$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d109a8b-c95f-309c-b7a1-9929b1c490f1.roa File: 3d109a8b-c95f-309c-b7a1-9929b1c490f1.roa (raw, json) Hash identifier: grBKWg8hkuRdTEeeKvD0nyjlnbZD/QkS+RBEfostmbQ= Subject key identifier: 36:64:87:57:3D:0D:D5:37:DE:BE:56:C2:91:F1:24:15:23:CD:63:21 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EF4E7FDB397CCF62508E4F640 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d109a8b-c95f-309c-b7a1-9929b1c490f1.roa Signing time: Tue 25 Aug 2026 18:13:11 +0000 ROA not before: Tue 25 Aug 2026 18:13:11 +0000 ROA not after: Mon 23 Nov 2026 19:13:11 +0000 asID: 3257 IP address blocks: 198.20.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:e7:fd:b3:97:cc:f6:25:08:e4:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 18:13:11 2026 GMT Not After : Nov 23 19:13:11 2026 GMT Subject: CN=9fac8abd-04d5-4f68-b5a2-8e91e0c03b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:d6:a1:19:17:f9:5d:c6:37:45:53:2f:11: 01:11:f0:37:b4:75:42:a7:3d:fb:0c:74:45:3f:8e: fb:20:d7:96:12:d2:0a:5b:d3:96:9f:8e:8d:82:7b: 8e:73:ce:b7:c3:e6:c6:1d:af:9d:51:4f:d1:78:04: 51:50:38:bd:fb:b8:22:1e:99:ec:45:4d:a6:cf:25: f2:0b:6c:c7:47:79:ba:a4:9b:87:0e:9b:bb:81:aa: da:53:b0:e2:df:ec:e0:16:e3:0d:11:a9:3d:55:a2: ec:87:7a:5e:9e:f4:a6:58:2a:03:74:27:16:5f:d6: 9b:9f:49:e2:4b:09:83:98:61:c3:ab:e4:07:40:c3: 7e:99:26:bb:7a:0e:4f:7d:ed:31:7a:8f:17:5c:d7: f4:10:87:1a:b1:02:55:7d:b7:db:2c:e6:f3:19:84: e9:47:5c:ea:8d:62:65:09:9a:5b:71:df:ae:57:da: 52:08:b3:d3:1f:44:1a:98:14:3f:7d:70:e1:b4:8a: e6:72:6c:8a:4f:29:4c:96:12:10:a9:69:ec:a5:c2: 5a:4b:77:9d:d6:51:6c:0c:0d:69:99:db:d6:0f:f3: 67:60:c4:9e:45:25:35:5b:55:7a:b7:81:e9:e5:c1: 33:ed:b9:a5:20:6b:f9:54:0c:21:9b:ae:2b:cd:7e: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:87:57:3D:0D:D5:37:DE:BE:56:C2:91:F1:24:15:23:CD:63:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d109a8b-c95f-309c-b7a1-9929b1c490f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:63:46:4f:e9:93:cd:6d:46:80:75:a8:e3:04:0b:b1:44:7c: b6:8c:ad:75:17:96:0b:cb:b0:cb:da:e7:e6:80:48:50:ec:29: 2f:f8:b9:d0:bd:aa:14:d5:fb:35:bd:6d:91:b5:90:40:be:96: af:03:31:b3:53:09:55:5f:7c:0b:be:da:88:cf:df:a7:1e:59: 63:d6:28:04:1c:a4:d2:9b:a9:10:76:e6:fe:a5:41:37:9e:18: 83:a7:7a:5b:56:b3:2b:7c:a7:cb:fa:0a:c4:22:b4:eb:e4:89: 47:ce:3d:69:c6:90:3d:d7:15:45:4c:b0:75:85:82:20:d6:05: 93:16:c8:77:47:d3:e5:b1:ec:78:ac:5b:fb:99:1d:dc:3e:75: 4f:31:fe:81:29:5d:7d:3e:0e:5a:c7:17:81:25:28:29:ec:b4: 29:53:f5:0f:f4:3a:45:8a:16:ed:d9:fe:63:03:60:67:8a:a7: 7d:ee:78:3b:5b:c2:b1:20:9e:4d:8f:a8:85:a6:c4:1c:3f:85: 57:ce:fd:75:ff:e5:95:91:3b:6b:9c:cf:9a:84:33:ce:4d:39: 1c:11:9f:b5:64:5f:4e:22:ca:65:df:76:71:76:26:4d:55:e2: f4:6d:54:53:f7:b8:6b:58:99:9e:9e:48:d0:3d:f5:09:45:75: 9d:f7:18:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE705/2zl8z2JQjk9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgyNTE4MTMxMVoXDTI2MTEyMzE5MTMxMVowLzEtMCsGA1UEAxMk OWZhYzhhYmQtMDRkNS00ZjY4LWI1YTItOGU5MWUwYzAzYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B3WoRkX+V3GN0VTLxEBEfA3tHVCpz37DHRF P477INeWEtIKW9OWn46NgnuOc863w+bGHa+dUU/ReARRUDi9+7giHpnsRU2mzyXy C2zHR3m6pJuHDpu7garaU7Di3+zgFuMNEak9VaLsh3penvSmWCoDdCcWX9abn0ni SwmDmGHDq+QHQMN+mSa7eg5Pfe0xeo8XXNf0EIcasQJVfbfbLObzGYTpR1zqjWJl CZpbcd+uV9pSCLPTH0QamBQ/fXDhtIrmcmyKTylMlhIQqWnspcJaS3ed1lFsDA1p mdvWD/NnYMSeRSU1W1V6t4Hp5cEz7bmlIGv5VAwhm64rzX7fBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZkh1c9DdU33r5WwpHxJBUjzWMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2QxMDlhOGItYzk1Zi0z MDljLWI3YTEtOTkyOWIxYzQ5MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBjRk/pk81tRoB1qOMEC7FEfLaMrXUXlgvLsMva5+aASFDsKS/4udC9 qhTV+zW9bZG1kEC+lq8DMbNTCVVffAu+2ojP36ceWWPWKAQcpNKbqRB25v6lQTee GIOneltWsyt8p8v6CsQitOvkiUfOPWnGkD3XFUVMsHWFgiDWBZMWyHdH0+Wx7His W/uZHdw+dU8x/oEpXX0+DlrHF4ElKCnstClT9Q/0OkWKFu3Z/mMDYGeKp33ueDtb wrEgnk2PqIWmxBw/hVfO/XX/5ZWRO2ucz5qEM85NORwRn7VkX04iymXfdnF2Jk1V 4vRtVFP3uGtYmZ6eSNA99QlFdZ33GGQ= -----END CERTIFICATE-----Generated at Thu Aug 27 14:14:28 2026 by rpki-client