$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa2e4d36-805d-3be3-a318-9f02bb0eef60.roa File: aa2e4d36-805d-3be3-a318-9f02bb0eef60.roa (raw, json) Hash identifier: 0o8/ByX3W1EsO/wGwsusHpBsKX1Xjvr817ho7WCoFIg= Subject key identifier: 0E:54:51:A6:11:0E:33:7D:17:5C:62:11:82:79:AB:D5:23:E1:4B:05 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4989B11937C137F114706740 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa2e4d36-805d-3be3-a318-9f02bb0eef60.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 142.111.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:b1:19:37:c1:37:f1:14:70:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ab3a783-a7d5-41cc-a6a8-100e7d306768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:2e:cf:d0:ba:d2:96:ec:30:a6:6c:e4:10: 15:34:91:89:d2:64:51:1f:5e:42:d8:26:a4:3b:68: 6f:04:3b:67:b4:37:46:6c:c4:f6:9e:02:9d:41:47: f0:b6:b3:09:a3:f5:6e:cf:cd:8a:34:39:1c:6e:95: 25:58:a1:b2:8b:fe:11:d7:ef:68:42:19:86:44:71: d0:8c:82:5b:6e:72:c8:1a:ba:92:5a:8d:20:69:1c: 6c:0e:6a:55:01:db:c9:78:be:23:fb:62:81:5c:aa: 1e:05:e3:04:3d:58:48:db:24:a0:17:c6:f8:76:c5: 0f:6a:d4:c4:03:59:d8:19:50:d7:6c:b9:95:91:81: 90:80:2c:97:71:a6:4b:43:1c:fa:c0:5e:4d:54:4e: ae:38:0f:e1:95:1b:d8:76:4b:62:71:35:2a:a7:a3: 05:da:07:5b:f3:1c:ea:3b:7b:5d:f0:b1:62:0e:5a: a2:7c:ae:01:d9:8b:1f:86:96:37:97:be:9c:16:27: e5:62:83:03:cc:57:d7:4e:d4:15:a9:51:c7:f7:1a: d2:98:c1:e3:19:1f:86:0e:0d:ac:c2:40:b2:11:11: 35:e5:41:b4:a6:25:5a:d8:45:52:c9:da:ba:ff:6d: c3:9f:b7:25:14:33:8e:51:c7:6b:30:1b:04:c8:59: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:51:A6:11:0E:33:7D:17:5C:62:11:82:79:AB:D5:23:E1:4B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa2e4d36-805d-3be3-a318-9f02bb0eef60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3a:b4:e4:1b:88:b9:50:06:43:ea:ee:98:05:2c:80:87:cf: ae:1a:a7:fb:41:3a:a4:24:68:b2:aa:77:c1:39:e2:74:c6:e7: 47:00:b1:96:c3:70:c6:45:bb:30:50:f2:e5:24:7d:46:47:79: af:47:54:55:e2:9d:c0:56:6b:90:f8:aa:bf:e6:7f:a2:36:71: c1:df:c6:e3:fa:92:ea:bf:f5:c0:0f:59:b0:c5:1e:88:58:13: ed:2d:48:91:17:ae:74:72:ed:83:6e:59:f7:69:f4:ac:10:0f: f0:49:38:e5:dd:51:28:0f:9a:12:53:f9:f2:01:85:94:09:19: 16:fc:75:76:c3:7f:53:7c:ad:e7:03:9d:40:f8:a7:6e:0e:d5: 32:e5:9e:3e:c9:c6:03:1c:de:13:46:69:ed:6b:3c:dc:67:40: ea:be:50:39:e0:d7:a1:2d:51:7d:6e:f3:17:d9:d6:c9:84:33: 8c:5a:db:e3:2d:cc:97:f3:6e:7b:99:00:14:26:3e:88:55:6b: 4e:db:09:71:40:fc:37:88:d3:28:b5:e1:d6:ba:7b:c9:fd:5d: 80:c9:dd:d8:53:12:2a:5e:8f:4f:05:24:00:05:12:fb:c0:62: b4:d9:68:be:46:94:91:1e:32:0b:fe:f0:a5:21:78:20:39:d9: 7c:ae:3d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JibEZN8E38RRwZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmFiM2E3ODMtYTdkNS00MWNjLWE2YTgtMTAwZTdkMzA2NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ8uz9C60pbsMKZs5BAVNJGJ0mRRH15C2Cak O2hvBDtntDdGbMT2ngKdQUfwtrMJo/Vuz82KNDkcbpUlWKGyi/4R1+9oQhmGRHHQ jIJbbnLIGrqSWo0gaRxsDmpVAdvJeL4j+2KBXKoeBeMEPVhI2ySgF8b4dsUPatTE A1nYGVDXbLmVkYGQgCyXcaZLQxz6wF5NVE6uOA/hlRvYdkticTUqp6MF2gdb8xzq O3td8LFiDlqifK4B2YsfhpY3l76cFiflYoMDzFfXTtQVqVHH9xrSmMHjGR+GDg2s wkCyERE15UG0piVa2EVSydq6/23Dn7clFDOOUcdrMBsEyFlbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5UUaYRDjN9F1xiEYJ5q9Uj4UsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWEyZTRkMzYtODA1ZC0z YmUzLWEzMTgtOWYwMmJiMGVlZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI6tOQbiLlQBkPq7pgFLICHz64ap/tBOqQkaLKqd8E54nTG50cAsZbD cMZFuzBQ8uUkfUZHea9HVFXincBWa5D4qr/mf6I2ccHfxuP6kuq/9cAPWbDFHohY E+0tSJEXrnRy7YNuWfdp9KwQD/BJOOXdUSgPmhJT+fIBhZQJGRb8dXbDf1N8recD nUD4p24O1TLlnj7JxgMc3hNGae1rPNxnQOq+UDng16EtUX1u8xfZ1smEM4xa2+Mt zJfzbnuZABQmPohVa07bCXFA/DeI0yi14da6e8n9XYDJ3dhTEipej08FJAAFEvvA YrTZaL5GlJEeMgv+8KUheCA52XyuPdA= -----END CERTIFICATE-----Generated at Sun Oct 4 07:18:45 2026 by rpki-client