$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa File: 99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa (raw, json) Hash identifier: dhYC2Qo+2rc0TYkyHmzDXILiKPWKL7QgI8PoYwfdfCc= Subject key identifier: 0F:7F:01:DD:47:FC:5F:6C:10:F1:AF:03:8B:AE:BA:62:32:36:FA:30 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DF7A5DC38F12DA47E8D67CE00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 3257 IP address blocks: 142.111.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:dc:38:f1:2d:a4:7e:8d:67:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=960cd5df-ef4a-4ff2-b5e5-241874b46284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:44:ee:88:bc:8b:44:47:1b:22:87:88:e8: 4b:09:66:0f:50:92:8c:41:e2:20:8a:f1:dd:02:60: 42:0c:6d:6f:bf:d1:8d:65:a1:94:99:fd:01:47:8a: 25:ee:2a:25:80:e2:b8:97:1d:3d:15:a8:80:20:b0: c9:d5:e6:e9:f3:b1:16:7d:b9:08:a2:a5:8f:86:26: eb:fa:90:24:43:38:e2:42:1a:6b:ee:f1:74:c5:c7: 03:f4:98:5d:55:15:60:25:47:a6:4a:c4:8b:b4:21: 5d:1e:0e:26:12:d4:b5:96:1c:41:fc:41:00:85:67: a1:e2:f4:fc:7b:bf:34:bf:dc:ef:74:13:84:05:cf: 3e:74:9e:97:fd:0e:cc:78:2f:83:49:0d:8f:0c:f9: ce:0c:b4:8c:13:42:ea:40:b6:42:da:77:c5:07:89: 96:dc:55:ce:9f:f1:be:0e:b4:7a:c3:db:c4:9a:d0: d8:52:97:f0:a1:c0:6f:13:4b:7b:74:9a:12:df:e4: 9a:4e:62:2a:81:e1:15:c0:94:9e:40:b4:21:74:1f: 7c:08:e7:fa:d1:ae:a3:86:8e:da:d5:d2:f5:41:34: 86:b7:34:15:85:80:9f:9c:ed:8a:bc:30:fe:55:2a: 54:3e:b5:1d:c6:f7:ce:46:0c:e9:15:91:98:83:c7: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7F:01:DD:47:FC:5F:6C:10:F1:AF:03:8B:AE:BA:62:32:36:FA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:11:2c:f4:d4:2c:ce:89:34:9f:c8:17:82:01:dc:19:3d:02: 53:ce:14:67:c9:d0:c1:c9:e5:7b:a8:76:91:f7:5c:90:6f:18: 1b:29:f5:eb:49:08:0c:2b:35:78:de:12:54:86:42:a9:ac:6f: 30:c0:6b:c9:ed:5d:ca:5e:1f:2c:15:56:34:3f:ed:a4:ae:71: d4:95:df:db:53:46:7d:23:dc:ac:9a:5a:70:dc:be:13:23:45: 5e:f2:69:df:74:99:36:ab:2e:87:c0:90:d2:5d:74:62:d6:fc: 5e:9b:1b:63:05:bd:d1:16:5f:d9:bb:90:81:03:58:0e:5a:37: de:56:ae:7d:09:3e:87:b7:3d:9a:f4:7e:5c:8d:1d:55:e5:fe: e2:6b:42:93:a4:14:7d:11:71:28:93:69:db:07:8a:8b:c1:c0: a5:a3:ea:1b:bc:1a:ae:05:ee:24:4d:e7:6b:9b:0f:37:1a:be: 8b:aa:4e:b7:cd:08:a1:c4:24:16:a5:5b:ce:31:d6:4e:6a:fa: a4:36:22:a3:1e:02:7b:af:85:5a:2f:86:7b:1d:ee:65:53:50: f2:bd:d6:0c:03:41:e9:77:70:68:4d:4c:23:75:20:c2:1e:43: 03:ee:62:a1:ff:23:30:d2:5f:83:73:ce:2e:03:8b:3b:28:f3: 8e:95:e7:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pdw48S2kfo1nzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk OTYwY2Q1ZGYtZWY0YS00ZmYyLWI1ZTUtMjQxODc0YjQ2Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm5E7oi8i0RHGyKHiOhLCWYPUJKMQeIgivHd AmBCDG1vv9GNZaGUmf0BR4ol7iolgOK4lx09FaiAILDJ1ebp87EWfbkIoqWPhibr +pAkQzjiQhpr7vF0xccD9JhdVRVgJUemSsSLtCFdHg4mEtS1lhxB/EEAhWeh4vT8 e780v9zvdBOEBc8+dJ6X/Q7MeC+DSQ2PDPnODLSME0LqQLZC2nfFB4mW3FXOn/G+ DrR6w9vEmtDYUpfwocBvE0t7dJoS3+SaTmIqgeEVwJSeQLQhdB98COf60a6jho7a 1dL1QTSGtzQVhYCfnO2KvDD+VSpUPrUdxvfORgzpFZGYg8dsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9/Ad1H/F9sEPGvA4uuumIyNvowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTlmM2NmZWEtOWNiNi0z NWI2LTgyNmUtNGRmYTE2YjIxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoRLPTULM6JNJ/IF4IB3Bk9AlPOFGfJ0MHJ5XuodpH3XJBvGBsp9etJ CAwrNXjeElSGQqmsbzDAa8ntXcpeHywVVjQ/7aSucdSV39tTRn0j3KyaWnDcvhMj RV7yad90mTarLofAkNJddGLW/F6bG2MFvdEWX9m7kIEDWA5aN95Wrn0JPoe3PZr0 flyNHVXl/uJrQpOkFH0RcSiTadsHiovBwKWj6hu8Gq4F7iRN52ubDzcavouqTrfN CKHEJBalW84x1k5q+qQ2IqMeAnuvhVovhnsd7mVTUPK91gwDQel3cGhNTCN1IMIe QwPuYqH/IzDSX4Nzzi4Dizso846V54M= -----END CERTIFICATE-----Generated at Thu May 28 17:14:28 2026 by rpki-client