$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f205715e-2ba3-3f17-b09d-e1c5ecd0b011.roa File: f205715e-2ba3-3f17-b09d-e1c5ecd0b011.roa (raw, json) Hash identifier: 9OcRRSbyPg4Nf0CaDdFlQbS/uxqnlxLg6J2pVqlZG74= Subject key identifier: 9D:B8:FA:92:19:67:69:B9:A1:C1:B9:6D:CE:9F:CD:FA:8E:6E:6E:92 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A9E65315C5A061D7D4552EB70 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f205715e-2ba3-3f17-b09d-e1c5ecd0b011.roa Signing time: Wed 23 Jul 2025 23:22:22 +0000 ROA not before: Wed 23 Jul 2025 23:22:22 +0000 ROA not after: Tue 21 Oct 2025 23:22:22 +0000 asID: 7385 IP address blocks: 198.20.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:65:31:5c:5a:06:1d:7d:45:52:eb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 23 23:22:22 2025 GMT Not After : Oct 21 23:22:22 2025 GMT Subject: CN=dc117cdb-41e1-44c2-9d15-1cb41bcb45c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:5a:a9:5d:e0:08:c3:92:65:08:ca:8a:0b: a2:81:07:54:13:44:f0:3f:fe:31:42:df:da:36:50: cb:8b:d6:04:df:f8:8e:59:a3:13:54:7f:d9:15:37: ee:3d:c4:54:d9:76:d6:3b:e3:32:0f:81:bf:59:69: b8:f4:c3:5a:16:bd:ab:5d:ed:8d:c1:be:1a:ea:26: 1a:6b:f9:8d:46:de:5b:c4:92:23:0b:23:37:67:ae: 7f:0a:aa:97:eb:b7:4e:ae:07:e2:cd:d2:ab:89:5a: b2:f9:9b:e9:a5:8c:57:9a:68:f2:fb:79:02:3d:c8: 59:44:d5:d8:ed:cb:9f:a6:ac:c6:23:b6:7e:80:e3: 5a:8e:da:78:76:3e:3b:ba:25:01:1d:92:b0:59:dd: 11:6e:39:30:7b:65:b4:bd:66:04:ab:c6:87:c9:0e: a1:6a:96:6d:94:a1:21:96:6d:3e:6f:52:4c:c3:5a: e3:7d:cb:85:1a:8e:f8:ee:65:64:9c:bf:92:90:64: ee:c1:22:d0:0f:0e:a4:67:0e:46:8c:64:96:02:dc: ed:0b:8e:da:4e:7f:4d:59:95:ae:3f:66:c9:59:e7: 1e:84:0f:4c:8e:c0:74:01:ac:55:ae:84:1d:a0:11: 27:76:7c:4d:41:bc:55:b8:24:a0:fd:69:be:cb:18: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:FA:92:19:67:69:B9:A1:C1:B9:6D:CE:9F:CD:FA:8E:6E:6E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f205715e-2ba3-3f17-b09d-e1c5ecd0b011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fe:cb:b9:44:b6:b4:03:a9:33:46:4e:0d:fe:0f:c0:4d:75: 63:3d:c0:90:6f:6d:b5:d9:a1:c1:5e:79:a4:e5:95:de:d2:c1: d2:2f:91:87:4a:86:ea:bd:eb:b4:78:0e:29:5d:9d:db:7a:ad: 59:18:9e:70:63:36:ed:3b:9c:c6:2d:4c:a9:47:9d:ba:33:4a: 34:79:c2:d4:80:77:b0:4f:3d:7e:86:a6:c1:f9:89:20:dc:35: f8:88:d9:4e:76:45:70:6f:2f:71:cd:b4:62:32:19:e0:69:29: e2:04:78:94:aa:ec:8a:3a:bc:7f:e0:36:09:cc:98:ae:2d:b0: 7f:fb:38:43:43:26:1d:79:17:8b:e4:de:51:67:0a:00:f6:8d: 54:0a:7f:f4:ed:db:53:42:cd:da:68:db:e8:61:c5:ee:af:77: 33:4c:a5:14:cf:ab:2f:bf:ca:33:1f:e0:83:13:df:7e:1d:7e: d2:13:7e:99:0a:f4:c7:4d:f2:e7:fb:4c:24:ac:2c:63:94:f3: ac:53:1f:ea:da:4c:f1:c1:c7:1e:ac:63:80:f9:86:84:e5:38: a1:8a:8e:f3:59:1c:b8:a1:f8:9c:43:c4:48:cc:8b:30:e9:41: 67:7f:7f:1d:5e:d9:ca:e6:fa:aa:0f:39:4c:f9:26:20:e8:13: 6b:33:dc:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZTFcWgYdfUVS63AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMzIzMjIyMloXDTI1MTAyMTIzMjIyMlowLzEtMCsGA1UEAxMk ZGMxMTdjZGItNDFlMS00NGMyLTlkMTUtMWNiNDFiY2I0NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsNaqV3gCMOSZQjKiguigQdUE0TwP/4xQt/a NlDLi9YE3/iOWaMTVH/ZFTfuPcRU2XbWO+MyD4G/WWm49MNaFr2rXe2Nwb4a6iYa a/mNRt5bxJIjCyM3Z65/CqqX67dOrgfizdKriVqy+ZvppYxXmmjy+3kCPchZRNXY 7cufpqzGI7Z+gONajtp4dj47uiUBHZKwWd0Rbjkwe2W0vWYEq8aHyQ6hapZtlKEh lm0+b1JMw1rjfcuFGo747mVknL+SkGTuwSLQDw6kZw5GjGSWAtztC47aTn9NWZWu P2bJWecehA9MjsB0AaxVroQdoBEndnxNQbxVuCSg/Wm+yxhvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ24+pIZZ2m5ocG5bc6fzfqObm6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjIwNTcxNWUtMmJhMy0z ZjE3LWIwOWQtZTFjNWVjZDBiMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7+y7lEtrQDqTNGTg3+D8BNdWM9wJBvbbXZocFeeaTlld7SwdIvkYdK huq967R4Dildndt6rVkYnnBjNu07nMYtTKlHnbozSjR5wtSAd7BPPX6GpsH5iSDc NfiI2U52RXBvL3HNtGIyGeBpKeIEeJSq7Io6vH/gNgnMmK4tsH/7OENDJh15F4vk 3lFnCgD2jVQKf/Tt21NCzdpo2+hhxe6vdzNMpRTPqy+/yjMf4IMT334dftITfpkK 9MdN8uf7TCSsLGOU86xTH+raTPHBxx6sY4D5hoTlOKGKjvNZHLih+JxDxEjMizDp QWd/fx1e2crm+qoPOUz5JiDoE2sz3Gw= -----END CERTIFICATE-----Generated at Sat Jul 26 13:02:55 2025 by rpki-client