$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfeac281-9085-33cc-999e-5d8568f15439.roa File: bfeac281-9085-33cc-999e-5d8568f15439.roa (raw, json) Hash identifier: b6FOhZDxwdeVuEFQhuImiQ1sjAbgGoHG1vbSRmWGOZo= Subject key identifier: B9:C0:44:6C:5D:18:2F:AD:91:ED:F4:3E:B6:C7:00:0E:69:4E:A4:33 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A9E653175DA16CF2CF1F4EBC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfeac281-9085-33cc-999e-5d8568f15439.roa Signing time: Wed 23 Jul 2025 23:22:22 +0000 ROA not before: Wed 23 Jul 2025 23:22:22 +0000 ROA not after: Tue 21 Oct 2025 23:22:22 +0000 asID: 7385 IP address blocks: 198.20.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:65:31:75:da:16:cf:2c:f1:f4:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 23 23:22:22 2025 GMT Not After : Oct 21 23:22:22 2025 GMT Subject: CN=50ac6672-aacf-4d28-9a95-b9cf075c03f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:da:70:86:88:08:42:7f:f0:a8:3d:62:77: 3e:67:71:c7:a3:e4:bd:80:2c:ac:e2:e1:54:3d:b9: 0f:96:fd:aa:41:cd:aa:e0:30:fe:dd:32:62:06:72: d6:d6:db:46:11:d7:a5:80:3a:52:bd:c9:c0:0c:61: cb:95:34:89:80:94:d1:72:89:f9:55:3f:5c:4d:89: 22:80:bf:a4:45:bb:21:05:84:33:84:f2:f7:fe:18: a1:b5:09:c5:8c:97:37:c1:83:64:66:bd:c1:25:70: f5:c5:10:80:f9:87:76:d4:cd:4e:03:93:a8:cc:4e: d4:c6:8b:02:e8:42:ca:12:f7:cf:ae:69:ce:b1:05: 3a:ac:ba:e5:19:56:99:48:c4:f7:0c:1c:28:78:50: 2c:e0:9f:66:14:a3:61:99:19:d5:40:9c:4d:8a:18: 15:86:6b:1b:d9:55:a5:3c:c1:89:18:61:d9:7c:a4: f8:fd:e6:dc:02:0f:b9:da:b0:9d:b3:ff:0a:c0:62: be:74:79:c7:ba:10:a1:f7:c8:f2:76:a8:24:c1:ef: 93:5e:ac:51:71:12:df:0c:eb:34:cd:ee:d7:9b:4c: 24:26:b3:44:36:e6:3d:f1:1f:cd:07:43:54:81:8d: 96:04:62:30:91:a9:8c:5a:b9:4c:f6:08:0a:86:ad: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C0:44:6C:5D:18:2F:AD:91:ED:F4:3E:B6:C7:00:0E:69:4E:A4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfeac281-9085-33cc-999e-5d8568f15439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:61:2e:9d:64:f6:35:7b:cf:8d:67:aa:02:19:e0:e6:24:0a: 0e:b1:aa:7f:8d:a3:26:d9:37:52:d7:d5:2c:73:92:7d:31:87: 7b:0e:e7:54:1e:a6:71:18:de:79:29:25:a2:c8:7a:f0:4e:b1: 90:88:53:aa:3e:ac:da:3c:c3:7e:4e:93:45:b2:84:9c:fb:63: 94:33:ae:38:90:57:1a:2b:85:9b:26:eb:46:83:2a:f6:9d:77: c0:35:e4:22:a1:c2:cb:f8:3e:41:6b:d0:68:c9:df:40:4b:41: 06:6c:c6:61:78:c5:02:3b:f6:cd:ee:a9:12:c2:f5:13:c8:61: c2:48:18:d5:c5:2c:a6:90:63:8b:be:1c:41:0c:0a:1c:88:a6: 47:a7:f1:34:44:34:da:fd:08:27:ce:e7:91:b0:90:28:ff:bc: 09:1e:ad:e6:37:a1:77:c8:35:f9:a0:1c:d9:bb:1d:07:4f:12: 51:c8:c3:b3:c4:5a:2f:79:5e:57:a9:00:b5:d5:7c:98:93:2a: 4a:98:f2:b6:50:b4:7f:73:a9:fa:3a:7a:53:19:e1:8f:96:92: 8b:34:63:09:71:55:65:06:89:af:f1:5c:3a:1a:cb:29:4b:5a: d1:18:f3:97:f8:2f:6c:9f:3e:31:0e:30:83:49:00:2f:00:60: 93:c0:a9:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZTF12hbPLPH068AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMzIzMjIyMloXDTI1MTAyMTIzMjIyMlowLzEtMCsGA1UEAxMk NTBhYzY2NzItYWFjZi00ZDI4LTlhOTUtYjljZjA3NWMwM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5vacIaICEJ/8Kg9Ync+Z3HHo+S9gCys4uFU PbkPlv2qQc2q4DD+3TJiBnLW1ttGEdelgDpSvcnADGHLlTSJgJTRcon5VT9cTYki gL+kRbshBYQzhPL3/hihtQnFjJc3wYNkZr3BJXD1xRCA+Yd21M1OA5OozE7UxosC 6ELKEvfPrmnOsQU6rLrlGVaZSMT3DBwoeFAs4J9mFKNhmRnVQJxNihgVhmsb2VWl PMGJGGHZfKT4/ebcAg+52rCds/8KwGK+dHnHuhCh98jydqgkwe+TXqxRcRLfDOs0 ze7Xm0wkJrNENuY98R/NB0NUgY2WBGIwkamMWrlM9ggKhq3uBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnARGxdGC+tke30PrbHAA5pTqQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmZlYWMyODEtOTA4NS0z M2NjLTk5OWUtNWQ4NTY4ZjE1NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIphLp1k9jV7z41nqgIZ4OYkCg6xqn+NoybZN1LX1Sxzkn0xh3sO51Qe pnEY3nkpJaLIevBOsZCIU6o+rNo8w35Ok0WyhJz7Y5QzrjiQVxorhZsm60aDKvad d8A15CKhwsv4PkFr0GjJ30BLQQZsxmF4xQI79s3uqRLC9RPIYcJIGNXFLKaQY4u+ HEEMChyIpken8TRENNr9CCfO55GwkCj/vAkereY3oXfINfmgHNm7HQdPElHIw7PE Wi95XlepALXVfJiTKkqY8rZQtH9zqfo6elMZ4Y+Wkos0YwlxVWUGia/xXDoayylL WtEY85f4L2yfPjEOMINJAC8AYJPAqUM= -----END CERTIFICATE-----Generated at Sat Jul 26 13:12:00 2025 by rpki-client