$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b1f7735-4c33-3f50-bd4f-7b6a26d2be92.roa File: 5b1f7735-4c33-3f50-bd4f-7b6a26d2be92.roa (raw, json) Hash identifier: WS5WheMa3gaSpGb3zmovyTwSQxZqoaTZwbEiPXOYR1M= Subject key identifier: AE:46:87:89:AF:42:5A:29:EE:42:1F:8C:A7:66:8C:16:E7:DC:30:52 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DD4C07E4D71FCA9C391AD255C Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b1f7735-4c33-3f50-bd4f-7b6a26d2be92.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 149440 IP address blocks: 198.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:7e:4d:71:fc:a9:c3:91:ad:25:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=f575f44c-6d7c-4243-9128-b8aff3605b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:b3:52:9c:44:99:e2:ac:ff:39:08:9c:db: 13:fc:1b:7d:a4:93:a3:7b:8a:e8:a5:5b:59:e4:e3: c9:fe:59:70:24:63:36:79:aa:a2:f1:0a:1c:32:27: 4f:1d:c4:4c:84:90:04:1c:10:11:45:21:74:e9:dd: f2:e4:72:db:ba:8d:67:6f:9d:4f:a0:8c:e8:8e:71: 54:41:89:dc:1b:02:b2:8b:bb:c3:34:52:0b:21:cb: 67:ed:da:59:2f:36:1b:ec:78:da:ba:3f:3d:85:10: 7e:5d:a6:bf:fc:a4:6b:f2:56:18:59:48:fb:8b:7c: 71:87:46:65:97:c1:26:e5:d4:e9:01:cc:2f:55:c1: 79:6d:19:7e:36:f6:98:c5:55:39:51:55:53:37:bb: 44:2a:23:c7:d1:a7:e1:ed:49:af:7a:a4:1d:83:8d: 45:b4:53:05:5a:51:77:a4:0c:70:08:55:43:2f:74: 01:04:4f:57:91:8f:19:6a:2e:36:b2:3a:50:2c:e8: 87:f0:16:57:33:e7:37:1c:a4:12:ec:c9:fc:3d:bc: d1:7f:d4:3d:9b:c7:24:24:1f:d2:e6:75:92:f9:28: 0b:21:b8:66:af:f3:9d:3b:db:2a:38:8a:53:dc:4b: 29:d5:50:a7:47:5b:ab:83:9f:44:f6:cc:47:41:f4: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:46:87:89:AF:42:5A:29:EE:42:1F:8C:A7:66:8C:16:E7:DC:30:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b1f7735-4c33-3f50-bd4f-7b6a26d2be92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d1:52:01:05:1c:8b:f7:7f:66:ea:fa:7b:71:98:14:fc:25: 7d:1d:f2:4e:24:a8:ad:e3:fa:e7:7c:2e:3b:b1:9e:bc:03:ad: 12:92:e5:a0:3c:4b:a5:99:94:bd:98:d6:2d:cb:75:27:f9:b1: cf:21:84:61:01:20:df:22:f0:82:1b:9a:07:1e:59:d9:98:d8: c1:40:ec:e8:37:a9:b6:b2:4a:58:e5:f0:61:7f:45:1b:4b:99: 29:23:0b:ef:79:c0:6a:2c:b4:a8:36:17:14:2c:90:a4:3a:21: 04:57:fd:88:88:ef:2e:e2:8b:d4:7f:c6:7d:a1:52:a5:eb:3c: 81:36:37:19:f4:2b:9b:f3:43:f0:a9:78:15:ee:b2:ec:2f:61: 44:08:88:c9:ab:e6:5a:ed:b5:5b:5b:70:05:bf:9b:57:5a:59: 06:cd:69:40:5e:7b:74:36:be:9f:ca:09:da:66:fb:06:95:da: 75:b4:f8:76:c2:0a:fc:9d:4d:94:b1:75:5e:fa:9c:00:39:be: af:b4:82:34:e5:2a:0d:ef:02:67:d6:2f:85:77:b1:d7:8b:e1: 25:c8:ff:99:28:94:46:03:77:28:e6:ab:93:25:0b:ed:2d:18: 02:60:33:87:ec:69:50:96:9a:79:77:e9:8e:b0:dc:9c:df:9f: 26:25:d9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwH5Ncfypw5GtJVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk ZjU3NWY0NGMtNmQ3Yy00MjQzLTkxMjgtYjhhZmYzNjA1YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwGzUpxEmeKs/zkInNsT/Bt9pJOje4ropVtZ 5OPJ/llwJGM2eaqi8QocMidPHcRMhJAEHBARRSF06d3y5HLbuo1nb51PoIzojnFU QYncGwKyi7vDNFILIctn7dpZLzYb7Hjauj89hRB+Xaa//KRr8lYYWUj7i3xxh0Zl l8Em5dTpAcwvVcF5bRl+NvaYxVU5UVVTN7tEKiPH0afh7UmveqQdg41FtFMFWlF3 pAxwCFVDL3QBBE9XkY8Zai42sjpQLOiH8BZXM+c3HKQS7Mn8PbzRf9Q9m8ckJB/S 5nWS+SgLIbhmr/OdO9sqOIpT3Esp1VCnR1urg59E9sxHQfQGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5Gh4mvQlop7kIfjKdmjBbn3DBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWIxZjc3MzUtNGMzMy0z ZjUwLWJkNGYtN2I2YTI2ZDJiZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPRUgEFHIv3f2bq+ntxmBT8JX0d8k4kqK3j+ud8LjuxnrwDrRKS5aA8 S6WZlL2Y1i3LdSf5sc8hhGEBIN8i8IIbmgceWdmY2MFA7Og3qbaySljl8GF/RRtL mSkjC+95wGostKg2FxQskKQ6IQRX/YiI7y7ii9R/xn2hUqXrPIE2Nxn0K5vzQ/Cp eBXusuwvYUQIiMmr5lrttVtbcAW/m1daWQbNaUBee3Q2vp/KCdpm+waV2nW0+HbC CvydTZSxdV76nAA5vq+0gjTlKg3vAmfWL4V3sdeL4SXI/5kolEYDdyjmq5MlC+0t GAJgM4fsaVCWmnl36Y6w3JzfnyYl2fE= -----END CERTIFICATE-----Generated at Sat Jun 6 15:53:57 2026 by rpki-client