$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa File: bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa (raw, json) Hash identifier: XWMj3eTLfVjui5u2i/X1CSqNhEFl6Wuu+zH4LsjjXlk= Subject key identifier: D0:29:6A:AD:F0:BB:C3:70:3F:80:E8:79:B3:7A:DB:F8:15:D3:82:50 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A1F90260CDDF54CA5C5B8B200 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 2152 IP address blocks: 198.188.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:26:0c:dd:f5:4c:a5:c5:b8:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=2f0d4a86-5278-42e4-b768-89b0f319e775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:41:c7:2b:9b:0e:1a:9c:03:ab:8a:7e:81: f8:9d:47:6d:f3:6a:25:f8:48:ed:d4:5f:71:c5:c9: 01:fa:38:c3:c3:96:24:ae:5f:bc:43:7a:27:b1:c3: a9:75:9b:ed:de:28:10:04:d8:be:e3:ad:24:68:74: 52:e1:2a:c5:fd:8e:30:fe:27:f7:11:48:32:d7:37: ec:5b:4a:49:1b:a2:a8:cd:f6:60:40:10:82:99:e0: 58:80:54:a0:35:36:1c:6a:49:9f:3a:4e:1f:a8:06: de:3c:34:0b:9f:f8:6f:61:24:ec:e4:29:0a:ce:47: 65:f0:d2:be:06:c4:40:45:ea:f3:73:1e:6e:f3:6c: 2c:c6:8b:63:8d:f0:d8:f1:76:72:ab:2b:9b:fb:17: 5b:53:ff:14:f9:a1:64:0d:c4:92:07:08:bd:18:3c: 3f:be:2a:c5:0b:c3:1d:0c:96:53:6c:5b:cb:67:24: 2e:9f:a9:da:40:25:43:4f:da:83:8d:4c:8f:6d:9b: c8:01:b1:42:92:76:e8:7d:5b:c1:92:05:b3:c9:c1: 3e:bc:e8:e2:2c:16:1a:a9:7b:2e:bf:33:ef:a4:d3: 99:86:f6:fe:0f:3a:7b:ac:79:04:c9:d0:dd:a3:98: ad:fc:6d:ef:93:22:ba:23:a8:a1:da:c6:0d:08:7c: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:6A:AD:F0:BB:C3:70:3F:80:E8:79:B3:7A:DB:F8:15:D3:82:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b3:b0:fa:76:d2:de:c8:bb:88:2d:40:f7:ca:b7:c6:54:6a: 7d:b8:ef:ff:b0:d6:d0:9c:04:d8:9f:ad:be:8c:3f:fe:14:04: 32:f3:e1:23:b0:75:79:8b:8f:57:3f:09:f9:c0:60:37:db:8b: ea:98:b5:a0:9e:0b:2a:f7:11:92:cf:87:b2:c5:ad:20:7e:e4: 19:27:b8:8f:af:0f:cb:05:1b:9a:d2:06:99:55:f4:2f:94:b7: 9a:ce:dd:50:db:f0:c1:71:ca:fe:ff:45:b8:96:66:9c:9a:2e: 5b:3b:af:e4:58:58:25:ee:ef:37:fc:8e:2e:b5:57:e5:6d:ca: 38:01:c2:c0:9b:14:58:ab:1f:42:a7:a0:d0:b0:f1:2e:7b:09: 9a:0d:fb:7a:a0:51:ab:4e:f5:96:0b:0d:1c:8f:c0:81:47:01: 34:6b:b1:b0:1d:85:0e:08:f0:16:c6:ce:86:03:2b:80:f1:91: 18:bf:2e:b0:76:cf:38:89:c4:ad:dd:ec:57:2f:d4:ac:5a:ef: 94:0e:31:6b:53:71:a7:ca:7d:9c:2e:a1:8f:40:39:08:d7:fc: 65:d5:1c:01:11:bf:8e:e7:22:dd:eb:67:e8:00:8e:60:d6:9f: c9:f8:81:7b:33:24:9e:40:29:1e:84:48:29:96:e4:f5:49:e5: cb:42:a1:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCYM3fVMpcW4sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk MmYwZDRhODYtNTI3OC00MmU0LWI3NjgtODliMGYzMTllNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw9BxyubDhqcA6uKfoH4nUdt82ol+Ejt1F9x xckB+jjDw5Ykrl+8Q3onscOpdZvt3igQBNi+460kaHRS4SrF/Y4w/if3EUgy1zfs W0pJG6KozfZgQBCCmeBYgFSgNTYcakmfOk4fqAbePDQLn/hvYSTs5CkKzkdl8NK+ BsRARerzcx5u82wsxotjjfDY8XZyqyub+xdbU/8U+aFkDcSSBwi9GDw/virFC8Md DJZTbFvLZyQun6naQCVDT9qDjUyPbZvIAbFCknbofVvBkgWzycE+vOjiLBYaqXsu vzPvpNOZhvb+Dzp7rHkEydDdo5it/G3vkyK6I6ih2sYNCHyixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNApaq3wu8NwP4DoebN62/gV04JQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmYzZTkzNDQtNmRjMy0z MmQyLWI3ZjMtNzVlMmU3NTEyYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxryRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOzsPp20t7Iu4gtQPfKt8ZUan247/+w1tCcBNifrb6MP/4UBDLz4SOw dXmLj1c/CfnAYDfbi+qYtaCeCyr3EZLPh7LFrSB+5BknuI+vD8sFG5rSBplV9C+U t5rO3VDb8MFxyv7/RbiWZpyaLls7r+RYWCXu7zf8ji61V+VtyjgBwsCbFFirH0Kn oNCw8S57CZoN+3qgUatO9ZYLDRyPwIFHATRrsbAdhQ4I8BbGzoYDK4DxkRi/LrB2 zziJxK3d7Fcv1Kxa75QOMWtTcafKfZwuoY9AOQjX/GXVHAERv47nIt3rZ+gAjmDW n8n4gXszJJ5AKR6ESCmW5PVJ5ctCoTU= -----END CERTIFICATE-----Generated at Mon Jun 30 21:34:58 2025 by rpki-client