$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa File: 90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa (raw, json) Hash identifier: LhUJK29+VGBFGuWGpqd2qND1+wca7MoahpsxMF7r5GU= Subject key identifier: 35:49:EF:54:AE:01:FD:E5:11:E0:59:61:95:31:00:32:69:26:34:EA Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B13D6BD5FC02367A52F792900 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 2152 IP address blocks: 198.188.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bd:5f:c0:23:67:a5:2f:79:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4d204034-1073-4226-a400-ccb27f2ddb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:ae:0b:98:67:3c:9a:f9:63:41:b1:bd:36: f8:73:06:80:35:4a:41:26:70:f5:a6:94:97:47:f0: 93:2c:56:64:93:6f:ae:ea:01:c9:67:1f:69:e2:4f: f5:e2:da:78:18:c8:c4:55:6e:e6:c1:45:f9:3c:4a: ba:13:01:b0:c8:a7:50:aa:8c:1e:13:47:73:4e:79: 5f:22:9a:a5:b9:cc:81:0d:cc:f1:08:3a:6b:a1:0c: 17:a7:82:e9:f2:20:4e:4b:7b:5b:60:37:01:43:dc: a0:51:4e:f8:24:98:7f:2c:7b:e1:55:f6:41:53:a5: b4:e1:46:84:c5:63:85:0e:d5:9a:e1:53:02:98:fe: 7d:46:ae:34:39:f0:b7:13:59:7b:eb:bf:30:bc:be: f9:5d:25:19:ca:b2:0c:3c:2a:0a:c7:90:84:5d:e3: 22:d6:30:2b:b4:a0:fa:02:95:60:03:33:18:cc:cb: 5e:15:c9:3b:e9:cb:a8:33:29:51:b8:4b:eb:4d:71: 0a:0d:68:3e:dc:99:0e:9b:b8:27:eb:fa:d7:ef:08: 79:f5:7e:80:24:0c:23:25:60:05:f3:cc:b4:b0:86: 73:ab:3e:cc:e7:ae:5b:d5:db:95:2f:a4:a2:f7:6e: 77:c2:51:51:77:de:07:68:94:07:5e:17:55:b7:ac: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:49:EF:54:AE:01:FD:E5:11:E0:59:61:95:31:00:32:69:26:34:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:5c:b6:2b:21:10:7a:84:c9:d7:b8:2b:9d:14:8b:b8:dc:21: 9d:23:f1:2c:f6:83:b7:6b:65:41:61:00:a3:5d:93:69:0d:a2: 97:ed:3c:4e:02:96:b8:50:e3:d6:73:c5:58:6b:9d:7f:d8:37: 88:9a:42:4c:7d:ca:4b:08:f6:17:3d:67:61:46:2c:0d:96:4f: 5f:9d:37:ba:08:c8:72:fe:89:cd:ff:ad:67:02:bc:54:67:d6: e3:bd:e0:e5:3c:18:1b:81:cf:61:0b:3e:1c:3c:49:64:ab:93: 1a:75:e9:35:b6:79:55:bb:1a:ac:fd:a4:89:69:0e:b4:f9:de: 18:f6:14:6e:23:b1:c7:e5:32:05:76:73:19:51:7e:64:7d:f6: bc:ad:58:d6:5f:78:57:a7:a2:0f:98:85:30:26:db:73:0a:83: dc:95:1d:6d:a3:50:f1:20:4d:f9:32:a8:c0:32:1e:78:f3:60: 20:76:9c:03:65:d5:6e:b5:c6:ba:44:91:cb:76:b7:86:11:4c: 14:63:45:de:18:a2:ac:4a:f5:e9:97:94:b3:8e:88:10:7f:26: b7:8c:29:ce:91:ae:83:52:da:4a:07:05:87:0b:4f:8c:cc:55: f3:98:e2:98:5e:90:8a:ad:7c:8f:de:7a:a2:5d:bc:51:96:09: 5e:60:d0:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1r1fwCNnpS95KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGQyMDQwMzQtMTA3My00MjI2LWE0MDAtY2NiMjdmMmRkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptCuC5hnPJr5Y0GxvTb4cwaANUpBJnD1ppSX R/CTLFZkk2+u6gHJZx9p4k/14tp4GMjEVW7mwUX5PEq6EwGwyKdQqoweE0dzTnlf IpqlucyBDczxCDproQwXp4Lp8iBOS3tbYDcBQ9ygUU74JJh/LHvhVfZBU6W04UaE xWOFDtWa4VMCmP59Rq40OfC3E1l7678wvL75XSUZyrIMPCoKx5CEXeMi1jArtKD6 ApVgAzMYzMteFck76cuoMylRuEvrTXEKDWg+3JkOm7gn6/rX7wh59X6AJAwjJWAF 88y0sIZzqz7M565b1duVL6Si9253wlFRd94HaJQHXhdVt6wi9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVJ71SuAf3lEeBZYZUxADJpJjTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvOTBiZWU5N2QtZTU1Yy0z YmEzLTgwYjctZTFmZjg0NDBhZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5ctishEHqEyde4K50Ui7jcIZ0j8Sz2g7drZUFhAKNdk2kNopftPE4C lrhQ49ZzxVhrnX/YN4iaQkx9yksI9hc9Z2FGLA2WT1+dN7oIyHL+ic3/rWcCvFRn 1uO94OU8GBuBz2ELPhw8SWSrkxp16TW2eVW7Gqz9pIlpDrT53hj2FG4jscflMgV2 cxlRfmR99rytWNZfeFenog+YhTAm23MKg9yVHW2jUPEgTfkyqMAyHnjzYCB2nANl 1W61xrpEkct2t4YRTBRjRd4YoqxK9emXlLOOiBB/JreMKc6RroNS2koHBYcLT4zM VfOY4phekIqtfI/eeqJdvFGWCV5g0D4= -----END CERTIFICATE-----Generated at Fri Sep 5 05:54:29 2025 by rpki-client