$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d6b9f9a-f4c0-3541-bf84-7f3e889cbf8d.roa File: 3d6b9f9a-f4c0-3541-bf84-7f3e889cbf8d.roa (raw, json) Hash identifier: koSklxZlBgvm6bkwLNIkRtRWC0G529ipLSgzFBmrwtk= Subject key identifier: 36:D2:0B:EC:E8:4A:CA:7D:58:05:FB:33:F2:DD:52:1C:04:11:7A:2C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DF2F33F62805A47124BDEA780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d6b9f9a-f4c0-3541-bf84-7f3e889cbf8d.roa Signing time: Mon 25 May 2026 08:37:19 +0000 ROA not before: Mon 25 May 2026 08:37:19 +0000 ROA not after: Sun 23 Aug 2026 08:37:19 +0000 asID: 47690 IP address blocks: 198.20.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:f3:3f:62:80:5a:47:12:4b:de:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 25 08:37:19 2026 GMT Not After : Aug 23 08:37:19 2026 GMT Subject: CN=0dcf5f29-15cf-44b2-9e17-da03ca180444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:cf:1f:83:1d:9b:cf:dc:37:89:c3:0c:02: c2:c6:13:f6:3e:56:eb:f0:75:0e:80:5b:7f:9a:f5: cb:46:8e:3c:c4:59:b7:d7:38:8b:c1:4a:e5:f6:f8: 7a:50:ed:c1:ad:fc:f5:24:49:2e:10:74:a0:d7:57: 41:e2:5f:7c:73:c7:05:84:e3:61:bf:1b:fe:c4:8a: 90:d7:3e:18:e7:e9:ad:92:05:8e:43:cf:b3:1a:9e: c1:48:97:a5:5c:d6:f6:53:7f:92:52:42:e3:ec:85: 06:0e:7a:7b:b2:b3:e1:10:2f:17:d6:07:8e:97:9f: 24:d2:19:ed:1c:9d:09:f7:e7:07:4d:6e:cd:8d:89: 51:1b:65:68:0f:e4:a8:41:e1:96:3f:24:e8:0e:a4: ea:ab:06:2d:53:c3:a6:f1:1c:3f:51:a1:de:e2:80: 67:37:42:d5:68:d4:d9:eb:20:f6:42:75:54:ea:e1: cf:fe:c9:ab:7f:b6:c7:4e:b5:5a:91:25:c2:30:a4: 43:60:00:d4:7d:98:b5:3a:52:b6:b7:4d:01:7a:06: 9c:b3:d0:6e:28:a2:00:bb:f0:63:bf:84:ba:71:34: 03:80:1d:a9:f8:7f:8a:28:70:f3:78:4e:a5:8e:9d: e5:c1:af:e3:4a:32:ad:76:73:79:77:d4:c9:fc:25: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D2:0B:EC:E8:4A:CA:7D:58:05:FB:33:F2:DD:52:1C:04:11:7A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d6b9f9a-f4c0-3541-bf84-7f3e889cbf8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:54:98:ad:69:1f:d8:de:a0:3a:68:8f:6d:59:eb:c1:f9:ac: a8:ca:20:50:6b:6c:ea:cf:45:c2:78:18:15:25:05:d1:53:aa: ae:25:c6:79:11:9a:85:b3:13:bd:bd:55:78:2f:34:71:3f:c8: 31:2e:a4:ae:5b:97:b6:09:ec:f4:ff:a8:f9:6f:a3:5b:21:46: 21:13:c7:29:c4:9a:d5:c6:a4:0d:a6:fa:b4:9c:88:79:67:75: e6:5e:d3:7c:80:68:e5:7e:d0:1d:97:84:36:ba:00:4e:bc:c7: 7b:35:8a:3f:fd:74:a0:fd:cb:86:e8:d2:89:f1:d3:c1:50:76: d0:83:90:91:b3:f7:7e:ec:78:f8:47:7b:c7:c3:ff:64:60:30: 2e:c3:09:08:3a:50:7e:2a:44:a7:f9:5f:b1:73:ef:96:eb:a8: 05:d8:c9:5f:b7:43:46:80:82:52:e8:5d:64:15:52:75:1e:39: 60:89:a4:d4:37:8f:85:2c:10:07:b0:ec:e0:8a:de:53:ea:01: 96:c0:da:d1:97:45:ab:95:8b:76:ec:f4:61:26:46:5f:52:6f: 65:fe:29:2b:95:a0:2f:fb:5a:3d:ad:d9:e9:49:1e:2d:4f:90: 91:35:95:c4:1f:5c:24:59:02:d7:bf:65:5c:40:49:09:b3:3c: ac:42:95:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3y8z9igFpHEkvep4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUyNTA4MzcxOVoXDTI2MDgyMzA4MzcxOVowLzEtMCsGA1UEAxMk MGRjZjVmMjktMTVjZi00NGIyLTllMTctZGEwM2NhMTgwNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhPPH4Mdm8/cN4nDDALCxhP2Plbr8HUOgFt/ mvXLRo48xFm31ziLwUrl9vh6UO3Brfz1JEkuEHSg11dB4l98c8cFhONhvxv+xIqQ 1z4Y5+mtkgWOQ8+zGp7BSJelXNb2U3+SUkLj7IUGDnp7srPhEC8X1geOl58k0hnt HJ0J9+cHTW7NjYlRG2VoD+SoQeGWPyToDqTqqwYtU8Om8Rw/UaHe4oBnN0LVaNTZ 6yD2QnVU6uHP/smrf7bHTrVakSXCMKRDYADUfZi1OlK2t00Begacs9BuKKIAu/Bj v4S6cTQDgB2p+H+KKHDzeE6ljp3lwa/jSjKtdnN5d9TJ/CXoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbSC+zoSsp9WAX7M/LdUhwEEXosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2Q2YjlmOWEtZjRjMC0z NTQxLWJmODQtN2YzZTg4OWNiZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVUmK1pH9jeoDpoj21Z68H5rKjKIFBrbOrPRcJ4GBUlBdFTqq4lxnkR moWzE729VXgvNHE/yDEupK5bl7YJ7PT/qPlvo1shRiETxynEmtXGpA2m+rSciHln deZe03yAaOV+0B2XhDa6AE68x3s1ij/9dKD9y4bo0onx08FQdtCDkJGz937sePhH e8fD/2RgMC7DCQg6UH4qRKf5X7Fz75brqAXYyV+3Q0aAglLoXWQVUnUeOWCJpNQ3 j4UsEAew7OCK3lPqAZbA2tGXRauVi3bs9GEmRl9Sb2X+KSuVoC/7Wj2t2elJHi1P kJE1lcQfXCRZAte/ZVxASQmzPKxClVs= -----END CERTIFICATE-----Generated at Tue May 26 03:58:42 2026 by rpki-client