$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa File: 889a674f-b7ab-3a50-94db-75ada2818b38.roa (raw, json) Hash identifier: geZVPx6RkPIZtItoDTSf0k4k7szbDRQ2MoPzJlarO+A= Subject key identifier: F4:E9:EF:89:4B:4E:BC:EA:49:5C:37:4F:70:09:B6:E5:44:68:6C:1D Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584DB4A582B51886513AC636E1D0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 2920 IP address blocks: 198.188.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:82:b5:18:86:51:3a:c6:36:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=c19cd58e-b422-4c44-8212-48dcb2c91d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:a6:96:7a:81:47:94:c9:ea:6c:25:ac:f0: 1c:cf:2b:c4:ad:a4:45:49:8b:00:5f:a2:9c:62:0e: 02:b8:47:85:ac:28:70:cf:72:54:4c:2e:88:d1:54: df:b1:5e:4b:d2:bd:51:ae:88:f5:fd:ce:a9:b6:51: dc:e7:a2:bb:57:6f:7c:55:53:35:44:52:74:76:52: ee:0d:d7:1c:63:37:52:c4:46:34:4c:4d:77:b6:e0: af:77:24:fc:c9:e4:c8:92:28:b8:b8:86:02:e2:aa: 7d:72:05:16:b1:f8:be:dc:0d:b4:75:ca:22:33:dd: 90:70:a9:08:44:aa:33:00:c7:ee:f5:21:88:50:17: 7b:a4:50:e8:93:ed:21:cd:2d:6e:75:07:10:9f:94: d5:3c:db:66:24:bf:58:30:35:c7:dd:93:bd:c8:6f: 83:96:f7:1d:bb:e8:ca:10:4b:34:0a:b8:cc:ce:76: 35:82:27:57:2a:e1:39:48:42:a7:23:57:45:51:9f: b8:02:d9:9c:01:1c:9e:27:81:7b:df:20:f0:1c:79: 59:06:63:3a:4b:fa:b8:b9:52:8a:42:77:ba:43:fa: 31:f2:8e:14:2b:af:22:ec:2d:cd:cd:e8:b5:7b:cd: d1:bd:32:68:58:70:86:c8:bc:55:da:13:43:a0:eb: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:EF:89:4B:4E:BC:EA:49:5C:37:4F:70:09:B6:E5:44:68:6C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:10:6f:06:4c:bb:30:1e:a6:e4:cf:b9:f0:fd:b7:25:bd:13: b9:ae:49:3d:07:21:6a:f3:f3:e5:f6:ab:4b:b4:12:2b:1c:c1: ec:c4:59:86:cc:0f:76:70:72:fc:e2:de:c0:a1:52:2e:5a:57: 0e:97:e1:90:e0:e7:8a:b4:fb:3d:ac:ee:b8:7f:a9:15:84:27: 5e:1f:78:44:a5:91:7f:30:1f:08:ca:a6:05:b1:63:db:c3:ea: c7:cd:7d:de:42:52:f5:21:fc:ca:92:7a:18:4f:c5:42:54:57: ef:e9:62:84:89:83:be:74:f9:1d:0f:2c:66:34:c4:70:91:d6: 2e:9f:e4:ba:50:1a:b9:70:68:79:1d:b7:e9:35:2b:40:41:cf: 58:46:b0:2c:14:9e:9f:aa:da:54:c2:3f:38:8c:f6:8f:5b:25: 02:b1:55:96:0e:30:82:4f:05:03:1e:7f:fe:fc:06:ad:b5:82: af:27:af:d1:23:2a:df:e7:24:99:54:b9:47:0f:61:6f:b4:dc: 51:b1:bb:06:f7:bd:e4:e4:90:e0:4f:ed:9b:a6:35:f4:50:9d: d0:32:20:01:12:d3:c7:16:3b:67:e6:6e:00:67:94:69:f9:ca: 97:a2:1a:43:41:7b:e1:fd:c4:6c:36:c1:05:e4:0d:99:02:d1: 33:1b:4d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYK1GIZROsY24dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YzE5Y2Q1OGUtYjQyMi00YzQ0LTgyMTItNDhkY2IyYzkxZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EOmlnqBR5TJ6mwlrPAczyvEraRFSYsAX6Kc Yg4CuEeFrChwz3JUTC6I0VTfsV5L0r1Rroj1/c6ptlHc56K7V298VVM1RFJ0dlLu DdccYzdSxEY0TE13tuCvdyT8yeTIkii4uIYC4qp9cgUWsfi+3A20dcoiM92QcKkI RKozAMfu9SGIUBd7pFDok+0hzS1udQcQn5TVPNtmJL9YMDXH3ZO9yG+Dlvcdu+jK EEs0CrjMznY1gidXKuE5SEKnI1dFUZ+4AtmcARyeJ4F73yDwHHlZBmM6S/q4uVKK Qne6Q/ox8o4UK68i7C3Nzei1e83RvTJoWHCGyLxV2hNDoOv6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTp74lLTrzqSVw3T3AJtuVEaGwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvODg5YTY3NGYtYjdhYi0z YTUwLTk0ZGItNzVhZGEyODE4YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUQbwZMuzAepuTPufD9tyW9E7muST0HIWrz8+X2q0u0EiscwezEWYbM D3Zwcvzi3sChUi5aVw6X4ZDg54q0+z2s7rh/qRWEJ14feESlkX8wHwjKpgWxY9vD 6sfNfd5CUvUh/MqSehhPxUJUV+/pYoSJg750+R0PLGY0xHCR1i6f5LpQGrlwaHkd t+k1K0BBz1hGsCwUnp+q2lTCPziM9o9bJQKxVZYOMIJPBQMef/78Bq21gq8nr9Ej Kt/nJJlUuUcPYW+03FGxuwb3veTkkOBP7ZumNfRQndAyIAES08cWO2fmbgBnlGn5 ypeiGkNBe+H9xGw2wQXkDZkC0TMbTSE= -----END CERTIFICATE-----Generated at Wed May 13 13:13:35 2026 by rpki-client