$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfeac281-9085-33cc-999e-5d8568f15439.roa File: bfeac281-9085-33cc-999e-5d8568f15439.roa (raw, json) Hash identifier: GLpX6td8QYWAZ9zRmcgDEWELzlocAtb/YZNSVTwbJbY= Subject key identifier: 5A:B7:A6:8C:9D:24:1F:C0:A0:8E:9C:14:F0:60:01:E1:B4:02:D5:F9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B7DECCC549F330FB86FF8DEC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfeac281-9085-33cc-999e-5d8568f15439.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 198.20.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:cc:54:9f:33:0f:b8:6f:f8:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=6d52938c-27b1-4f16-aa83-602a42e38c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:e2:64:1e:38:a9:c3:15:6e:06:71:2b:69: d2:2b:58:64:cf:da:ee:ca:10:26:31:0f:d0:e0:c4: cc:09:64:9e:96:39:98:75:27:2f:6b:d0:68:ff:24: 79:4f:bf:b0:20:0a:f9:31:3d:f1:48:12:e8:4e:7c: 5f:73:a7:52:3a:9d:6e:f6:ec:29:0d:0d:6e:38:8c: c5:0c:f8:8a:a5:9b:06:b4:4b:82:1f:a4:d4:f8:ee: 03:60:9b:8d:45:b5:f1:7d:f7:07:a4:72:b6:8c:b2: cd:f3:36:f0:42:db:f6:62:74:3d:8b:8a:0a:de:84: 5b:c6:97:cb:10:48:34:af:0c:0b:40:55:41:2d:64: 91:a7:84:f1:a6:99:7a:b2:9e:71:d9:5b:2c:ad:7e: e8:56:7c:39:0d:f4:3b:5a:08:ad:f5:11:03:c6:31: 66:21:fb:6d:64:28:4d:ff:79:ab:71:bd:8a:47:26: 58:a7:57:79:a7:50:2f:e4:f2:1d:1d:31:a2:11:f0: 0d:81:cf:0f:8b:4f:b4:c9:24:6e:de:ba:e1:65:d8: 1c:55:d9:11:36:15:4a:7f:8f:5a:7f:8d:d1:bd:42: b6:61:d4:67:2b:27:84:42:51:a1:3e:5c:a4:e6:7f: 64:59:6c:02:7d:b5:52:1e:bb:2a:2b:e1:50:bf:77: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B7:A6:8C:9D:24:1F:C0:A0:8E:9C:14:F0:60:01:E1:B4:02:D5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfeac281-9085-33cc-999e-5d8568f15439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:60:9d:33:ab:1e:f7:64:bb:6b:52:93:33:73:4d:e0:24:a6: 1c:06:05:03:af:df:71:34:46:1c:da:4a:dd:fd:32:1d:1f:4b: 0a:9a:9a:eb:51:c5:75:18:6a:4e:d1:6c:61:19:0a:a2:f9:59: 6c:83:ae:94:a7:46:2d:80:47:67:07:7c:a1:dd:2a:05:a4:7d: 8f:bf:3c:53:86:f0:f4:3e:56:5a:50:ca:a5:a8:55:b3:8c:8b: dd:6c:22:da:c4:17:b0:65:17:d7:a7:f0:fb:93:8c:d9:ca:95: b8:8a:d5:f3:b5:20:6f:a8:a6:2f:0f:8c:84:03:ce:52:b2:49: 3b:0c:91:74:93:82:2b:27:47:00:8b:d7:96:04:7c:d9:ac:88: 71:c3:3b:cf:cf:f3:14:c4:0d:23:0f:5e:d7:13:7f:ec:88:5b: 4b:bc:88:e4:6b:5a:8c:57:55:04:9b:51:01:99:13:22:29:8e: 14:82:2b:48:fa:5e:6e:44:be:b5:ad:25:8a:b8:5a:a7:ec:8d: d5:94:1f:36:b2:3f:56:4c:c6:bb:98:45:68:ad:1e:57:ea:f3: 2a:65:a9:59:7b:2a:ef:ea:f3:77:45:9f:38:41:ee:75:d9:93: 44:ff:18:d1:32:5f:79:3b:ea:e3:3e:f5:69:97:6c:c5:eb:bf: a8:77:12:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MxUnzMPuG/43sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NmQ1MjkzOGMtMjdiMS00ZjE2LWFhODMtNjAyYTQyZTM4YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveXiZB44qcMVbgZxK2nSK1hkz9ruyhAmMQ/Q 4MTMCWSeljmYdScva9Bo/yR5T7+wIAr5MT3xSBLoTnxfc6dSOp1u9uwpDQ1uOIzF DPiKpZsGtEuCH6TU+O4DYJuNRbXxffcHpHK2jLLN8zbwQtv2YnQ9i4oK3oRbxpfL EEg0rwwLQFVBLWSRp4Txppl6sp5x2VssrX7oVnw5DfQ7Wgit9REDxjFmIfttZChN /3mrcb2KRyZYp1d5p1Av5PIdHTGiEfANgc8Pi0+0ySRu3rrhZdgcVdkRNhVKf49a f43RvUK2YdRnKyeEQlGhPlyk5n9kWWwCfbVSHrsqK+FQv3etCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq3poydJB/AoI6cFPBgAeG0AtX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmZlYWMyODEtOTA4NS0z M2NjLTk5OWUtNWQ4NTY4ZjE1NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFgnTOrHvdku2tSkzNzTeAkphwGBQOv33E0RhzaSt39Mh0fSwqamutR xXUYak7RbGEZCqL5WWyDrpSnRi2AR2cHfKHdKgWkfY+/PFOG8PQ+VlpQyqWoVbOM i91sItrEF7BlF9en8PuTjNnKlbiK1fO1IG+opi8PjIQDzlKySTsMkXSTgisnRwCL 15YEfNmsiHHDO8/P8xTEDSMPXtcTf+yIW0u8iORrWoxXVQSbUQGZEyIpjhSCK0j6 Xm5EvrWtJYq4WqfsjdWUHzayP1ZMxruYRWitHlfq8yplqVl7Ku/q83dFnzhB7nXZ k0T/GNEyX3k76uM+9WmXbMXrv6h3Eq4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:15 2025 by rpki-client