$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa File: bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa (raw, json) Hash identifier: l0PGiMMSLoST3NJyjcxnte2wTFEExaCUPK0LGEdJo1A= Subject key identifier: 73:2E:F9:65:10:D9:A4:20:B2:68:78:74:B6:F5:E4:BD:7D:1A:D9:1E Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584DA11AC1AF85B44A7FDD99A380 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 2152 IP address blocks: 198.188.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c1:af:85:b4:4a:7f:dd:99:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=0ca2143f-805f-45a0-80c0-75691c020670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:da:8b:a3:74:ad:cb:2b:b9:76:fd:1e:a7: 39:39:a7:44:1e:9e:1b:3b:61:bb:95:fa:15:60:36: fd:94:a3:5d:3c:a9:47:a3:74:68:10:0a:49:df:04: f2:ea:08:4c:59:35:f1:36:a3:c8:de:25:84:79:0e: 5c:d5:15:3b:58:15:c3:b6:29:34:ed:d7:df:7e:ee: 61:51:f5:a5:e0:e8:8e:36:79:9c:b7:d4:32:1a:1d: a4:38:e2:dc:8f:3f:c5:23:c0:1a:e4:cb:92:44:9f: 98:d8:c4:bb:3a:4f:b1:5a:5e:bd:32:40:12:cc:b1: 2b:9b:44:5b:af:9a:d8:df:e7:0c:33:be:70:c4:fa: ae:bf:6a:32:a1:9f:5c:d7:54:34:df:8e:a3:a1:3d: 69:26:5d:4a:86:67:1e:25:0d:31:4a:96:22:e7:0d: 54:b3:40:a5:d7:0b:4d:82:e3:1a:df:34:1e:f3:6a: c8:c0:52:69:5e:bf:ad:0a:a1:9b:0f:05:45:67:2f: 04:3a:5a:a7:59:14:58:59:79:7d:a5:f2:33:c0:b0: 60:66:33:b2:06:07:35:c3:32:ce:54:3b:38:1d:d1: bc:01:48:fc:6d:cf:9c:19:16:ff:ad:3e:f4:ba:6d: 7b:ea:b8:47:43:b4:e3:d8:c3:ea:bc:b0:77:aa:b7: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2E:F9:65:10:D9:A4:20:B2:68:78:74:B6:F5:E4:BD:7D:1A:D9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:28:b2:da:fc:d9:b3:7f:73:64:a5:89:83:6a:a9:eb:f1:5e: 1e:ac:60:9d:ac:ad:ac:a0:ec:e8:d9:a3:2f:07:03:9a:7e:9b: 36:e4:45:a5:f8:e9:20:8e:a5:80:af:31:e6:81:c5:1d:8d:30: 55:a0:51:a0:30:ba:e1:eb:bc:56:19:45:8b:7c:66:d6:b6:ce: 15:96:ce:3e:ab:78:1a:4c:7c:b1:3f:b5:5e:ea:12:08:e0:2b: 59:9e:22:6d:bc:cf:49:8f:de:6b:c3:39:05:46:c8:43:21:0f: 35:fd:52:5e:37:3f:c8:2c:5d:06:fe:fc:bb:dd:70:a4:79:43: 1c:a0:1c:62:0a:10:d3:b1:1d:20:af:4f:76:33:31:0d:0f:cd: fb:47:69:52:a1:08:97:c1:20:10:eb:5b:11:69:5a:3c:3b:af: 08:1c:ea:c9:2d:bd:7f:6c:5b:ae:65:b8:a7:22:b1:ee:ac:59: 38:69:95:c7:ce:bd:1f:ce:1c:78:c0:56:8f:67:e3:54:ae:73: c5:83:7f:6b:c2:de:26:2b:8d:02:bc:68:38:25:27:ba:43:c4: e5:e5:99:b4:7f:db:a0:8a:bd:ee:5a:1a:ea:4b:95:5e:a6:1e: 74:97:f9:78:0f:a6:8c:ef:a2:16:19:a9:73:3a:4d:bc:42:46: 06:8a:1c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsGvhbRKf92Zo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MGNhMjE0M2YtODA1Zi00NWEwLTgwYzAtNzU2OTFjMDIwNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT/ai6N0rcsruXb9Hqc5OadEHp4bO2G7lfoV YDb9lKNdPKlHo3RoEApJ3wTy6ghMWTXxNqPI3iWEeQ5c1RU7WBXDtik07dfffu5h UfWl4OiONnmct9QyGh2kOOLcjz/FI8Aa5MuSRJ+Y2MS7Ok+xWl69MkASzLErm0Rb r5rY3+cMM75wxPquv2oyoZ9c11Q0346joT1pJl1KhmceJQ0xSpYi5w1Us0Cl1wtN guMa3zQe82rIwFJpXr+tCqGbDwVFZy8EOlqnWRRYWXl9pfIzwLBgZjOyBgc1wzLO VDs4HdG8AUj8bc+cGRb/rT70um176rhHQ7Tj2MPqvLB3qrfbOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMu+WUQ2aQgsmh4dLb15L19GtkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmYzZTkzNDQtNmRjMy0z MmQyLWI3ZjMtNzVlMmU3NTEyYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxryRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEostr82bN/c2SliYNqqevxXh6sYJ2srayg7OjZoy8HA5p+mzbkRaX4 6SCOpYCvMeaBxR2NMFWgUaAwuuHrvFYZRYt8Zta2zhWWzj6reBpMfLE/tV7qEgjg K1meIm28z0mP3mvDOQVGyEMhDzX9Ul43P8gsXQb+/LvdcKR5QxygHGIKENOxHSCv T3YzMQ0PzftHaVKhCJfBIBDrWxFpWjw7rwgc6sktvX9sW65luKcise6sWThplcfO vR/OHHjAVo9n41Suc8WDf2vC3iYrjQK8aDglJ7pDxOXlmbR/26CKve5aGupLlV6m HnSX+XgPpozvohYZqXM6TbxCRgaKHLA= -----END CERTIFICATE-----Generated at Wed May 13 09:10:20 2026 by rpki-client