$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af13f2cc-9c63-3b87-8123-53914606c982.roa File: af13f2cc-9c63-3b87-8123-53914606c982.roa (raw, json) Hash identifier: KKp8mp+ybnBF9QVLDQGCSKvFKqoU/HLc8kvvi02lBAk= Subject key identifier: 17:B8:E5:18:77:55:0E:8D:F5:D3:53:31:4A:77:1E:4D:92:A9:6B:D8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CA5F7534C47747399EF797E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af13f2cc-9c63-3b87-8123-53914606c982.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 7029 IP address blocks: 198.20.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:53:4c:47:74:73:99:ef:79:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=86318508-3ff9-42f4-a636-554cfe054e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fc:9a:17:14:32:41:0f:50:fa:7d:1f:e0:bf: 75:ad:7c:24:db:95:9c:cd:e9:99:73:c2:85:1c:05: 5c:46:41:1b:cd:ed:bc:ea:c8:4e:6a:1a:d5:1f:d3: 56:9a:0f:d3:c9:98:b4:43:8d:84:ee:59:c7:5c:3b: 75:6b:d4:60:f6:d0:f7:95:a6:26:68:fa:cf:77:7a: 1c:75:df:11:af:0e:23:92:8e:e2:f3:80:fa:60:a0: fc:a4:36:f9:0a:aa:9e:eb:6f:9e:2d:52:49:a1:92: ec:b0:b8:d4:b1:79:c3:48:87:a0:fa:f2:7a:e4:d7: eb:28:62:a7:f8:99:66:8d:c3:3c:ca:ec:6a:57:fa: 9a:a3:99:97:96:0f:c2:8d:e8:4d:d1:cb:bd:37:52: 1c:fb:8e:48:fa:f5:2e:f6:c2:2b:aa:8d:1c:df:4c: f5:33:4c:b2:4a:25:57:75:5c:80:e3:0c:8d:b2:9f: b0:f5:39:0c:23:e7:8d:fe:3c:fd:bd:ad:6a:56:48: 25:95:a9:ff:d6:23:9e:ea:3e:f6:c2:90:8d:57:7b: de:0d:e7:23:83:65:90:ee:16:f6:f2:c8:61:12:a2: f5:7b:3e:08:90:5d:2b:1b:39:3f:31:18:98:fa:5d: 74:ee:96:df:92:31:80:be:a4:2a:08:d5:78:c9:a5: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:E5:18:77:55:0E:8D:F5:D3:53:31:4A:77:1E:4D:92:A9:6B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af13f2cc-9c63-3b87-8123-53914606c982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b7:9a:87:c4:b9:4e:cf:8b:db:6c:fd:b2:07:0b:aa:09:bc: 25:5f:cb:10:99:f9:8b:3d:16:41:71:74:fd:16:9c:55:c6:10: ac:c6:c2:b0:de:12:eb:f2:05:88:37:15:05:be:5a:48:2b:8f: b1:21:5d:7c:2b:b4:5a:b3:71:5b:2f:96:2f:00:92:fd:69:53: 15:6b:61:61:e5:fd:39:bc:44:da:96:3e:06:3c:77:f5:44:0a: 8f:82:c1:1a:78:2b:15:be:94:f4:79:a6:dd:dd:7e:31:38:79: 29:91:bd:58:89:4e:21:67:47:f7:f7:d2:25:f1:38:d0:08:c4: ce:b9:c1:f8:fc:2f:67:77:a4:64:05:32:8c:62:a7:58:5d:bf: 2d:b6:ef:1e:26:65:d0:d0:6c:62:df:31:da:59:d3:b6:b5:dd: 0b:0f:0f:c9:7b:4f:95:30:64:ae:7a:4b:2b:9a:dd:9d:49:30: 24:ff:84:b0:68:80:43:5f:9c:5d:0e:cd:70:4e:96:33:7f:84: 76:d7:46:77:2d:22:7e:58:d8:8a:e3:ab:8f:ec:ac:61:6e:75: 08:b3:ea:86:6c:e1:f5:8c:c5:0d:a9:73:7a:3b:b4:6f:55:c2: 27:79:13:72:97:5f:db:2a:38:9d:e1:42:3f:e6:67:55:96:80: 5c:97:a2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl91NMR3Rzme95fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ODYzMTg1MDgtM2ZmOS00MmY0LWE2MzYtNTU0Y2ZlMDU0ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fyaFxQyQQ9Q+n0f4L91rXwk25WczemZc8KF HAVcRkEbze286shOahrVH9NWmg/TyZi0Q42E7lnHXDt1a9Rg9tD3laYmaPrPd3oc dd8Rrw4jko7i84D6YKD8pDb5Cqqe62+eLVJJoZLssLjUsXnDSIeg+vJ65NfrKGKn +JlmjcM8yuxqV/qao5mXlg/CjehN0cu9N1Ic+45I+vUu9sIrqo0c30z1M0yySiVX dVyA4wyNsp+w9TkMI+eN/jz9va1qVkgllan/1iOe6j72wpCNV3veDecjg2WQ7hb2 8shhEqL1ez4IkF0rGzk/MRiY+l107pbfkjGAvqQqCNV4yaXlYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe45Rh3VQ6N9dNTMUp3Hk2SqWvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWYxM2YyY2MtOWM2My0z Yjg3LTgxMjMtNTM5MTQ2MDZjOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS3mofEuU7Pi9ts/bIHC6oJvCVfyxCZ+Ys9FkFxdP0WnFXGEKzGwrDe EuvyBYg3FQW+Wkgrj7EhXXwrtFqzcVsvli8Akv1pUxVrYWHl/Tm8RNqWPgY8d/VE Co+CwRp4KxW+lPR5pt3dfjE4eSmRvViJTiFnR/f30iXxONAIxM65wfj8L2d3pGQF Moxip1hdvy227x4mZdDQbGLfMdpZ07a13QsPD8l7T5UwZK56Syua3Z1JMCT/hLBo gENfnF0OzXBOljN/hHbXRnctIn5Y2Irjq4/srGFudQiz6oZs4fWMxQ2pc3o7tG9V wid5E3KXX9sqOJ3hQj/mZ1WWgFyXoqE= -----END CERTIFICATE-----Generated at Thu Feb 26 09:30:10 2026 by rpki-client