$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ba4c3de-ed1c-31b5-8e04-f3813841df1d.roa File: 2ba4c3de-ed1c-31b5-8e04-f3813841df1d.roa (raw, json) Hash identifier: QDp0zyWZ6xJFdCk6kuC37dJTyqshJN8qMYMfLbe9E10= Subject key identifier: 0F:39:65:C9:D9:EF:A9:C2:D9:F5:03:AF:3C:F4:66:67:7A:8B:84:31 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F498A0966D842B200F2D46880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ba4c3de-ed1c-31b5-8e04-f3813841df1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 198.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:09:66:d8:42:b2:00:f2:d4:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c6a9433-5017-4d77-815f-49d8c8812fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:62:7d:48:4e:3b:8a:94:46:e0:de:5c:17:07: 0b:fd:31:e4:90:23:cc:41:03:ea:8e:be:92:32:5b: 78:d1:21:b9:32:e3:28:24:4c:60:36:db:32:22:fe: 34:01:3e:bc:e2:07:93:b5:01:a5:cb:c3:c5:1f:a0: d1:c5:e8:19:9b:4b:9c:a8:6d:dd:d7:c2:76:ed:b8: db:e9:23:fa:97:db:3d:44:ba:46:13:83:0f:bd:4a: 3e:59:b5:06:fe:d9:78:37:a8:f8:ec:72:b8:fc:13: 4b:4c:1c:3f:91:7f:5e:7c:c0:25:02:2a:bc:e1:81: 14:58:e3:77:e2:4a:ce:29:cd:40:ae:0a:52:8e:70: 52:ab:1a:c2:ed:0e:62:28:ef:0d:d7:db:94:86:c6: f6:b3:c6:c0:30:68:bf:06:61:98:42:ae:8f:97:e2: 28:05:6e:64:20:9e:38:2c:ad:c5:70:5f:a3:6d:03: 66:0e:12:e7:e1:e3:de:79:06:31:9c:a5:a6:b6:ae: e4:e8:e5:00:3d:e5:8d:92:8b:14:61:b6:86:c5:49: a5:dd:1c:68:cc:40:a7:d6:a3:13:26:bb:1e:de:e9: e3:7f:a2:c8:ea:86:ee:1e:e0:8f:2a:0f:d5:27:b3: bb:d2:92:af:bc:af:ee:a5:ee:4c:f1:d7:28:22:64: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:39:65:C9:D9:EF:A9:C2:D9:F5:03:AF:3C:F4:66:67:7A:8B:84:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ba4c3de-ed1c-31b5-8e04-f3813841df1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a4:82:62:9c:c6:72:64:5c:31:8c:cd:e8:29:4f:6a:38:f4: 57:c4:ba:c6:5a:d8:31:7e:3c:55:6c:93:76:d7:1d:a4:1d:58: 6e:22:e7:3b:98:e3:dd:ac:99:b0:ce:bf:b8:ce:63:eb:fb:71: 52:ff:6d:b9:a1:f8:94:32:08:80:01:0d:37:3c:9f:ca:e7:a4: fa:36:f8:01:81:6d:b1:54:4e:72:2d:f4:07:8d:07:ef:45:28: 62:ba:db:ad:8f:05:70:e1:52:69:fc:3b:44:cf:2f:f7:08:86: e7:46:9e:e8:73:7c:28:59:65:42:44:ab:a5:49:bd:2e:82:7d: 59:c1:bd:80:48:aa:73:65:b4:65:4a:cf:7a:47:e4:95:7d:83: 81:35:14:00:de:50:ec:65:2a:df:37:ac:29:b3:c0:71:e8:23: 01:13:f5:c9:0f:ad:c8:8e:b8:2b:8f:66:9f:7a:ab:31:9f:23: 8d:20:18:23:f0:54:92:27:28:d5:59:3b:fa:d3:0a:f0:ff:a3: 1a:52:9a:ed:df:e2:32:cb:b8:93:2f:c7:ff:f3:6d:c9:cc:a1: 22:f0:57:0d:98:93:19:08:55:be:5c:f8:06:3b:a7:a3:6e:dc: 23:84:72:ee:c1:56:65:bb:5b:59:0f:cf:1a:f4:35:a0:1a:d8: b9:8e:aa:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiglm2EKyAPLUaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWM2YTk0MzMtNTAxNy00ZDc3LTgxNWYtNDlkOGM4ODEyZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mJ9SE47ipRG4N5cFwcL/THkkCPMQQPqjr6S Mlt40SG5MuMoJExgNtsyIv40AT684geTtQGly8PFH6DRxegZm0ucqG3d18J27bjb 6SP6l9s9RLpGE4MPvUo+WbUG/tl4N6j47HK4/BNLTBw/kX9efMAlAiq84YEUWON3 4krOKc1ArgpSjnBSqxrC7Q5iKO8N19uUhsb2s8bAMGi/BmGYQq6Pl+IoBW5kIJ44 LK3FcF+jbQNmDhLn4ePeeQYxnKWmtq7k6OUAPeWNkosUYbaGxUml3RxozECn1qMT Jrse3unjf6LI6obuHuCPKg/VJ7O70pKvvK/upe5M8dcoImSWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA85ZcnZ76nC2fUDrzz0Zmd6i4QxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmJhNGMzZGUtZWQxYy0z MWI1LThlMDQtZjM4MTM4NDFkZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEikgmKcxnJkXDGMzegpT2o49FfEusZa2DF+PFVsk3bXHaQdWG4i5zuY 492smbDOv7jOY+v7cVL/bbmh+JQyCIABDTc8n8rnpPo2+AGBbbFUTnIt9AeNB+9F KGK6262PBXDhUmn8O0TPL/cIhudGnuhzfChZZUJEq6VJvS6CfVnBvYBIqnNltGVK z3pH5JV9g4E1FADeUOxlKt83rCmzwHHoIwET9ckPrciOuCuPZp96qzGfI40gGCPw VJInKNVZO/rTCvD/oxpSmu3f4jLLuJMvx//zbcnMoSLwVw2YkxkIVb5c+AY7p6Nu 3COEcu7BVmW7W1kPzxr0NaAa2LmOqmE= -----END CERTIFICATE-----Generated at Sat Sep 26 07:46:23 2026 by rpki-client