$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa File: 4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa (raw, json) Hash identifier: wDbd8oV7nKIA7YcdhwLxoSBb/W10hax2o8W4TY7SMNE= Subject key identifier: 68:3E:03:9A:F0:39:EA:E4:B6:DC:1C:9D:7B:45:B5:89:C6:57:B9:E9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB4E3F12EF87C6A86B378A480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa Signing time: Fri 31 Oct 2025 17:32:29 +0000 ROA not before: Fri 31 Oct 2025 17:32:29 +0000 ROA not after: Thu 29 Jan 2026 18:32:29 +0000 asID: 401152 IP address blocks: 198.20.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:e3:f1:2e:f8:7c:6a:86:b3:78:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 31 17:32:29 2025 GMT Not After : Jan 29 18:32:29 2026 GMT Subject: CN=d34e857b-e850-43ec-9772-824b90ad5b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:87:e7:c3:30:18:f2:f0:c2:07:62:bc:5f: eb:8e:d3:57:31:6e:40:79:36:b6:00:b7:f1:49:10: f6:eb:08:a4:9f:36:35:5f:99:96:6a:c1:e4:4f:b1: c0:8a:d2:40:8c:c7:9c:fa:1b:0a:7a:13:c9:75:15: 63:1f:fa:ef:32:81:90:57:48:10:57:c2:9b:af:45: dc:e0:ff:be:f0:68:52:04:22:b6:93:8a:c9:89:5e: 44:94:b9:9d:41:2d:15:07:3a:66:ca:13:83:16:f0: 5d:72:e6:e8:fc:5d:fe:b9:e1:8c:91:fe:61:96:ca: 0c:e4:cc:7e:7f:e0:a0:7f:34:29:5b:87:6e:3a:61: 1c:96:32:e3:a2:e5:2c:6f:ec:1c:fa:91:13:2a:31: cc:35:00:ea:2e:58:92:6c:ca:16:18:5e:53:8f:a9: 0b:39:4d:af:39:a3:de:4e:94:f3:86:a6:4f:b3:f8: 9c:73:64:cc:91:11:1a:a4:c1:71:f0:28:06:ab:05: c2:9b:04:a7:83:aa:26:28:c9:c3:38:f3:e3:2e:45: 57:68:2b:13:23:0b:38:97:a8:ba:03:55:58:2f:a8: 80:e7:4e:13:2b:0b:bc:57:c3:41:5c:19:86:1f:fe: 14:2f:80:0b:53:83:7f:b1:a0:6e:4f:44:ac:a6:d1: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3E:03:9A:F0:39:EA:E4:B6:DC:1C:9D:7B:45:B5:89:C6:57:B9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3a:8c:7f:11:61:83:a5:30:2a:0f:43:c2:6e:96:60:51:36: 64:de:6c:74:51:2d:f2:e9:55:16:3f:00:52:7e:f9:b8:ad:1c: 5b:df:b6:a5:47:7d:b0:0b:84:50:a0:14:08:f8:30:03:00:82: 34:b2:74:c0:48:da:c9:08:c7:1c:db:30:fc:23:c0:c2:13:f4: 72:24:6a:88:a2:01:6a:b4:f4:3d:f8:1e:8e:b2:f0:2e:87:a3: 5a:14:94:0e:09:02:a5:ae:d1:91:eb:bd:31:2b:32:5d:3e:ff: 25:d7:04:74:9b:43:7e:52:34:87:6f:33:10:4d:fc:1f:8e:ec: 3f:8a:47:d5:42:14:87:42:1a:4b:c7:9b:0a:2d:35:5d:0c:35: f3:39:d3:f6:09:a8:a3:3c:ff:d6:85:e9:66:66:43:b8:01:27: c2:5f:2a:d2:33:13:38:ad:8a:9d:b5:ea:18:bd:40:40:a8:cc: 80:7a:30:d9:7e:4b:da:3c:d3:ee:b9:a8:13:80:62:49:e5:c2: 57:f9:c1:e1:0c:bf:7c:04:5a:fc:af:69:fe:fc:4e:aa:e1:30: f9:41:a3:2f:27:00:e5:68:c7:1b:5d:a4:d2:76:9a:0f:8e:e8: 8c:96:93:a2:76:d4:38:3f:2e:5e:c6:f6:33:4b:f6:41:7a:fa: 49:72:e1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu04/Eu+HxqhrN4pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAzMTE3MzIyOVoXDTI2MDEyOTE4MzIyOVowLzEtMCsGA1UEAxMk ZDM0ZTg1N2ItZTg1MC00M2VjLTk3NzItODI0YjkwYWQ1YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeGH58MwGPLwwgdivF/rjtNXMW5AeTa2ALfx SRD26wiknzY1X5mWasHkT7HAitJAjMec+hsKehPJdRVjH/rvMoGQV0gQV8Kbr0Xc 4P++8GhSBCK2k4rJiV5ElLmdQS0VBzpmyhODFvBdcubo/F3+ueGMkf5hlsoM5Mx+ f+CgfzQpW4duOmEcljLjouUsb+wc+pETKjHMNQDqLliSbMoWGF5Tj6kLOU2vOaPe TpTzhqZPs/icc2TMkREapMFx8CgGqwXCmwSng6omKMnDOPPjLkVXaCsTIws4l6i6 A1VYL6iA504TKwu8V8NBXBmGH/4UL4ALU4N/saBuT0SsptHFAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg+A5rwOerkttwcnXtFtYnGV7npMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGEyYzM1ZTktZTU0MS0z MWZjLWI0YmItZWVlMGZmYzU2YTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI6jH8RYYOlMCoPQ8JulmBRNmTebHRRLfLpVRY/AFJ++bitHFvftqVH fbALhFCgFAj4MAMAgjSydMBI2skIxxzbMPwjwMIT9HIkaoiiAWq09D34Ho6y8C6H o1oUlA4JAqWu0ZHrvTErMl0+/yXXBHSbQ35SNIdvMxBN/B+O7D+KR9VCFIdCGkvH mwotNV0MNfM50/YJqKM8/9aF6WZmQ7gBJ8JfKtIzEzitip216hi9QECozIB6MNl+ S9o80+65qBOAYknlwlf5weEMv3wEWvyvaf78TqrhMPlBoy8nAOVoxxtdpNJ2mg+O 6IyWk6J21Dg/Ll7G9jNL9kF6+kly4cw= -----END CERTIFICATE-----Generated at Mon Nov 3 11:17:59 2025 by rpki-client