$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1509a31b-cd55-3434-b27e-e5de8e50cd32.roa File: 1509a31b-cd55-3434-b27e-e5de8e50cd32.roa (raw, json) Hash identifier: kPQdCLm0DxCxkBGOSgAJBTFiT0J9oUmbq3VfceA+ujw= Subject key identifier: BD:45:F4:0B:E3:E7:81:97:18:CB:58:CD:D0:2C:B1:06:80:48:82:70 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B5E9104CA1C26FC5EF3ACA23E Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1509a31b-cd55-3434-b27e-e5de8e50cd32.roa Signing time: Tue 30 Sep 2025 19:25:53 +0000 ROA not before: Tue 30 Sep 2025 19:25:53 +0000 ROA not after: Mon 29 Dec 2025 20:25:53 +0000 asID: 401152 IP address blocks: 198.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:91:04:ca:1c:26:fc:5e:f3:ac:a2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 30 19:25:53 2025 GMT Not After : Dec 29 20:25:53 2025 GMT Subject: CN=30c3b48d-3c66-4aaf-84f4-2f25f50b159a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:f7:05:04:d9:c7:e6:89:d6:4b:5d:46:a3: c1:45:a9:39:13:38:c2:3e:38:f7:4e:3a:8c:f1:2a: 48:8a:72:68:ee:e1:87:fb:68:06:7a:fd:65:45:b3: 4e:6d:97:4d:d0:34:df:59:59:7b:b4:ba:bc:d2:a3: d1:ed:7b:0e:0c:ee:81:68:b6:5b:55:d4:3f:3b:a0: a7:fd:e3:4a:b3:70:44:a1:de:72:39:1b:b4:79:cc: 33:9d:4c:62:c1:63:6a:8b:e9:fb:9a:63:3b:a8:db: 41:ba:fd:a5:10:1f:7b:bb:c7:c4:8b:c3:47:2e:99: b0:80:89:f0:b3:02:9f:4a:c7:9c:f4:d4:04:4f:dc: ea:42:cd:9f:b7:7d:8e:50:bc:5e:f3:4b:1b:3b:1a: e6:19:3f:8e:01:ef:9b:86:8b:7d:b3:43:22:9e:52: ad:ab:fe:80:97:bf:b2:07:4d:d3:db:99:e9:d5:89: 21:0b:44:e1:b9:49:71:52:6f:3a:07:9e:02:90:6f: 1f:02:35:91:63:bc:17:2b:4c:f5:aa:5e:4a:05:64: fa:65:e5:5d:3c:1a:e8:1b:0e:e0:31:06:ac:5d:f3: 8d:55:45:b0:79:25:58:f0:ec:22:c4:e4:bc:1c:18: fa:ba:d0:4e:bf:97:31:b8:a3:a4:7b:fc:78:a5:13: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:F4:0B:E3:E7:81:97:18:CB:58:CD:D0:2C:B1:06:80:48:82:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1509a31b-cd55-3434-b27e-e5de8e50cd32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e1:3c:2d:66:e2:15:a8:81:b6:ee:a1:6b:38:fa:22:37:07: 74:76:0d:05:ca:ec:5d:93:29:23:6b:84:06:0c:d8:50:22:cf: 35:30:61:8e:d1:fa:7c:13:c3:0c:e3:84:46:02:20:9d:8d:2c: 40:4c:42:3c:d3:15:5f:72:a4:15:dc:5b:e6:af:b1:3c:13:77: 86:98:e4:33:09:a5:62:d7:96:58:24:59:ed:20:0a:a5:2b:ae: 73:95:e0:ac:2c:f7:97:fe:96:f1:8a:41:aa:c8:f4:e6:3c:5e: 94:f0:38:f0:cf:83:75:5f:25:8f:1b:c4:c7:95:2e:70:d6:27: 99:47:6c:a2:41:f1:c4:1d:6a:19:f5:07:f9:15:bb:f1:a3:a9: be:e3:1a:06:b3:9b:6d:b1:45:3c:f8:b8:5b:56:b2:6c:fb:6c: 2f:4a:75:87:8f:d9:1a:f3:13:f2:10:71:fa:46:d2:c1:14:87: cf:6a:5e:ff:74:57:82:10:cc:9b:98:a4:7f:e0:3c:56:4c:ed: ef:d7:e4:c1:e5:eb:99:2c:f6:33:96:4f:e9:9a:96:3f:ba:82: d4:71:f0:89:f9:3e:7f:75:10:1a:d8:34:41:10:e5:08:97:b6: df:60:be:d0:60:99:81:c7:49:8f:6f:79:59:a3:d7:9c:90:03: 12:bd:14:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtekQTKHCb8XvOsoj4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkzMDE5MjU1M1oXDTI1MTIyOTIwMjU1M1owLzEtMCsGA1UEAxMk MzBjM2I0OGQtM2M2Ni00YWFmLTg0ZjQtMmYyNWY1MGIxNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimz3BQTZx+aJ1ktdRqPBRak5EzjCPjj3TjqM 8SpIinJo7uGH+2gGev1lRbNObZdN0DTfWVl7tLq80qPR7XsODO6BaLZbVdQ/O6Cn /eNKs3BEod5yORu0ecwznUxiwWNqi+n7mmM7qNtBuv2lEB97u8fEi8NHLpmwgInw swKfSsec9NQET9zqQs2ft32OULxe80sbOxrmGT+OAe+bhot9s0MinlKtq/6Al7+y B03T25np1YkhC0ThuUlxUm86B54CkG8fAjWRY7wXK0z1ql5KBWT6ZeVdPBroGw7g MQasXfONVUWweSVY8OwixOS8HBj6utBOv5cxuKOke/x4pRO8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1F9Avj54GXGMtYzdAssQaASIJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTUwOWEzMWItY2Q1NS0z NDM0LWIyN2UtZTVkZThlNTBjZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrhPC1m4hWogbbuoWs4+iI3B3R2DQXK7F2TKSNrhAYM2FAizzUwYY7R +nwTwwzjhEYCIJ2NLEBMQjzTFV9ypBXcW+avsTwTd4aY5DMJpWLXllgkWe0gCqUr rnOV4Kws95f+lvGKQarI9OY8XpTwOPDPg3VfJY8bxMeVLnDWJ5lHbKJB8cQdahn1 B/kVu/Gjqb7jGgazm22xRTz4uFtWsmz7bC9KdYeP2RrzE/IQcfpG0sEUh89qXv90 V4IQzJuYpH/gPFZM7e/X5MHl65ks9jOWT+malj+6gtRx8In5Pn91EBrYNEEQ5QiX tt9gvtBgmYHHSY9veVmj15yQAxK9FJE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:04 2025 by rpki-client