$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa File: bbec8323-0391-336b-8a6c-269e4d8a1f32.roa (raw, json) Hash identifier: iyVXTfNkgpuz8aYcx/de0Kooyol7urhJ0b9GTsVMXHc= Subject key identifier: 61:67:8D:C4:1B:A2:17:47:C5:0A:CF:53:69:2B:DD:AA:BD:BA:B0:10 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B004BF6FCF8F199FB340D1880 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 2152 IP address blocks: 198.189.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f6:fc:f8:f1:99:fb:34:0d:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=64e0dae9-1a32-40dd-9474-d1ae976b1324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:8c:e5:18:c7:95:67:c8:f5:9d:f3:fd:da: 58:c8:cf:d4:b7:78:55:eb:42:ae:17:b5:9e:3e:d1: ef:ae:c8:7d:a1:00:fd:91:d9:e4:cf:ec:d1:13:92: 09:40:61:44:3a:aa:23:ab:85:b7:62:35:63:6f:39: 0d:47:6f:78:18:17:1f:86:73:f5:5c:a0:54:85:3a: ba:a9:a2:4a:07:54:f5:ae:2f:04:f9:07:8c:e1:5f: 78:38:ab:e0:d6:6a:cc:6b:3c:83:f6:50:85:23:e7: 26:c8:8e:2b:f8:0c:3d:92:d1:80:a6:7e:e6:60:a1: 73:db:c4:0e:6c:32:11:d1:9b:98:f1:a6:15:01:7a: 3a:a6:e2:88:a7:32:cd:25:d5:f4:e0:d0:58:2e:29: 9c:04:7c:ee:e7:f2:7d:61:fc:26:30:05:b0:65:73: ce:65:61:1c:59:b2:a2:3a:95:30:78:0c:72:2b:07: 1f:53:42:a1:c3:a4:ea:f1:75:8b:93:c5:57:b6:d2: fb:ce:34:ad:67:d3:56:b2:2f:74:ff:c8:41:11:bd: 04:f7:34:34:85:3e:d7:6f:46:27:03:a6:bc:c5:18: 3b:28:70:58:b5:40:bd:d2:fb:7d:6f:09:fd:01:85: 61:cd:b9:f4:60:94:ec:17:66:6d:a4:e3:c4:d8:4d: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:8D:C4:1B:A2:17:47:C5:0A:CF:53:69:2B:DD:AA:BD:BA:B0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0f:98:d3:32:09:53:e4:bd:3e:f4:15:a6:4c:19:15:2e:46: 19:0a:75:e5:13:b4:d1:f2:54:8d:38:98:31:b7:bd:94:ca:db: 9a:e2:9d:6c:01:36:cf:7b:3d:20:a9:e1:72:d7:5a:aa:5e:99: f2:74:a7:6a:0a:5b:78:56:19:16:9e:97:67:68:94:d6:ef:14: 8d:d5:7c:72:a9:6f:a2:66:cb:6f:07:31:c5:3d:74:dc:1d:27: f3:cb:5d:6a:48:b5:59:be:18:4b:c3:6e:79:22:05:44:b7:27: da:ca:7c:69:d7:44:37:52:a2:c0:cd:48:33:06:94:53:be:3b: 28:12:28:37:4e:96:f8:e6:76:e4:49:64:9c:4d:ce:32:97:f4: 09:2c:5c:46:00:12:76:87:29:c8:27:9c:f9:14:07:4a:16:6b: 9d:6a:44:5a:5f:47:6c:b1:e3:b9:81:ec:20:c4:8e:a1:2a:11: f4:7b:70:f4:68:59:d1:09:f4:96:ec:f2:e4:92:60:41:b4:81: ae:53:b9:91:59:df:6b:e7:4b:e4:62:51:7c:82:8a:71:f1:d2: 30:fe:21:da:1c:f7:ba:9a:03:23:0e:20:95:7c:2c:57:9e:af: 1b:b0:2a:7a:f4:34:8c:a1:a0:98:d1:2f:fc:de:8f:88:ee:36: ba:1b:f0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/b8+PGZ+zQNGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjRlMGRhZTktMWEzMi00MGRkLTk0NzQtZDFhZTk3NmIxMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h2M5RjHlWfI9Z3z/dpYyM/Ut3hV60KuF7We PtHvrsh9oQD9kdnkz+zRE5IJQGFEOqojq4W3YjVjbzkNR294GBcfhnP1XKBUhTq6 qaJKB1T1ri8E+QeM4V94OKvg1mrMazyD9lCFI+cmyI4r+Aw9ktGApn7mYKFz28QO bDIR0ZuY8aYVAXo6puKIpzLNJdX04NBYLimcBHzu5/J9YfwmMAWwZXPOZWEcWbKi OpUweAxyKwcfU0Khw6Tq8XWLk8VXttL7zjStZ9NWsi90/8hBEb0E9zQ0hT7Xb0Yn A6a8xRg7KHBYtUC90vt9bwn9AYVhzbn0YJTsF2ZtpOPE2E1/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFnjcQbohdHxQrPU2kr3aq9urAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmJlYzgzMjMtMDM5MS0z MzZiLThhNmMtMjY5ZTRkOGExZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgPmNMyCVPkvT70FaZMGRUuRhkKdeUTtNHyVI04mDG3vZTK25rinWwB Ns97PSCp4XLXWqpemfJ0p2oKW3hWGRael2dolNbvFI3VfHKpb6Jmy28HMcU9dNwd J/PLXWpItVm+GEvDbnkiBUS3J9rKfGnXRDdSosDNSDMGlFO+OygSKDdOlvjmduRJ ZJxNzjKX9AksXEYAEnaHKcgnnPkUB0oWa51qRFpfR2yx47mB7CDEjqEqEfR7cPRo WdEJ9Jbs8uSSYEG0ga5TuZFZ32vnS+RiUXyCinHx0jD+Idoc97qaAyMOIJV8LFee rxuwKnr0NIyhoJjRL/zej4juNrob8Cw= -----END CERTIFICATE-----Generated at Fri Sep 5 05:57:21 2025 by rpki-client