$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/39639117-2855-3e47-ab10-957634cff08c.roa File: 39639117-2855-3e47-ab10-957634cff08c.roa (raw, json) Hash identifier: uegUbshKYV/KzdnFi4DWuHtWYbtPt8FFX5OLHTTEkh8= Subject key identifier: 30:F8:70:39:42:FF:6E:0C:5F:92:A6:68:AD:85:C0:64:C7:9C:6F:D6 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A1F9025CF0F248E3806FBEE00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/39639117-2855-3e47-ab10-957634cff08c.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 2152 IP address blocks: 198.189.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:25:cf:0f:24:8e:38:06:fb:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=b14318d8-1e07-481b-99bd-d5998cb42efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:f5:ad:df:74:c4:c1:c3:5a:dc:c4:73:d9: 95:1d:17:0d:4c:a8:20:73:d6:8a:0a:16:ff:f5:c7: c0:f8:d6:a2:97:08:1b:c5:0a:79:16:d3:f9:2e:1f: ef:ec:f8:51:60:39:6b:79:6f:ac:7a:25:af:53:b1: 2f:78:bc:7a:65:b0:eb:18:0d:ca:5b:bf:f9:20:92: 2e:7f:9e:34:23:d9:3f:de:eb:4b:7d:da:f3:c6:ae: 05:3f:80:31:15:6c:fa:a5:ef:d5:fc:6d:3b:c9:f5: 89:5b:e3:9f:18:16:ef:4b:c0:97:8a:f0:97:14:b4: 82:ee:97:3d:48:4c:92:e2:f6:8c:7b:ff:3b:d9:18: 10:27:58:66:6f:11:3a:9f:50:ca:eb:0a:b7:02:dd: 1b:e7:e7:48:c4:7e:fc:8a:22:fa:85:57:dd:07:0c: 41:d5:4d:e7:8c:76:04:9c:49:41:1d:ea:66:85:43: 15:9d:a5:c6:61:ea:3f:e9:fe:e1:7b:0c:e8:f1:c9: 55:31:8c:83:f1:07:e1:22:98:ac:e8:30:47:5d:f7: ab:8d:5a:ae:81:3e:5d:bf:04:9b:c6:5f:0b:26:51: 1b:9b:14:b3:bd:d6:cb:c2:48:f8:ab:cf:ac:9e:9c: 59:e8:e4:8d:a9:88:eb:bb:8a:13:a5:5f:2e:6d:d3: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F8:70:39:42:FF:6E:0C:5F:92:A6:68:AD:85:C0:64:C7:9C:6F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/39639117-2855-3e47-ab10-957634cff08c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8b:22:02:96:c9:ac:65:6a:09:a0:53:df:1c:15:7e:d8:df: b7:35:e2:21:52:52:2d:66:b0:e1:eb:af:90:80:17:83:06:08: 8c:6a:f8:e7:32:4d:e7:08:b8:11:92:78:79:7f:f2:a8:11:49: 3a:63:3c:90:40:63:30:93:9f:f7:8e:4a:22:b4:97:76:62:cd: 84:3d:4d:d2:4f:7d:13:b8:a0:6b:1c:cf:30:94:eb:d6:93:d7: 6d:b4:c9:97:2d:f2:98:d1:50:a1:96:93:bc:55:ed:0f:37:f2: 58:95:12:b7:b3:b2:ea:5b:e2:90:11:7c:8a:5f:38:59:e3:ff: 90:c5:fa:38:74:a2:a0:49:cd:80:43:48:d6:13:60:b4:6d:27: 75:c4:6a:8e:7f:a8:83:04:e5:14:26:81:84:d2:7c:52:63:a1: 10:ae:0c:19:ec:86:74:3c:f3:55:43:a9:f2:cc:61:38:05:ef: d3:ee:b2:30:13:ea:1d:00:e6:c0:c9:f2:4f:9a:62:2d:85:de: 41:43:7c:c8:6f:46:b4:97:83:78:1d:e1:11:40:a1:e5:65:be: c4:29:ce:2b:c6:1b:c4:18:08:8e:a7:a8:04:6f:22:4e:1f:93: db:10:ef:23:85:d8:96:94:5a:1e:74:6b:ec:88:91:25:fb:15: 4e:96:b7:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCXPDySOOAb77gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YjE0MzE4ZDgtMWUwNy00ODFiLTk5YmQtZDU5OThjYjQyZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQf1rd90xMHDWtzEc9mVHRcNTKggc9aKChb/ 9cfA+NailwgbxQp5FtP5Lh/v7PhRYDlreW+seiWvU7EveLx6ZbDrGA3KW7/5IJIu f540I9k/3utLfdrzxq4FP4AxFWz6pe/V/G07yfWJW+OfGBbvS8CXivCXFLSC7pc9 SEyS4vaMe/872RgQJ1hmbxE6n1DK6wq3At0b5+dIxH78iiL6hVfdBwxB1U3njHYE nElBHepmhUMVnaXGYeo/6f7hewzo8clVMYyD8QfhIpis6DBHXferjVqugT5dvwSb xl8LJlEbmxSzvdbLwkj4q8+snpxZ6OSNqYjru4oTpV8ubdMD4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD4cDlC/24MX5KmaK2FwGTHnG/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzk2MzkxMTctMjg1NS0z ZTQ3LWFiMTAtOTU3NjM0Y2ZmMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr2+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiLIgKWyaxlagmgU98cFX7Y37c14iFSUi1msOHrr5CAF4MGCIxq+Ocy TecIuBGSeHl/8qgRSTpjPJBAYzCTn/eOSiK0l3ZizYQ9TdJPfRO4oGsczzCU69aT 1220yZct8pjRUKGWk7xV7Q838liVErezsupb4pARfIpfOFnj/5DF+jh0oqBJzYBD SNYTYLRtJ3XEao5/qIME5RQmgYTSfFJjoRCuDBnshnQ881VDqfLMYTgF79PusjAT 6h0A5sDJ8k+aYi2F3kFDfMhvRrSXg3gd4RFAoeVlvsQpzivGG8QYCI6nqARvIk4f k9sQ7yOF2JaUWh50a+yIkSX7FU6Wtws= -----END CERTIFICATE-----Generated at Tue Jul 1 01:02:59 2025 by rpki-client