$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d769bb5-75d4-3d8f-8f28-05d1f14c3e50.roa File: 8d769bb5-75d4-3d8f-8f28-05d1f14c3e50.roa (raw, json) Hash identifier: UBrEnOOrD/cxXo17OgnAi6PVmFrRDOf6QrQhT7dF/3g= Subject key identifier: 00:2E:11:47:8A:24:96:25:C0:7F:29:26:D4:9D:03:CB:A6:91:1B:96 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B103512C75CBF653131906300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d769bb5-75d4-3d8f-8f28-05d1f14c3e50.roa Signing time: Tue 02 Sep 2025 17:47:34 +0000 ROA not before: Tue 02 Sep 2025 17:47:34 +0000 ROA not after: Mon 01 Dec 2025 18:47:34 +0000 asID: 399486 IP address blocks: 198.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:35:12:c7:5c:bf:65:31:31:90:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 17:47:34 2025 GMT Not After : Dec 1 18:47:34 2025 GMT Subject: CN=5c8ab896-9a10-4d15-ae7a-2fe0095b14f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:4e:08:56:7f:ec:9a:26:33:d5:a8:84:1e: 63:0d:e6:64:86:aa:65:a1:c0:2d:c9:f7:0e:26:fb: bb:74:b7:4d:fa:60:fa:67:6b:b8:a8:04:ce:b0:39: 95:30:8b:a1:61:4f:1d:79:ce:72:db:04:76:1d:76: d5:14:89:9f:06:d9:5c:b8:9e:38:ab:6f:74:8b:26: 8f:29:0d:98:e1:c4:96:9d:9b:7f:92:7c:df:63:65: 6d:b5:ce:61:60:0b:c7:31:75:96:42:f6:89:fe:fb: fc:38:62:56:d9:f5:e5:69:da:f4:87:07:9f:8a:63: 64:0b:d9:b3:9e:2c:c7:6d:47:d3:ef:d9:14:cc:6d: d6:f8:1c:d4:71:49:8d:7d:d0:99:88:a0:ff:6c:73: 0b:76:8f:dc:d6:db:f6:44:11:dc:e8:ce:a8:ee:75: 11:6c:85:18:ec:1b:84:2e:71:d9:14:14:47:2a:1d: 55:40:37:d5:dc:b3:08:a6:a3:06:fb:6c:86:37:c6: d8:eb:94:d1:db:94:bf:6b:71:20:a8:f6:e0:08:0c: 3f:de:3c:d0:cd:8f:5d:85:5b:e3:17:4b:1e:53:16: 3f:b2:32:90:79:e3:85:ff:de:95:fb:2f:76:ce:be: 49:ed:ad:61:5f:24:d8:7f:db:9f:4b:85:07:c6:12: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2E:11:47:8A:24:96:25:C0:7F:29:26:D4:9D:03:CB:A6:91:1B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d769bb5-75d4-3d8f-8f28-05d1f14c3e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f1:e7:22:66:a1:92:aa:2a:7d:ce:a9:f1:e5:27:7b:5d:90: 71:2b:34:7e:b9:33:3e:b8:6c:10:a8:00:5d:0a:8a:a6:e3:17: 3c:75:ac:1b:45:f4:f5:57:bc:86:40:fe:c3:3a:b2:07:41:1d: 58:7c:b7:02:9f:71:e8:d6:23:2c:56:16:c5:5a:28:16:b1:e0: 95:c1:12:42:51:df:f7:1e:6b:01:d5:8a:86:28:fc:44:56:50: 4d:b4:24:f3:19:f0:37:d1:71:b9:0d:1b:7e:26:5f:30:85:88: 11:f4:0c:d2:68:8f:e2:17:cf:9e:bd:15:c6:1e:5b:11:94:28: 96:38:f8:62:e0:86:94:98:fe:5d:4e:61:fb:c1:fa:c3:82:b0: 84:8b:48:78:4a:cf:d6:4c:b6:37:5a:d0:66:fd:91:9e:c4:62: 41:1c:f8:d6:ff:1b:bc:4f:1e:8f:78:b4:cb:37:de:71:2c:e5: 47:27:a2:49:7d:48:21:f1:d7:75:3f:6c:ae:1a:ba:0f:a9:97: 49:36:a7:bd:6d:af:56:25:a7:33:91:03:90:4b:0b:f6:5e:b1: e9:57:46:26:33:d4:cb:45:6b:01:39:62:51:71:47:95:b7:b9: c4:ea:5d:e9:50:7e:b3:c7:40:02:f6:a3:88:06:bb:17:b3:fc: 46:8b:3b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQNRLHXL9lMTGQYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjE3NDczNFoXDTI1MTIwMTE4NDczNFowLzEtMCsGA1UEAxMk NWM4YWI4OTYtOWExMC00ZDE1LWFlN2EtMmZlMDA5NWIxNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne9OCFZ/7JomM9WohB5jDeZkhqplocAtyfcO Jvu7dLdN+mD6Z2u4qATOsDmVMIuhYU8dec5y2wR2HXbVFImfBtlcuJ44q290iyaP KQ2Y4cSWnZt/knzfY2Vttc5hYAvHMXWWQvaJ/vv8OGJW2fXladr0hwefimNkC9mz nizHbUfT79kUzG3W+BzUcUmNfdCZiKD/bHMLdo/c1tv2RBHc6M6o7nURbIUY7BuE LnHZFBRHKh1VQDfV3LMIpqMG+2yGN8bY65TR25S/a3EgqPbgCAw/3jzQzY9dhVvj F0seUxY/sjKQeeOF/96V+y92zr5J7a1hXyTYf9ufS4UHxhIWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAuEUeKJJYlwH8pJtSdA8umkRuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGQ3NjliYjUtNzVkNC0z ZDhmLThmMjgtMDVkMWYxNGMzZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzx5yJmoZKqKn3OqfHlJ3tdkHErNH65Mz64bBCoAF0KiqbjFzx1rBtF 9PVXvIZA/sM6sgdBHVh8twKfcejWIyxWFsVaKBax4JXBEkJR3/ceawHVioYo/ERW UE20JPMZ8DfRcbkNG34mXzCFiBH0DNJoj+IXz569FcYeWxGUKJY4+GLghpSY/l1O YfvB+sOCsISLSHhKz9ZMtjda0Gb9kZ7EYkEc+Nb/G7xPHo94tMs33nEs5Ucnokl9 SCHx13U/bK4aug+pl0k2p71tr1YlpzORA5BLC/ZeselXRiYz1MtFawE5YlFxR5W3 ucTqXelQfrPHQAL2o4gGuxez/EaLO0M= -----END CERTIFICATE-----Generated at Sun Sep 7 12:35:26 2025 by rpki-client