14:c2:97:7a: 90:79:d6:42:95:5c:c4:17:ed:bc:76:78:63:ba:0c: 3a:a1:ab:c1:d4:e5:57:04:2c:e4:2d:ea:2c:69:03: ce:c2:73:0a:9e:3c:1d:0e:a6:a9:1a:10:58:36:b5: 1e:37:88:5d:75:ae:ee:2a:29:1a:9c:32:7a:de:e4: af:bd:ab:96:cd:50:c3:46:83:09:11:41:88:4e:a6: 71:2e:68:5d:4e:b3:6e:e5:35:d2:c5:fc:cc:f6:51: 4e:0f:3b:30:5c:ac:a8:9d:9e:e4:8c:af:e8:b8:69: 1b:94:fc:bf:fe:85:99:e7:5a:0d:41:17:d6:0f:16: 7e:0d:3c:8d:42:56:a4:c6:fe:09:b9:43:38:3c:44: de:b0:c9:d5:08:fa:9d:61:c2:d8:20:a8:e1:38:dc: 4d:de:70:16:88:93:6c:9d:e1:a1:f1:9a:3f:31:eb: 7b:6b:c5:23:c0:e6:94:b9:30:ac:e4:6f:7d:55:40: 5d:c0:36:1c:66:f2:4e:d1:91:28:13:9d:e7:1f:4d: cf:0a:dd:de:fc:1c:e4:de:1e:d5:00:57:40:3b:ab: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DF:F7:C5:02:B4:2A:AC:E5:4F:74:77:4B:62:19:57:EA:16:DC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/821ed592-1b40-3892-bbe2-985f05ec177f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fc:35:a1:84:57:b7:8a:15:4f:6c:b9:7c:68:47:46:eb:84: bf:d3:1b:23:6e:9c:a3:1c:14:c7:24:73:f7:0c:84:ea:eb:6b: ea:68:bb:b4:fd:00:a1:76:0d:f1:af:01:39:0c:1a:0e:df:36: 21:f4:1b:03:ab:72:f5:4a:9c:78:44:5b:07:9e:d9:6a:bc:43: 71:fd:77:f6:00:2d:f9:76:09:df:b8:4b:ff:57:92:28:58:07: d3:9e:93:de:4a:39:0d:65:01:98:65:88:cf:4d:cf:ce:54:67: f9:d4:06:78:0f:3e:2b:37:f7:f1:48:bf:6e:08:fb:b5:41:67: 05:93:12:bd:6e:47:0f:ec:cc:5a:dd:59:a7:c3:28:65:68:0d: 52:78:e5:55:b7:e5:29:3e:45:56:a9:20:40:e0:e4:e6:0c:77: f8:f5:c8:55:ad:2d:2d:4f:4b:7a:dd:ff:cf:13:44:b4:5f:65: 01:f9:3a:e8:90:78:23:8c:2d:0b:54:df:9c:66:52:6c:82:8f: 2f:ea:27:90:63:bb:a6:b7:e2:90:18:d5:7a:64:35:6e:7f:2f: 7b:85:07:16:55:f0:a9:db:74:7e:15:0a:b1:a1:8d:89:fc:ae: f2:e0:fb:a1:d9:6c:1a:5e:7c:42:90:35:e3:e2:a2:3f:39:4f: 92:b5:16:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUt4xpJ3hE6LsmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MmYyMzk0N2MtNWQ3Yi00NmNlLWIyZDUtNmI1OTU0NWU4NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlep4gRbSX0MZAKw9LRErMHCVOwQFSeK1NdyG OKvQyMGTgNvwe6zgFhTCl3qQedZClVzEF+28dnhjugw6oavB1OVXBCzkLeosaQPO wnMKnjwdDqapGhBYNrUeN4hdda7uKikanDJ63uSvvauWzVDDRoMJEUGITqZxLmhd TrNu5TXSxfzM9lFODzswXKyonZ7kjK/ouGkblPy//oWZ51oNQRfWDxZ+DTyNQlak xv4JuUM4PETesMnVCPqdYcLYIKjhONxN3nAWiJNsneGh8Zo/Met7a8UjwOaUuTCs 5G99VUBdwDYcZvJO0ZEoE53nH03PCt3e/Bzk3h7VAFdAO6t2CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjf98UCtCqs5U90d0tiGVfqFtxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODIxZWQ1OTItMWI0MC0z ODkyLWJiZTItOTg1ZjA1ZWMxNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA78NaGEV7eKFU9suXxoR0brhL/TGyNunKMcFMckc/cMhOrra+pou7T9 AKF2DfGvATkMGg7fNiH0GwOrcvVKnHhEWwee2Wq8Q3H9d/YALfl2Cd+4S/9XkihY B9Oek95KOQ1lAZhliM9Nz85UZ/nUBngPPis39/FIv24I+7VBZwWTEr1uRw/szFrd WafDKGVoDVJ45VW35Sk+RVapIEDg5OYMd/j1yFWtLS1PS3rd/88TRLRfZQH5OuiQ eCOMLQtU35xmUmyCjy/qJ5Bju6a34pAY1XpkNW5/L3uFBxZV8KnbdH4VCrGhjYn8 rvLg+6HZbBpefEKQNePioj85T5K1Fok= -----END CERTIFICATE-----Generated at Tue Oct 13 12:55:58 2026 by rpki-client