$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa File: bbec8323-0391-336b-8a6c-269e4d8a1f32.roa (raw, json) Hash identifier: c2p3YSNHays0XC/Vfg2KP4qfW8NGY++dgFaiz/A0Sv0= Subject key identifier: 3C:61:70:FD:11:52:FC:17:17:03:48:85:9A:31:17:13:0A:75:9A:F2 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584940397F2D28C0569BA9BF6EC0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2152 IP address blocks: 198.189.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7f:2d:28:c0:56:9b:a9:bf:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7ab1b5b9-c57f-4c7f-b359-8bf4be9989ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:10:86:30:96:4a:60:12:bb:08:af:a3:89: 24:f0:03:e7:b3:2b:50:df:e5:28:45:23:2c:5f:71: 06:5b:2f:10:24:f2:8a:34:5b:64:c4:e3:c2:0f:73: 7a:20:fd:e8:45:17:4f:26:97:df:67:f4:3e:2b:be: 74:5d:e3:fd:60:aa:72:40:17:aa:75:89:5e:5e:f8: dc:e4:a2:6e:42:42:0e:5b:66:5c:f2:32:78:4f:5c: ce:7e:bb:ee:97:a4:21:47:ce:c5:94:7c:e4:86:27: a5:4f:78:0c:5c:48:ec:1d:d1:5c:0c:0c:30:8b:78: b9:e9:17:b7:36:de:91:37:b7:d5:57:21:41:17:5a: 5a:22:d8:a6:c4:43:65:2c:64:9b:c3:cf:fa:1f:4f: b8:ec:e1:7c:52:5f:0f:8a:14:8d:2d:6d:f1:1e:bf: 9c:5e:2c:5d:21:1e:fa:a0:f2:54:cb:23:4b:48:31: b3:c0:37:cf:58:3c:b0:82:76:38:ad:e9:73:10:ff: c7:29:98:2f:89:32:44:f5:c1:dc:ba:0b:8b:35:63: 6f:d7:6c:11:3e:74:49:bc:65:95:3b:41:5c:21:b4: a6:8f:97:2d:67:0b:3f:ed:17:ed:de:7f:51:83:76: ee:95:5a:7b:d1:76:05:75:9a:bf:36:ca:77:69:3f: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:61:70:FD:11:52:FC:17:17:03:48:85:9A:31:17:13:0A:75:9A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ac:1a:78:0f:5d:50:9f:11:e1:9e:80:7b:5c:e2:72:56:e0: 3c:f6:22:82:0e:0b:b4:04:a0:29:c8:3c:7e:e4:6f:cf:9a:4e: ee:8f:58:8b:db:00:ff:20:31:bd:b7:a0:3b:27:dd:d8:42:dd: a2:ed:9f:fe:ee:c2:4b:02:66:32:31:79:22:75:f9:bd:a4:06: f2:d7:98:04:c7:e4:e0:1f:c1:15:c7:ef:f9:e4:6d:b0:48:a5: da:36:8e:50:1d:3d:8a:7a:90:91:33:5f:46:1b:a3:0f:30:9e: e8:f4:24:73:6f:dd:b5:94:e9:ff:78:52:6c:5c:32:55:22:bc: 59:e0:20:95:52:6f:60:f1:2f:b2:c1:33:97:a6:c3:95:29:0a: ea:78:6e:84:a0:a9:44:00:09:78:72:bf:c7:41:d6:f5:87:4a: 75:f8:99:b2:20:a3:b0:20:a3:d2:9a:6c:b6:14:cc:ef:e7:1b: 56:29:0e:40:37:ed:37:77:03:ba:24:5e:bb:60:4f:32:3a:bc: 79:ac:1d:80:93:21:12:a4:e3:d1:fa:ce:9f:53:32:a6:dc:a5: dc:f9:e8:22:4e:70:3f:e3:f2:e5:5c:30:98:06:52:1a:15:a9: cb:b5:93:08:fa:2a:e1:d3:83:05:2c:af:82:fc:e7:79:29:32: d3:f8:b5:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX8tKMBWm6m/bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk N2FiMWI1YjktYzU3Zi00YzdmLWIzNTktOGJmNGJlOTk4OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcIQhjCWSmASuwivo4kk8APnsytQ3+UoRSMs X3EGWy8QJPKKNFtkxOPCD3N6IP3oRRdPJpffZ/Q+K750XeP9YKpyQBeqdYleXvjc 5KJuQkIOW2Zc8jJ4T1zOfrvul6QhR87FlHzkhielT3gMXEjsHdFcDAwwi3i56Re3 Nt6RN7fVVyFBF1paItimxENlLGSbw8/6H0+47OF8Ul8PihSNLW3xHr+cXixdIR76 oPJUyyNLSDGzwDfPWDywgnY4relzEP/HKZgviTJE9cHcuguLNWNv12wRPnRJvGWV O0FcIbSmj5ctZws/7Rft3n9Rg3bulVp70XYFdZq/Nsp3aT9TkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxhcP0RUvwXFwNIhZoxFxMKdZryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmJlYzgzMjMtMDM5MS0z MzZiLThhNmMtMjY5ZTRkOGExZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEasGngPXVCfEeGegHtc4nJW4Dz2IoIOC7QEoCnIPH7kb8+aTu6PWIvb AP8gMb23oDsn3dhC3aLtn/7uwksCZjIxeSJ1+b2kBvLXmATH5OAfwRXH7/nkbbBI pdo2jlAdPYp6kJEzX0Ybow8wnuj0JHNv3bWU6f94UmxcMlUivFngIJVSb2DxL7LB M5emw5UpCup4boSgqUQACXhyv8dB1vWHSnX4mbIgo7Ago9KabLYUzO/nG1YpDkA3 7Td3A7okXrtgTzI6vHmsHYCTIRKk49H6zp9TMqbcpdz56CJOcD/j8uVcMJgGUhoV qcu1kwj6KuHTgwUsr4L853kpMtP4tQo= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:33 2025 by rpki-client