$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d07008ac-788f-3cef-8448-15c52fe6f16a.roa File: d07008ac-788f-3cef-8448-15c52fe6f16a.roa (raw, json) Hash identifier: KGm8WPcuiHutrHMtQgNvRky70RxrTK6v3SIB7CjpwkI= Subject key identifier: BC:2A:2B:F4:8F:99:17:16:D5:B4:00:CB:36:68:89:6F:03:53:D1:62 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CAE5E506A8B23395B8A52AEA0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d07008ac-788f-3cef-8448-15c52fe6f16a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 5511 IP address blocks: 142.111.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:50:6a:8b:23:39:5b:8a:52:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=57028b38-0276-442a-bc3f-53fd72ceadf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8f:44:40:6c:af:21:93:4a:59:93:67:7d:46: 94:d6:2a:cc:df:06:cb:2c:36:8a:74:c9:48:8b:29: 04:1b:0c:99:eb:f6:f1:27:2a:3b:7a:48:93:48:25: e3:c3:e1:dd:30:08:12:0a:a3:de:36:0f:2e:df:4d: 53:8f:a4:c7:3b:43:2d:ee:0b:78:86:63:27:95:d6: a5:e3:90:1c:e0:87:fe:ac:87:9b:b9:f5:78:f2:be: de:2c:84:35:cb:0a:da:79:62:8f:e8:70:58:ec:7f: 68:71:43:27:c9:89:af:45:cb:6d:49:5c:e7:dc:7b: 0d:61:ac:bb:d2:02:d6:ad:1f:1e:8b:da:a9:47:d4: 95:f6:f4:39:0c:f0:18:18:a0:8f:13:86:58:37:83: b6:c9:f2:6f:f7:5e:58:12:d7:a3:74:80:94:0d:0b: 65:c1:1d:50:86:e5:6f:2c:f5:d3:60:41:e7:c1:5b: 87:25:c8:52:0a:0a:1f:f1:61:5e:bc:84:e1:d1:61: 0b:4f:e9:83:3f:fa:1e:31:b2:26:22:01:e2:dc:9d: ac:cb:5d:b1:5e:5e:33:fa:63:a9:df:29:57:ed:34: d7:48:ad:45:14:dd:91:84:b0:3e:45:17:d7:c7:cb: 5e:31:cb:9d:52:1b:ca:22:14:28:69:9d:cd:62:ee: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2A:2B:F4:8F:99:17:16:D5:B4:00:CB:36:68:89:6F:03:53:D1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d07008ac-788f-3cef-8448-15c52fe6f16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:09:2d:9d:40:09:2c:ac:e4:d0:7a:5f:9f:11:38:82:64:f6: d1:1e:97:71:1a:82:a2:a5:13:44:33:e0:59:ee:1c:f4:87:97: 5d:ef:d1:04:97:07:d3:65:97:e5:45:79:41:a1:18:1f:81:ee: b6:a0:f7:b0:33:65:cb:6c:2c:1c:83:e1:a3:89:fa:ee:e6:17: b3:28:9a:03:04:1a:18:3a:31:4b:4a:9b:94:be:98:70:d5:25: 9a:d7:f7:1c:e4:6c:eb:dc:c7:93:0d:28:2d:13:97:0e:c3:2f: 12:c1:b3:67:8c:38:fc:6b:18:b9:db:7b:a7:13:41:05:e4:93: 26:2e:fc:d3:dc:ff:c3:91:82:ef:4e:05:ec:d1:64:e5:9e:21: 70:2e:7b:29:6d:de:d3:c8:1f:e4:c0:e7:dd:55:30:71:a0:da: c9:7a:41:31:2d:30:7b:53:96:e3:b0:77:2a:63:6d:3e:40:42: cc:39:fc:77:84:a3:f0:a3:76:ff:2d:79:75:df:83:fd:04:f3: ec:0a:20:25:19:c8:4b:b8:7f:a2:c1:d5:d2:f7:59:2a:cc:92: 8a:f0:6c:95:e4:40:56:02:7c:4d:ff:53:3b:fe:66:ad:3c:de: 11:e1:8d:71:34:af:0a:87:d4:32:11:5f:dc:61:e1:61:42:bb: 77:db:b4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlBqiyM5W4pSrqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTcwMjhiMzgtMDI3Ni00NDJhLWJjM2YtNTNmZDcyY2VhZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI9EQGyvIZNKWZNnfUaU1irM3wbLLDaKdMlI iykEGwyZ6/bxJyo7ekiTSCXjw+HdMAgSCqPeNg8u301Tj6THO0Mt7gt4hmMnldal 45Ac4If+rIebufV48r7eLIQ1ywraeWKP6HBY7H9ocUMnyYmvRcttSVzn3HsNYay7 0gLWrR8ei9qpR9SV9vQ5DPAYGKCPE4ZYN4O2yfJv915YEtejdICUDQtlwR1QhuVv LPXTYEHnwVuHJchSCgof8WFevITh0WELT+mDP/oeMbImIgHi3J2sy12xXl4z+mOp 3ylX7TTXSK1FFN2RhLA+RRfXx8teMcudUhvKIhQoaZ3NYu52mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwqK/SPmRcW1bQAyzZoiW8DU9FiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDA3MDA4YWMtNzg4Zi0z Y2VmLTg0NDgtMTVjNTJmZTZmMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm85MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAJLZ1ACSys5NB6X58ROIJk9tEel3EagqKlE0Qz4FnuHPSHl13v0QSX B9Nll+VFeUGhGB+B7rag97AzZctsLByD4aOJ+u7mF7MomgMEGhg6MUtKm5S+mHDV JZrX9xzkbOvcx5MNKC0Tlw7DLxLBs2eMOPxrGLnbe6cTQQXkkyYu/NPc/8ORgu9O BezRZOWeIXAueylt3tPIH+TA591VMHGg2sl6QTEtMHtTluOwdypjbT5AQsw5/HeE o/Cjdv8teXXfg/0E8+wKICUZyEu4f6LB1dL3WSrMkorwbJXkQFYCfE3/Uzv+Zq08 3hHhjXE0rwqH1DIRX9xh4WFCu3fbtCw= -----END CERTIFICATE-----Generated at Thu Feb 26 09:28:34 2026 by rpki-client