$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac416ce-6dad-3b25-a882-b4f08959b7cf.roa File: cac416ce-6dad-3b25-a882-b4f08959b7cf.roa (raw, json) Hash identifier: 23JiWYcpslMXhH/JfDdGr8DELtIbo0sP6IA/c8rPWRc= Subject key identifier: 70:67:27:84:F8:B3:91:87:1A:58:DA:6B:D5:45:06:3C:75:FC:18:47 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D47C4E03E45F59E166DBF1AC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac416ce-6dad-3b25-a882-b4f08959b7cf.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 149440 IP address blocks: 198.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e0:3e:45:f5:9e:16:6d:bf:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=6c693430-ff70-41ec-b933-e3f0951d2c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:ab:f1:cf:3b:8a:e7:ea:fc:1d:1e:73:a4: 65:bb:84:f1:90:05:bf:e1:24:73:78:a7:6b:18:7d: a5:02:3b:d2:96:57:ce:ae:9a:92:03:2b:32:42:3e: 7d:27:50:5a:0b:8e:80:ed:1b:52:15:b2:a1:75:b6: 47:6b:5d:3f:12:36:44:11:e8:b4:9e:1b:90:5c:fd: 98:2a:45:8a:04:86:2e:c6:44:fb:46:7b:b7:44:82: ef:98:32:a1:e6:fe:20:6a:07:05:0d:05:a4:ed:fe: 2d:bf:be:41:e9:e2:33:8f:d8:a1:81:91:96:1a:29: 60:e9:03:e7:b3:52:8d:3e:a0:75:9f:ea:b7:f6:14: a9:77:07:3a:35:13:1f:83:96:19:c4:c6:04:7c:0a: ef:28:7b:0a:a6:51:ce:08:c7:7f:e1:04:23:4e:b3: 74:94:bc:02:b2:8d:df:52:4f:a7:cf:1d:e0:56:28: 32:5e:ec:51:8a:7e:b9:cb:fd:1e:7b:2a:a0:86:81: 4c:64:15:e7:20:1d:b9:6d:48:f5:ad:de:d9:55:b3: a2:40:f4:9d:9a:71:61:eb:17:c3:ef:5a:2c:eb:24: d1:8d:d5:7a:e5:f0:bc:53:e1:8d:e2:a3:4a:ec:be: ad:65:b9:6b:e1:b7:d2:00:7d:af:2e:83:15:47:0a: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:27:84:F8:B3:91:87:1A:58:DA:6B:D5:45:06:3C:75:FC:18:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac416ce-6dad-3b25-a882-b4f08959b7cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d3:00:54:83:55:3c:62:55:8a:27:72:37:a3:ec:1f:76:17: 2d:10:d8:46:e0:f7:fe:3d:b8:c4:15:a0:ea:ac:9d:4c:06:2e: 1a:c9:49:b5:e8:d4:51:cf:d4:f9:8f:c0:ac:25:c9:d4:a7:a1: 3d:b9:e0:50:50:af:0f:03:ca:db:cd:56:d9:48:a5:ee:77:56: 3f:34:8c:d9:be:e1:d8:0b:9f:4b:13:38:16:a7:ef:db:cd:ee: 28:49:7d:33:ff:ae:f5:9d:c2:94:f6:9f:50:a7:19:7f:a8:21: 09:c3:c8:10:6c:20:72:ab:42:81:63:bf:fe:27:c1:02:17:ec: 86:75:8f:1e:c4:96:e4:c3:5e:68:2e:e8:0e:a1:3d:57:8e:5b: f1:8e:b0:d7:f3:f0:36:e4:ed:e1:37:a9:23:a5:f2:17:4b:2e: 9b:cd:db:6b:64:db:a7:cf:ac:24:6c:3f:4b:cd:f1:5f:04:87: a8:8d:15:45:c0:c9:cb:90:4f:72:2e:7f:f3:a0:b0:b7:56:b1: eb:f4:3c:c1:93:23:5d:38:49:42:88:b8:50:29:1a:b7:4f:95: c2:67:76:e7:71:3f:ef:c7:30:3e:13:d6:1e:8f:3a:b8:71:23: c0:53:7c:ab:be:64:b0:31:6b:41:04:81:3d:e6:14:19:d6:80: 05:1a:e7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOA+RfWeFm2/GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NmM2OTM0MzAtZmY3MC00MWVjLWI5MzMtZTNmMDk1MWQyYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKr8c87iufq/B0ec6Rlu4TxkAW/4SRzeKdr GH2lAjvSllfOrpqSAysyQj59J1BaC46A7RtSFbKhdbZHa10/EjZEEei0nhuQXP2Y KkWKBIYuxkT7Rnu3RILvmDKh5v4gagcFDQWk7f4tv75B6eIzj9ihgZGWGilg6QPn s1KNPqB1n+q39hSpdwc6NRMfg5YZxMYEfArvKHsKplHOCMd/4QQjTrN0lLwCso3f Uk+nzx3gVigyXuxRin65y/0eeyqghoFMZBXnIB25bUj1rd7ZVbOiQPSdmnFh6xfD 71os6yTRjdV65fC8U+GN4qNK7L6tZblr4bfSAH2vLoMVRwolMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBnJ4T4s5GHGljaa9VFBjx1/BhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2FjNDE2Y2UtNmRhZC0z YjI1LWE4ODItYjRmMDg5NTliN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzTAFSDVTxiVYoncjej7B92Fy0Q2Ebg9/49uMQVoOqsnUwGLhrJSbXo 1FHP1PmPwKwlydSnoT254FBQrw8DytvNVtlIpe53Vj80jNm+4dgLn0sTOBan79vN 7ihJfTP/rvWdwpT2n1CnGX+oIQnDyBBsIHKrQoFjv/4nwQIX7IZ1jx7EluTDXmgu 6A6hPVeOW/GOsNfz8Dbk7eE3qSOl8hdLLpvN22tk26fPrCRsP0vN8V8Eh6iNFUXA ycuQT3Iuf/OgsLdWsev0PMGTI104SUKIuFApGrdPlcJndudxP+/HMD4T1h6POrhx I8BTfKu+ZLAxa0EEgT3mFBnWgAUa59A= -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:09 2026 by rpki-client