$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/542b8fe9-c6a0-3482-8a61-d8decf01d391.roa File: 542b8fe9-c6a0-3482-8a61-d8decf01d391.roa (raw, json) Hash identifier: 1/vpDLOpgRtMScM2TS8brWa3b2lycurIbJf3Xgz7aWQ= Subject key identifier: 55:7B:EE:8A:82:0A:F0:F4:84:AC:71:3C:3F:5C:CC:A5:F3:1A:65:6E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D14C820CC68EE5CAA32E67E40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/542b8fe9-c6a0-3482-8a61-d8decf01d391.roa Signing time: Fri 06 Mar 2026 18:40:59 +0000 ROA not before: Fri 06 Mar 2026 18:40:59 +0000 ROA not after: Thu 04 Jun 2026 17:40:59 +0000 asID: 201907 IP address blocks: 198.20.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:c8:20:cc:68:ee:5c:aa:32:e6:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 6 18:40:59 2026 GMT Not After : Jun 4 17:40:59 2026 GMT Subject: CN=cfe87317-bdbd-4d9e-8f55-3235abc1a601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:53:6b:e6:57:92:93:9a:bc:8a:37:d9:0e:f0: 6b:08:1e:79:aa:04:c5:35:e5:eb:a2:99:b3:ee:59: db:3a:dd:5a:ec:6b:45:b6:77:bd:4e:9b:a8:c6:98: 9f:6c:01:63:5a:a6:f2:03:d3:a6:6f:80:ca:51:33: 04:13:7c:ca:d6:49:3c:c4:8a:31:be:68:b1:9f:a9: fd:aa:92:2d:dd:85:7b:23:31:b4:74:38:dd:28:fa: 30:f7:d9:b9:51:8c:4f:b5:ff:c4:89:8c:95:e6:77: b1:1a:d6:a0:1a:f3:7b:06:54:b2:21:e9:01:0a:3d: 25:14:4a:9e:60:c3:ee:ea:5a:0d:54:39:22:23:cf: dd:10:f5:71:50:04:01:b9:f4:3a:51:6f:14:86:63: 6b:73:8e:b1:f9:6f:40:01:98:f1:b7:a4:d9:ed:f7: b4:18:7d:c7:b9:33:8f:8a:59:26:0a:f0:71:97:c6: 65:e9:fe:b3:0e:16:c9:c5:fc:d7:4b:20:22:0f:18: 72:91:41:4e:e7:c3:6b:b0:67:55:91:5b:34:31:ed: fe:f7:90:1d:f7:52:70:9c:8c:4b:e8:b3:54:27:cc: 36:be:a3:a3:1d:59:c2:27:4f:d9:93:19:e6:ff:b8: 54:1d:32:f4:2f:1e:f0:b0:7e:45:c8:06:73:77:5c: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:EE:8A:82:0A:F0:F4:84:AC:71:3C:3F:5C:CC:A5:F3:1A:65:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/542b8fe9-c6a0-3482-8a61-d8decf01d391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:af:03:0d:da:98:b8:c8:e2:76:80:55:8d:77:7b:99:d4:d6: 5c:f6:fb:35:98:11:36:96:e3:0e:38:d4:f9:28:7b:db:3d:7c: 45:9e:3c:d9:4d:91:2d:87:88:c2:3d:ca:d4:84:98:4e:20:90: 67:a6:bd:cb:03:77:cc:3f:b8:a8:62:d6:3e:c6:77:45:02:3a: 99:20:07:bc:da:b3:7e:78:d5:c2:6b:de:a3:21:39:d4:e7:3c: 7d:02:ab:af:c9:94:20:17:4e:5e:7e:e6:e0:34:1b:ec:88:d1: 39:72:7a:8c:74:29:2a:e9:f3:35:0c:fb:4e:3a:f1:a2:57:7d: 77:4a:aa:eb:a1:ee:da:a1:b6:f8:48:2d:60:86:f0:7b:7e:7a: 7d:db:fa:43:df:9c:46:33:47:4a:5f:4a:e1:41:f5:01:ca:66: a8:7f:e6:8a:f7:c5:f8:86:9b:33:d5:ba:22:d5:fb:71:98:8b: b5:0c:f8:62:61:99:a4:37:31:49:11:d5:4e:83:e6:67:d0:ed: 81:44:a1:1a:ab:dd:13:54:50:5c:5a:78:b0:7f:ae:c2:08:53: af:03:88:80:be:c0:90:62:c4:b0:b4:1f:98:3d:88:70:86:a5: 5e:b3:f6:26:ea:32:e3:12:9a:f0:1c:23:82:82:e1:ea:eb:4a: 4f:bd:54:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UyCDMaO5cqjLmfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNjE4NDA1OVoXDTI2MDYwNDE3NDA1OVowLzEtMCsGA1UEAxMk Y2ZlODczMTctYmRiZC00ZDllLThmNTUtMzIzNWFiYzFhNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVNr5leSk5q8ijfZDvBrCB55qgTFNeXropmz 7lnbOt1a7GtFtne9TpuoxpifbAFjWqbyA9Omb4DKUTMEE3zK1kk8xIoxvmixn6n9 qpIt3YV7IzG0dDjdKPow99m5UYxPtf/EiYyV5nexGtagGvN7BlSyIekBCj0lFEqe YMPu6loNVDkiI8/dEPVxUAQBufQ6UW8UhmNrc46x+W9AAZjxt6TZ7fe0GH3HuTOP ilkmCvBxl8Zl6f6zDhbJxfzXSyAiDxhykUFO58NrsGdVkVs0Me3+95Ad91JwnIxL 6LNUJ8w2vqOjHVnCJ0/Zkxnm/7hUHTL0Lx7wsH5FyAZzd1y2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV77oqCCvD0hKxxPD9czKXzGmVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTQyYjhmZTktYzZhMC0z NDgyLThhNjEtZDhkZWNmMDFkMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCvAw3amLjI4naAVY13e5nU1lz2+zWYETaW4w441Pkoe9s9fEWePNlN kS2HiMI9ytSEmE4gkGemvcsDd8w/uKhi1j7Gd0UCOpkgB7zas3541cJr3qMhOdTn PH0Cq6/JlCAXTl5+5uA0G+yI0Tlyeox0KSrp8zUM+0468aJXfXdKquuh7tqhtvhI LWCG8Ht+en3b+kPfnEYzR0pfSuFB9QHKZqh/5or3xfiGmzPVuiLV+3GYi7UM+GJh maQ3MUkR1U6D5mfQ7YFEoRqr3RNUUFxaeLB/rsIIU68DiIC+wJBixLC0H5g9iHCG pV6z9ibqMuMSmvAcI4KC4errSk+9VNA= -----END CERTIFICATE-----Generated at Sat Mar 21 17:17:24 2026 by rpki-client