$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/08a0a0a3-c00f-3d0a-87a7-cc5783baaa28.roa File: 08a0a0a3-c00f-3d0a-87a7-cc5783baaa28.roa (raw, json) Hash identifier: Ib0wSvUMdcl+c9Nb0HAS/2La3RKtLWLAPTwOA2gQF6E= Subject key identifier: F2:54:48:9B:A0:84:37:AC:15:AB:1A:5B:B7:5F:AB:9D:5C:EE:F8:13 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EF01CF7EA15A1E5B723D56900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/08a0a0a3-c00f-3d0a-87a7-cc5783baaa28.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 213929 IP address blocks: 142.111.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f7:ea:15:a1:e5:b7:23:d5:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=20afe4f9-c1d6-4e74-90fc-64e28bc4c93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:3a:f1:d5:ed:87:3a:fa:6a:8f:4e:a0:4e: 67:47:38:0f:bb:13:ef:bb:b6:bb:38:cd:a4:9f:4e: ba:f5:07:1b:77:d5:28:c2:26:9f:5b:ea:34:f1:22: 5c:4a:35:32:d6:d4:1f:97:43:03:36:d4:0a:44:c2: 79:ab:df:b3:53:06:ce:98:39:9f:37:c9:0e:3f:ac: a9:71:1d:4c:c6:c4:41:67:53:9c:08:d5:0d:fc:9d: bf:ac:56:c6:d5:bf:37:68:ba:29:36:ca:e5:d5:ec: 50:a0:5b:bd:db:a8:27:38:d5:13:e6:9d:e6:73:c1: d3:d9:58:4f:5d:1b:e9:01:54:df:3e:89:c5:df:29: 12:f8:8b:01:1a:53:e1:9c:91:11:7f:9b:57:90:4b: c7:b4:8b:02:ca:54:8c:6f:7d:81:e9:33:42:ca:bb: 47:b6:0b:e6:4b:59:d5:cb:80:05:4e:47:6b:43:c8: 95:f5:4a:ad:6f:9e:cb:0e:85:82:0e:e3:59:51:fd: 71:2a:ba:99:98:a5:f4:13:db:e9:b8:0e:9b:a2:ba: 9b:d7:08:a7:98:7b:36:07:11:2f:67:b4:cf:94:fb: 70:82:81:fe:66:d1:4e:b3:dc:68:37:ce:37:27:29: 72:fb:b9:ce:9c:f8:e4:28:8f:85:a5:f8:1a:0b:fc: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:54:48:9B:A0:84:37:AC:15:AB:1A:5B:B7:5F:AB:9D:5C:EE:F8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/08a0a0a3-c00f-3d0a-87a7-cc5783baaa28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:34:0b:90:49:e8:d0:5b:8a:04:41:e1:aa:78:e9:e3:e9:7a: 1d:97:0e:e3:71:98:71:f6:32:2c:76:a7:75:e4:cd:e8:49:5f: 5c:9e:64:f8:0a:46:1e:af:3b:37:82:62:50:97:cd:10:00:8f: 5d:dd:86:38:58:7c:cb:f4:e9:0a:ee:37:35:91:ac:e4:de:59: 9c:39:4b:9c:6c:e4:71:68:0a:13:e9:81:19:40:3c:cd:07:82: db:59:f2:6f:a1:b8:5e:8a:90:a6:a5:ee:f8:b5:5e:1e:c8:31: 6e:a9:4e:90:a2:90:eb:17:e8:fa:77:c0:d8:8b:c8:26:b3:8f: bf:8f:92:5b:77:f5:e8:bf:a8:b9:6e:d0:32:40:4c:5a:6c:9b: 2f:02:7d:fb:11:4c:ea:ea:97:30:2c:91:81:e6:1e:18:81:94: 15:9e:86:fa:da:d6:bf:a7:a5:cd:0c:17:7f:c7:ce:34:ad:6f: 34:56:a2:14:f9:a4:fd:7f:e5:1c:19:46:a8:5b:65:66:25:03: ff:e7:f6:6e:37:61:90:55:80:67:66:50:16:9c:c8:3b:f4:c4: 33:fa:a2:48:19:92:8b:ab:bf:4b:19:2a:d6:0d:48:81:b8:14: a5:e9:13:20:b5:59:46:04:86:e5:89:bd:98:bf:d1:72:95:09: e6:76:26:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHPfqFaHltyPVaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjBhZmU0ZjktYzFkNi00ZTc0LTkwZmMtNjRlMjhiYzRjOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjQ68dXthzr6ao9OoE5nRzgPuxPvu7a7OM2k n0669Qcbd9UowiafW+o08SJcSjUy1tQfl0MDNtQKRMJ5q9+zUwbOmDmfN8kOP6yp cR1MxsRBZ1OcCNUN/J2/rFbG1b83aLopNsrl1exQoFu926gnONUT5p3mc8HT2VhP XRvpAVTfPonF3ykS+IsBGlPhnJERf5tXkEvHtIsCylSMb32B6TNCyrtHtgvmS1nV y4AFTkdrQ8iV9Uqtb57LDoWCDuNZUf1xKrqZmKX0E9vpuA6borqb1winmHs2BxEv Z7TPlPtwgoH+ZtFOs9xoN843Jyly+7nOnPjkKI+FpfgaC/ybXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJUSJughDesFasaW7dfq51c7vgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDhhMGEwYTMtYzAwZi0z ZDBhLTg3YTctY2M1NzgzYmFhYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII0C5BJ6NBbigRB4ap46ePpeh2XDuNxmHH2Mix2p3XkzehJX1yeZPgK Rh6vOzeCYlCXzRAAj13dhjhYfMv06QruNzWRrOTeWZw5S5xs5HFoChPpgRlAPM0H gttZ8m+huF6KkKal7vi1Xh7IMW6pTpCikOsX6Pp3wNiLyCazj7+Pklt39ei/qLlu 0DJATFpsmy8CffsRTOrqlzAskYHmHhiBlBWehvra1r+npc0MF3/HzjStbzRWohT5 pP1/5RwZRqhbZWYlA//n9m43YZBVgGdmUBacyDv0xDP6okgZkourv0sZKtYNSIG4 FKXpEyC1WUYEhuWJvZi/0XKVCeZ2Ji4= -----END CERTIFICATE-----Generated at Sun Sep 20 11:53:47 2026 by rpki-client