$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af13f2cc-9c63-3b87-8123-53914606c982.roa File: af13f2cc-9c63-3b87-8123-53914606c982.roa (raw, json) Hash identifier: wQQryoY2ML8wxy8ifyieSbDevreGv/T8XwClP4XrrxQ= Subject key identifier: 6D:19:08:7C:22:78:5B:45:52:BF:7D:27:E6:23:D2:3E:C3:02:20:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F093D18D3542B1B6FC1F26700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af13f2cc-9c63-3b87-8123-53914606c982.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 198.20.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:18:d3:54:2b:1b:6f:c1:f2:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=1a07afc0-2776-45cb-93ab-5754ae801fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:05:70:79:85:68:8f:f5:aa:af:17:d3:e0: a8:a5:73:7e:60:2b:24:c0:b4:14:22:bb:92:06:ec: 11:62:a0:e1:87:5b:54:d5:77:e6:94:58:ee:a2:94: 2f:7f:29:51:2c:39:f3:01:ef:4e:9e:f9:15:9d:4a: a9:a4:5a:e2:94:51:f4:e9:9b:1e:79:45:35:f8:32: 85:5c:21:0c:37:ba:b3:b4:8f:4f:76:5d:53:fe:53: 15:5c:be:14:40:4b:37:63:ea:44:7a:bd:b8:7e:53: 75:a8:7e:5e:d6:5e:32:fa:12:36:e4:12:15:12:1a: 02:3c:cf:f2:39:58:a3:65:81:2c:fd:fe:31:0b:34: 00:c8:04:98:76:df:6d:da:2d:bb:3a:7b:7a:53:f3: a8:71:c1:b4:1a:21:2a:b0:0c:b2:d8:3f:bc:06:9b: 87:ec:3a:5d:a8:52:26:eb:50:a8:5a:53:74:ee:d3: b0:98:5d:63:17:84:28:1f:ce:fe:38:03:b2:07:3d: 36:eb:20:5c:a3:d8:b2:ea:5c:e9:d8:63:96:8e:8c: 75:90:44:8f:f7:d2:18:1c:5c:a1:29:02:64:ae:32: a5:e9:d5:4b:94:70:b8:4b:eb:d8:5d:73:51:f0:3f: a7:70:1b:08:36:98:0a:c6:19:7c:61:06:eb:84:7b: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:08:7C:22:78:5B:45:52:BF:7D:27:E6:23:D2:3E:C3:02:20:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af13f2cc-9c63-3b87-8123-53914606c982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7a:39:70:6d:0d:e1:ed:a9:77:6a:64:64:eb:f3:13:77:2f: 2f:01:dd:2e:d1:cb:8d:44:b8:54:8b:16:f7:64:ba:74:03:11: 5f:90:e5:90:db:56:6c:ca:0e:14:8c:a5:65:6c:75:e5:65:43: 61:b5:82:9d:20:91:ad:90:29:86:83:cf:3f:7c:81:d7:12:50: 89:5e:c8:00:e6:eb:4e:b4:50:99:10:c9:f7:49:32:c1:ad:59: 4c:b5:fb:82:c8:d6:13:cf:e1:dd:58:79:e3:58:6f:c3:e3:64: a2:6f:d2:57:b4:d5:67:f9:e1:36:6c:6e:4d:fc:92:0e:03:73: 0e:49:2c:1f:19:9b:07:5c:ab:ae:ac:83:ae:07:e3:44:ad:74: fe:4e:0f:87:de:ad:73:a8:d6:4d:74:13:99:50:dc:b2:4b:7b: 88:25:5a:40:c1:c0:5a:32:e9:85:31:12:b8:1e:30:96:f9:eb: 0a:9b:96:c7:95:61:ad:4f:8b:8c:1c:e2:e0:4b:ab:8a:67:3a: 70:11:f6:57:ab:38:d0:1f:8a:64:99:de:4a:af:73:c8:ba:bb: af:59:1f:90:f6:c5:18:45:ca:94:4c:da:b9:0e:6e:1b:26:f9: d6:84:e1:8f:fb:26:c4:27:ce:c8:b9:a0:f3:41:15:eb:83:53: eb:bc:e2:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPRjTVCsbb8HyZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MWEwN2FmYzAtMjc3Ni00NWNiLTkzYWItNTc1NGFlODAxZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAkFcHmFaI/1qq8X0+CopXN+YCskwLQUIruS BuwRYqDhh1tU1XfmlFjuopQvfylRLDnzAe9OnvkVnUqppFrilFH06ZseeUU1+DKF XCEMN7qztI9Pdl1T/lMVXL4UQEs3Y+pEer24flN1qH5e1l4y+hI25BIVEhoCPM/y OVijZYEs/f4xCzQAyASYdt9t2i27Ont6U/OoccG0GiEqsAyy2D+8BpuH7DpdqFIm 61CoWlN07tOwmF1jF4QoH87+OAOyBz026yBco9iy6lzp2GOWjox1kESP99IYHFyh KQJkrjKl6dVLlHC4S+vYXXNR8D+ncBsINpgKxhl8YQbrhHuZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0ZCHwieFtFUr99J+Yj0j7DAiAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWYxM2YyY2MtOWM2My0z Yjg3LTgxMjMtNTM5MTQ2MDZjOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx6OXBtDeHtqXdqZGTr8xN3Ly8B3S7Ry41EuFSLFvdkunQDEV+Q5ZDb VmzKDhSMpWVsdeVlQ2G1gp0gka2QKYaDzz98gdcSUIleyADm6060UJkQyfdJMsGt WUy1+4LI1hPP4d1YeeNYb8PjZKJv0le01Wf54TZsbk38kg4Dcw5JLB8Zmwdcq66s g64H40StdP5OD4ferXOo1k10E5lQ3LJLe4glWkDBwFoy6YUxErgeMJb56wqblseV Ya1Pi4wc4uBLq4pnOnAR9lerONAfimSZ3kqvc8i6u69ZH5D2xRhFypRM2rkObhsm +daE4Y/7JsQnzsi5oPNBFeuDU+u84gI= -----END CERTIFICATE-----Generated at Sun Sep 20 18:52:56 2026 by rpki-client