$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa File: a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa (raw, json) Hash identifier: c3RERJDrxQJpYs+5W6gkzGk4Ipiz/KGu0g71yUqI270= Subject key identifier: F2:08:58:27:4E:FB:0F:CD:F4:88:5B:F6:68:EB:50:33:DC:6F:38:F2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EB8472DCB95CC4D53176C0CC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 401152 IP address blocks: 142.111.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:2d:cb:95:cc:4d:53:17:6c:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=6342ec9c-31bb-46c5-993b-e54e0696af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:52:df:93:f1:9f:31:1b:29:66:50:ef:d7: 07:68:77:44:ba:89:23:7f:b2:5e:d2:dd:5c:d0:41: 0f:31:c2:af:d2:7c:93:f5:45:a3:da:a4:38:cc:50: f6:cb:80:aa:81:3c:48:8e:cc:e0:ce:ed:1f:6d:eb: 2c:da:f4:55:20:a7:4e:be:77:4d:ba:31:86:36:9c: ea:2f:cb:ee:b3:92:90:c3:0c:ec:4d:c0:2e:03:7d: 5d:ae:ed:1b:ed:f9:5d:0b:0a:c9:1b:e5:8a:ba:4b: 89:1c:4b:6c:0c:87:c5:82:a5:62:e5:61:ca:11:57: ad:19:e3:ce:e5:ca:ef:05:c6:04:63:10:8a:7a:4b: ee:8f:e4:bb:f2:ca:48:fa:eb:de:24:07:42:88:bd: 6c:51:6a:10:52:56:c8:86:8c:d7:a5:55:35:c7:bd: 20:68:41:95:e3:96:99:73:20:6a:2e:0e:bb:b5:af: 50:e4:c4:d4:d6:e9:5e:cb:a2:46:54:37:f5:3a:6f: fd:54:08:f4:c6:b1:4a:02:2e:1c:9f:53:06:32:b1: 6e:8e:1b:6a:0c:8f:38:28:81:f7:b3:d1:b4:b5:11: 35:79:60:5d:31:b8:89:a5:c2:66:f5:0e:55:a8:7f: 97:6b:a3:32:b2:00:a5:37:d0:c6:1d:17:c3:d7:4a: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:08:58:27:4E:FB:0F:CD:F4:88:5B:F6:68:EB:50:33:DC:6F:38:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:70:54:4a:4b:6a:6d:d4:07:99:ac:ea:1b:88:c8:45:e0:1c: b1:17:ac:9a:5d:d7:7c:ad:d1:f7:d6:05:74:e1:93:ac:bc:c6: 2c:83:8a:ae:79:19:85:9a:45:5a:d9:dc:11:db:64:8f:91:42: 32:8c:d7:57:52:4f:c0:ef:d2:7d:2c:f3:3a:d3:ee:d0:70:34: fc:ad:04:b6:e8:95:4a:9f:b6:b1:af:48:75:2e:a1:58:46:3e: 6e:44:f2:d0:25:8f:1b:ff:64:81:32:41:0e:96:90:1a:cf:e2: 32:26:32:71:0d:71:11:09:a8:b2:98:f8:7d:be:b5:69:9c:24: a4:b6:9b:81:ad:8e:34:4d:b9:1c:36:77:6c:a7:63:d1:30:3c: f2:63:5b:f0:45:4f:04:fe:44:94:5e:5e:7c:cf:3b:58:02:be: a5:70:27:c4:84:12:cc:33:a5:7e:13:38:24:8c:27:6e:42:9d: 3f:f2:73:c4:d5:c7:ae:34:62:d7:dc:b7:78:51:ab:4f:c8:bc: 64:e4:01:14:68:77:f2:01:13:ec:df:48:bf:46:a5:33:c7:69: e2:ad:85:93:00:98:83:ea:36:7e:8d:e1:f2:f9:35:79:13:17: d6:6a:8e:9e:d3:0f:bd:d6:4d:20:e7:56:67:59:e4:0c:5b:7a: f3:e6:e6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Ry3LlcxNUxdsDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk NjM0MmVjOWMtMzFiYi00NmM1LTk5M2ItZTU0ZTA2OTZhZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNpS35PxnzEbKWZQ79cHaHdEuokjf7Je0t1c 0EEPMcKv0nyT9UWj2qQ4zFD2y4CqgTxIjszgzu0fbess2vRVIKdOvndNujGGNpzq L8vus5KQwwzsTcAuA31dru0b7fldCwrJG+WKukuJHEtsDIfFgqVi5WHKEVetGePO 5crvBcYEYxCKekvuj+S78spI+uveJAdCiL1sUWoQUlbIhozXpVU1x70gaEGV45aZ cyBqLg67ta9Q5MTU1uley6JGVDf1Om/9VAj0xrFKAi4cn1MGMrFujhtqDI84KIH3 s9G0tRE1eWBdMbiJpcJm9Q5VqH+Xa6MysgClN9DGHRfD10odhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIIWCdO+w/N9Ihb9mjrUDPcbzjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTQzNmEzZmEtOTZiNy0z ZWFiLTlmMWEtN2EyNTZlZDA3YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1wVEpLam3UB5ms6huIyEXgHLEXrJpd13yt0ffWBXThk6y8xiyDiq55 GYWaRVrZ3BHbZI+RQjKM11dST8Dv0n0s8zrT7tBwNPytBLbolUqftrGvSHUuoVhG Pm5E8tAljxv/ZIEyQQ6WkBrP4jImMnENcREJqLKY+H2+tWmcJKS2m4GtjjRNuRw2 d2ynY9EwPPJjW/BFTwT+RJReXnzPO1gCvqVwJ8SEEswzpX4TOCSMJ25CnT/yc8TV x640Ytfct3hRq0/IvGTkARRod/IBE+zfSL9GpTPHaeKthZMAmIPqNn6N4fL5NXkT F9Zqjp7TD73WTSDnVmdZ5AxbevPm5ps= -----END CERTIFICATE-----Generated at Wed Aug 19 09:26:34 2026 by rpki-client