$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0241ccfb-2ee8-3562-8077-48c46a0bda08.roa File: 0241ccfb-2ee8-3562-8077-48c46a0bda08.roa (raw, json) Hash identifier: C693OWIsKOcE23gEOQwPIwm+CxjyZLB92h0PiDfXWDU= Subject key identifier: 72:46:A1:C4:DE:E5:9A:5B:82:23:7E:4D:D1:63:70:6A:C0:89:1A:57 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F498BF29A7A1937CD4E280480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0241ccfb-2ee8-3562-8077-48c46a0bda08.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 198.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:f2:9a:7a:19:37:cd:4e:28:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1571b3cb-39e2-4839-8c1d-c17826b8cbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:39:3f:7c:8f:65:a5:bd:c8:2b:b5:fc:89: 23:d1:1f:79:83:a3:4f:b9:b6:69:55:30:9b:76:6e: 95:3e:69:fa:e0:0f:a6:9f:bb:95:40:ff:60:4d:db: 60:d4:d9:c8:95:ee:d8:c0:94:ec:f1:8d:23:69:6f: d6:f7:a2:d2:3e:8f:1f:31:ad:8e:c0:8a:8a:c1:f6: 1a:81:7b:f8:55:25:a1:46:a7:44:58:7f:a4:9d:85: eb:c7:ac:10:87:c0:d4:82:cf:bd:a3:20:54:6e:16: c9:99:7f:76:1a:93:eb:e2:9f:dc:04:8f:e5:ac:2c: 4d:6f:20:14:28:03:00:4b:20:47:48:c1:05:23:44: ee:a9:6e:84:2e:d0:08:07:05:db:a3:04:30:c5:0f: 90:b2:5b:17:89:8d:ec:20:9e:21:f5:c7:1c:b0:56: cd:62:0f:d0:02:0e:c8:bf:b4:57:8c:7e:77:49:03: 4c:82:16:9f:bc:9e:c1:56:1a:76:a8:b5:2d:e3:bc: 86:43:7d:d0:9e:e5:7c:8b:73:24:e5:2d:8d:ff:87: 51:44:4b:b0:cd:0d:35:c6:2c:35:84:53:07:1f:a2: 0e:dc:a8:b4:c1:cc:0c:51:e0:92:35:85:be:81:c0: f7:00:04:76:e4:ac:ee:05:c2:bb:98:af:f5:78:54: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:A1:C4:DE:E5:9A:5B:82:23:7E:4D:D1:63:70:6A:C0:89:1A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0241ccfb-2ee8-3562-8077-48c46a0bda08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:15:aa:83:38:62:80:aa:57:7a:fd:1a:63:df:03:30:5d:b1: 55:ea:2d:1c:d1:a5:c7:44:50:c5:a4:63:dc:22:e2:f4:73:29: 95:23:c3:2c:71:30:cc:8d:87:7b:5a:fd:55:ab:15:6b:b9:cb: a9:14:88:ae:f5:a5:83:c2:2a:c9:0b:3b:d8:33:b6:af:0f:d9: 6b:82:79:62:7e:18:ec:84:cb:4d:ab:08:4d:0c:48:ea:5b:b9: ce:83:3a:97:8a:08:b8:73:cb:47:9f:c9:0a:4b:b3:db:19:d3: 3f:1d:24:97:4e:05:bf:7e:8f:37:02:b2:f6:64:45:f9:fb:b0: e8:6e:12:9e:56:4a:bc:b1:af:9a:6b:0b:d5:9a:1e:be:1e:5a: 2f:bd:cb:90:cb:7e:01:ba:a3:cf:70:1c:47:05:c1:b3:8b:40: 8a:9b:e3:16:a2:42:c6:f3:4d:cb:65:b3:57:b8:f1:0c:96:20: 58:f0:84:3c:c1:9d:92:f4:86:7b:fe:6f:c1:c9:78:d8:87:2f: e6:f9:06:f5:ec:57:fc:a5:4b:b2:ed:f1:46:c6:10:ac:e2:11: 8b:cc:63:a7:e2:e5:ce:c6:78:db:01:16:24:a5:93:8c:72:fe: 5c:72:ea:85:1a:31:a0:46:a7:03:c8:28:00:da:9d:a1:f8:bb: 69:7e:50:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji/Kaehk3zU4oBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTU3MWIzY2ItMzllMi00ODM5LThjMWQtYzE3ODI2YjhjYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnns5P3yPZaW9yCu1/Ikj0R95g6NPubZpVTCb dm6VPmn64A+mn7uVQP9gTdtg1NnIle7YwJTs8Y0jaW/W96LSPo8fMa2OwIqKwfYa gXv4VSWhRqdEWH+knYXrx6wQh8DUgs+9oyBUbhbJmX92GpPr4p/cBI/lrCxNbyAU KAMASyBHSMEFI0TuqW6ELtAIBwXbowQwxQ+QslsXiY3sIJ4h9cccsFbNYg/QAg7I v7RXjH53SQNMghafvJ7BVhp2qLUt47yGQ33QnuV8i3Mk5S2N/4dRREuwzQ01xiw1 hFMHH6IO3Ki0wcwMUeCSNYW+gcD3AAR25KzuBcK7mK/1eFTGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJGocTe5ZpbgiN+TdFjcGrAiRpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDI0MWNjZmItMmVlOC0z NTYyLTgwNzctNDhjNDZhMGJkYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYVqoM4YoCqV3r9GmPfAzBdsVXqLRzRpcdEUMWkY9wi4vRzKZUjwyxx MMyNh3ta/VWrFWu5y6kUiK71pYPCKskLO9gztq8P2WuCeWJ+GOyEy02rCE0MSOpb uc6DOpeKCLhzy0efyQpLs9sZ0z8dJJdOBb9+jzcCsvZkRfn7sOhuEp5WSryxr5pr C9WaHr4eWi+9y5DLfgG6o89wHEcFwbOLQIqb4xaiQsbzTctls1e48QyWIFjwhDzB nZL0hnv+b8HJeNiHL+b5BvXsV/ylS7Lt8UbGEKziEYvMY6fi5c7GeNsBFiSlk4xy /lxy6oUaMaBGpwPIKADanaH4u2l+UKY= -----END CERTIFICATE-----Generated at Sun Sep 27 11:59:36 2026 by rpki-client