$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/901152c9-3ef0-3b51-bd42-88e0a27a42f1.roa File: 901152c9-3ef0-3b51-bd42-88e0a27a42f1.roa (raw, json) Hash identifier: 0/5DEFeHhH8x48KWcrPy6qILowGLLiJ+5A6EbIxXXHY= Subject key identifier: 86:FB:80:2B:0C:EF:94:D4:48:D9:46:77:1B:B9:DB:AA:4A:FE:82:18 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EA79391CDA3724D60B493BC00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/901152c9-3ef0-3b51-bd42-88e0a27a42f1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 198.20.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:91:cd:a3:72:4d:60:b4:93:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=96ed860b-e0e9-4c66-9f48-ef50879cffa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:83:f2:02:10:3f:75:c1:9d:4d:6e:97:d4: d7:3c:a6:1d:1c:9c:5e:90:ad:6f:73:3f:1c:85:be: e3:6f:fb:b7:99:a9:9f:7a:f7:65:08:a8:6d:17:e0: 54:c4:fe:32:f2:df:b6:86:4a:4d:70:ff:85:4f:ec: 86:c3:d5:19:20:da:4c:2c:c6:d7:24:fa:87:9f:c3: 67:38:3a:91:6a:83:35:11:4e:8c:9a:7b:42:f5:4c: 2e:33:f6:00:ac:e7:e6:c9:86:6b:2a:2d:eb:a0:ac: 03:0b:ab:27:05:b5:b0:31:b9:28:61:53:bc:ea:0b: 3b:b9:97:c2:ad:78:6a:07:6f:73:60:35:13:99:1a: fe:61:38:e5:b0:57:01:e8:93:11:eb:46:7b:07:02: dd:23:ba:fd:42:26:6c:30:2c:a7:bb:6f:82:21:00: 16:b7:ee:75:b1:43:94:3b:2f:1d:f2:93:77:14:01: 65:23:a0:4a:ad:d4:78:88:21:8c:58:60:92:88:17: b2:31:18:c2:c8:66:e6:cc:de:40:78:a5:f2:99:62: 4d:49:32:b3:65:81:9b:c4:77:89:e7:e7:cd:23:ca: e1:7f:57:00:ed:d7:5a:42:fa:0d:4a:15:ca:57:92: cd:17:08:58:22:86:4a:de:fe:72:1e:d2:3f:f5:a3: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:80:2B:0C:EF:94:D4:48:D9:46:77:1B:B9:DB:AA:4A:FE:82:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/901152c9-3ef0-3b51-bd42-88e0a27a42f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b0:76:1a:8d:c2:5d:fa:16:33:82:18:19:50:fc:40:9b:71: 27:37:eb:6f:97:35:68:fe:f8:56:56:3b:fc:6b:d4:7b:1b:98: 94:1b:97:39:44:7b:fd:d9:38:da:3c:e8:35:8e:67:78:e6:ed: 71:a5:f5:ea:23:dc:8c:6e:c6:70:c5:ef:fd:d2:f3:21:ee:c2: 84:73:a3:a3:86:a4:b8:6b:40:63:c4:23:ea:98:fb:75:d8:9f: cd:af:29:40:5d:68:8c:4c:2c:df:7b:ba:18:63:97:fc:34:35: b1:4f:8c:6e:57:81:a0:cd:cb:58:66:3b:62:34:e3:5b:a5:e8: e9:cb:51:60:7a:73:20:8e:34:db:c9:64:46:f5:26:91:95:59: 1d:6e:27:62:dc:4d:4d:7c:9b:db:98:d4:a9:c1:05:87:a7:7e: 66:ec:2e:37:58:bb:2f:d2:7a:a6:fc:c0:0d:32:f4:eb:cf:8a: af:cd:1e:11:cc:f7:c4:d3:4d:16:b1:38:fa:c1:90:04:d2:5e: 4e:e8:58:60:11:58:18:a1:a3:97:f0:98:b1:c7:c0:af:0d:ad: 77:81:a1:19:49:ea:0b:ec:b2:4e:bf:c4:e9:66:d6:88:4b:59: 9c:eb:2c:18:85:e1:f7:50:ce:36:9e:a1:d7:f5:96:0f:e5:7f: 20:d9:60:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk5HNo3JNYLSTvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTZlZDg2MGItZTBlOS00YzY2LTlmNDgtZWY1MDg3OWNmZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB+D8gIQP3XBnU1ul9TXPKYdHJxekK1vcz8c hb7jb/u3mamfevdlCKhtF+BUxP4y8t+2hkpNcP+FT+yGw9UZINpMLMbXJPqHn8Nn ODqRaoM1EU6MmntC9UwuM/YArOfmyYZrKi3roKwDC6snBbWwMbkoYVO86gs7uZfC rXhqB29zYDUTmRr+YTjlsFcB6JMR60Z7BwLdI7r9QiZsMCynu2+CIQAWt+51sUOU Oy8d8pN3FAFlI6BKrdR4iCGMWGCSiBeyMRjCyGbmzN5AeKXymWJNSTKzZYGbxHeJ 5+fNI8rhf1cA7ddaQvoNShXKV5LNFwhYIoZK3v5yHtI/9aP0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb7gCsM75TUSNlGdxu526pK/oIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTAxMTUyYzktM2VmMC0z YjUxLWJkNDItODhlMGEyN2E0MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWwdhqNwl36FjOCGBlQ/ECbcSc362+XNWj++FZWO/xr1HsbmJQblzlE e/3ZONo86DWOZ3jm7XGl9eoj3IxuxnDF7/3S8yHuwoRzo6OGpLhrQGPEI+qY+3XY n82vKUBdaIxMLN97uhhjl/w0NbFPjG5XgaDNy1hmO2I041ul6OnLUWB6cyCONNvJ ZEb1JpGVWR1uJ2LcTU18m9uY1KnBBYenfmbsLjdYuy/Seqb8wA0y9OvPiq/NHhHM 98TTTRaxOPrBkATSXk7oWGARWBiho5fwmLHHwK8NrXeBoRlJ6gvssk6/xOlm1ohL WZzrLBiF4fdQzjaeodf1lg/lfyDZYNc= -----END CERTIFICATE-----Generated at Thu Aug 27 14:24:06 2026 by rpki-client