$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac416ce-6dad-3b25-a882-b4f08959b7cf.roa File: cac416ce-6dad-3b25-a882-b4f08959b7cf.roa (raw, json) Hash identifier: Nm3dg9Fazu2MxPbYRwIzW3v5ZaQQrgkBpBL+k+TICYo= Subject key identifier: 56:7A:56:99:B9:9C:13:17:07:CD:57:9A:9A:37:F0:99:EF:EE:E0:26 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B882C5E5B1E5775A18B8C24E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac416ce-6dad-3b25-a882-b4f08959b7cf.roa Signing time: Wed 15 Oct 2025 17:07:02 +0000 ROA not before: Wed 15 Oct 2025 17:07:02 +0000 ROA not after: Tue 13 Jan 2026 18:07:02 +0000 asID: 149440 IP address blocks: 198.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:2c:5e:5b:1e:57:75:a1:8b:8c:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 15 17:07:02 2025 GMT Not After : Jan 13 18:07:02 2026 GMT Subject: CN=cfd3bc2d-2c33-42fc-bda5-90fd98c08c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:72:0f:8b:51:5d:e7:48:e1:b7:a9:78:8e: d0:0a:25:d2:44:98:30:cd:9d:9b:1a:c2:d4:c4:b8: 83:85:2f:bb:1c:69:5f:b1:60:26:0e:d8:de:00:0c: b6:21:91:69:01:4f:a6:83:30:6b:c4:bf:ed:e8:c6: f6:9d:84:17:08:f1:38:f1:76:1c:56:64:e3:53:20: 44:ff:ad:2a:71:58:13:5d:95:2a:0c:51:a2:d2:68: 40:57:33:e6:a3:6f:a2:21:85:e1:75:a7:2e:22:34: 47:77:4f:0f:c1:e3:5c:59:67:e8:5e:eb:12:a3:96: 1c:e3:ca:83:a2:7c:2b:9d:54:a2:47:6a:97:4c:59: 17:3e:8a:27:12:66:3d:de:9f:f6:8b:0a:a1:1a:0e: 67:20:db:7d:43:96:c0:26:a5:5c:59:6c:69:53:20: 93:9a:08:72:cc:9b:89:cc:53:0e:3a:b2:45:4f:bf: a4:85:1a:d5:de:a1:77:f4:18:ee:3d:f6:5d:59:9f: e2:9f:cd:00:eb:16:5a:28:e6:ef:65:13:c0:22:a7: a4:33:70:55:45:e5:92:b9:ee:69:00:4f:f6:6c:7d: 7d:90:51:df:cc:ab:56:20:de:89:62:bc:85:bf:d8: b1:6b:6d:76:c2:39:bf:92:df:6b:02:8f:78:2a:77: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7A:56:99:B9:9C:13:17:07:CD:57:9A:9A:37:F0:99:EF:EE:E0:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac416ce-6dad-3b25-a882-b4f08959b7cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:39:ac:dd:a6:1f:b3:1e:d8:ac:3e:35:9d:c8:1b:54:37:8b: e7:88:6c:be:1d:af:4c:87:b9:7c:04:d6:15:15:78:a0:4a:cc: df:43:d9:50:91:d8:a1:67:79:3e:83:be:4a:70:86:eb:01:b8: ff:fc:68:86:e6:7f:f4:c7:9b:0a:37:73:b6:0c:8d:30:fe:f8: 4a:dd:30:ef:af:ea:c5:53:03:c7:16:66:e9:37:02:44:b3:b5: 0d:67:31:d5:59:8a:93:20:3a:b2:5b:21:83:ca:41:46:69:e3: bf:24:f6:a3:74:65:08:c7:ec:25:1a:bb:55:7b:3d:76:57:6c: 9d:4b:ff:48:9b:90:20:c7:38:36:77:c0:27:91:51:a9:a4:cf: 26:05:18:8a:ab:48:fb:b3:63:3d:d9:a4:18:a8:e3:01:a3:0f: 39:5f:5c:14:68:94:e7:aa:d6:76:fb:71:22:78:ba:ff:dc:dc: f5:7e:35:81:73:36:0b:8d:53:a1:fc:bf:c6:18:9c:1d:b5:bc: 9a:22:3e:d2:47:af:f8:24:51:2c:32:00:ae:0c:c6:22:e0:9e: 96:5c:c4:b5:ff:a0:7b:d8:5f:e1:d4:93:63:02:4b:dc:de:61: 89:89:df:46:27:2c:6c:79:55:fb:fc:72:19:ad:21:96:4f:fc: d2:e1:68:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuILF5bHld1oYuMJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxNTE3MDcwMloXDTI2MDExMzE4MDcwMlowLzEtMCsGA1UEAxMk Y2ZkM2JjMmQtMmMzMy00MmZjLWJkYTUtOTBmZDk4YzA4YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNdyD4tRXedI4bepeI7QCiXSRJgwzZ2bGsLU xLiDhS+7HGlfsWAmDtjeAAy2IZFpAU+mgzBrxL/t6Mb2nYQXCPE48XYcVmTjUyBE /60qcVgTXZUqDFGi0mhAVzPmo2+iIYXhdacuIjRHd08PweNcWWfoXusSo5Yc48qD onwrnVSiR2qXTFkXPoonEmY93p/2iwqhGg5nINt9Q5bAJqVcWWxpUyCTmghyzJuJ zFMOOrJFT7+khRrV3qF39BjuPfZdWZ/in80A6xZaKObvZRPAIqekM3BVReWSue5p AE/2bH19kFHfzKtWIN6JYryFv9ixa212wjm/kt9rAo94Kndq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ6Vpm5nBMXB81Xmpo38Jnv7uAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2FjNDE2Y2UtNmRhZC0z YjI1LWE4ODItYjRmMDg5NTliN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA5rN2mH7Me2Kw+NZ3IG1Q3i+eIbL4dr0yHuXwE1hUVeKBKzN9D2VCR 2KFneT6DvkpwhusBuP/8aIbmf/THmwo3c7YMjTD++ErdMO+v6sVTA8cWZuk3AkSz tQ1nMdVZipMgOrJbIYPKQUZp478k9qN0ZQjH7CUau1V7PXZXbJ1L/0ibkCDHODZ3 wCeRUamkzyYFGIqrSPuzYz3ZpBio4wGjDzlfXBRolOeq1nb7cSJ4uv/c3PV+NYFz NguNU6H8v8YYnB21vJoiPtJHr/gkUSwyAK4MxiLgnpZcxLX/oHvYX+HUk2MCS9ze YYmJ30YnLGx5Vfv8chmtIZZP/NLhaDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:50 2025 by rpki-client