$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/493b4914-df3d-3c8d-a9d0-686aaeb0764d.roa File: 493b4914-df3d-3c8d-a9d0-686aaeb0764d.roa (raw, json) Hash identifier: nk6vzkjLAeMkusvWAoRebT49pLGietgrUrsMToBg8fk= Subject key identifier: 93:5D:27:09:13:FA:69:DC:AC:C1:14:50:6E:1F:10:74:03:9B:2C:41 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F19FCE7B5944F23BD2C885A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/493b4914-df3d-3c8d-a9d0-686aaeb0764d.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 30058 IP address blocks: 198.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e7:b5:94:4f:23:bd:2c:88:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=cea63267-e968-4eee-b433-e0c580c5f0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:0e:53:50:2c:8f:d7:e2:e2:be:fc:05:29: 1b:4b:e2:78:5a:45:f9:ce:87:5d:d6:9d:52:a0:d0: ad:1d:2f:ea:0b:75:a2:f1:f9:e7:0a:b2:82:aa:aa: a2:e0:93:ef:f5:4d:14:d4:03:f2:68:56:86:74:b0: f1:d7:b4:77:cc:38:9f:30:31:68:22:ec:bb:b7:29: 74:fe:bd:d1:c9:5a:13:41:b7:3f:2f:47:47:16:38: d1:11:e5:a8:a8:4f:99:ef:85:54:48:a0:f3:7b:2e: 4a:21:f8:6c:50:07:18:b5:90:b4:8c:c7:fd:fd:84: a0:3f:82:ee:47:9f:9c:82:ad:6d:e7:72:63:84:d4: 1d:c7:0e:ed:92:70:e6:0d:a3:94:5c:c7:7d:26:c4: 99:68:0d:e4:19:e4:0c:12:00:38:a4:0e:cc:c1:ef: f6:2e:c1:66:6a:b1:86:99:23:ef:a0:b2:64:3f:fe: 6f:dc:aa:ed:5a:ac:58:b3:1a:b2:b3:0f:5c:0f:2e: 91:07:bd:a5:dc:0c:7f:75:ad:2d:c5:54:0d:3b:84: cf:f2:25:46:cc:4f:1a:8d:a6:5f:34:58:47:54:d7: b2:ba:d3:2d:88:0c:d9:42:3a:c2:10:59:2f:2f:c6: 1a:d0:d8:ae:58:0c:8c:ba:00:9a:ab:ee:6f:c1:b8: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5D:27:09:13:FA:69:DC:AC:C1:14:50:6E:1F:10:74:03:9B:2C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/493b4914-df3d-3c8d-a9d0-686aaeb0764d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:25:f4:f3:9f:79:fa:cf:92:c0:92:17:c9:47:e0:cf:aa:d0: 9d:50:3b:1d:b4:55:9b:40:27:7d:c3:1a:eb:17:90:49:56:71: 45:9e:a7:e1:2d:37:8e:77:ce:7c:ec:65:e7:e2:54:5a:46:c1: ab:5b:fd:6e:34:36:19:97:e6:ab:2a:e3:ec:70:42:46:6c:24: 6c:1f:5f:12:0d:29:f4:ed:61:ce:51:a7:a6:e0:ef:17:60:52: 5b:ff:e2:c9:ba:bb:d1:33:a6:f4:27:32:23:67:76:a4:1d:fb: ba:49:05:5b:97:80:28:95:68:bc:d6:96:7a:13:a0:ea:81:f8: 77:12:b0:6a:60:5b:ed:13:1f:cd:ee:4d:14:f9:22:5c:d2:4a: c3:06:0d:29:bb:ec:c8:54:6d:45:1a:ba:d8:f1:96:86:79:34: 14:e5:2f:66:d6:e5:46:3a:35:0f:b6:5e:2f:c6:cb:01:36:1f: 15:38:99:8d:7d:fa:fd:ab:0e:87:b5:7c:63:5d:12:e6:ad:f6: 5c:b4:6c:96:ab:9d:ad:8e:e3:40:7c:e0:a5:8c:e7:db:d3:3a: d0:ad:d3:ec:e9:a0:c8:c9:81:fc:cc:a1:58:46:c6:39:f8:9a: 60:60:06:df:c1:ca:81:e5:f5:b3:74:67:90:54:0d:ee:1f:c1: 89:cf:af:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/Oe1lE8jvSyIWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2VhNjMyNjctZTk2OC00ZWVlLWI0MzMtZTBjNTgwYzVmMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoYOU1Asj9fi4r78BSkbS+J4WkX5zodd1p1S oNCtHS/qC3Wi8fnnCrKCqqqi4JPv9U0U1APyaFaGdLDx17R3zDifMDFoIuy7tyl0 /r3RyVoTQbc/L0dHFjjREeWoqE+Z74VUSKDzey5KIfhsUAcYtZC0jMf9/YSgP4Lu R5+cgq1t53JjhNQdxw7tknDmDaOUXMd9JsSZaA3kGeQMEgA4pA7Mwe/2LsFmarGG mSPvoLJkP/5v3KrtWqxYsxqysw9cDy6RB72l3Ax/da0txVQNO4TP8iVGzE8ajaZf NFhHVNeyutMtiAzZQjrCEFkvL8Ya0NiuWAyMugCaq+5vwbiCCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNdJwkT+mncrMEUUG4fEHQDmyxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDkzYjQ5MTQtZGYzZC0z YzhkLWE5ZDAtNjg2YWFlYjA3NjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0l9POfefrPksCSF8lH4M+q0J1QOx20VZtAJ33DGusXkElWcUWep+Et N453znzsZefiVFpGwatb/W40NhmX5qsq4+xwQkZsJGwfXxINKfTtYc5Rp6bg7xdg Ulv/4sm6u9EzpvQnMiNndqQd+7pJBVuXgCiVaLzWlnoToOqB+HcSsGpgW+0TH83u TRT5IlzSSsMGDSm77MhUbUUautjxloZ5NBTlL2bW5UY6NQ+2Xi/GywE2HxU4mY19 +v2rDoe1fGNdEuat9ly0bJarna2O40B84KWM59vTOtCt0+zpoMjJgfzMoVhGxjn4 mmBgBt/ByoHl9bN0Z5BUDe4fwYnPr4I= -----END CERTIFICATE-----Generated at Mon Sep 21 13:59:47 2026 by rpki-client