$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa File: bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa (raw, json) Hash identifier: M8Q5Bfo+xu3QtN88QGSDwdq5wO563yQ7v8gMe93XdrU= Subject key identifier: 48:26:E2:05:BE:77:19:EB:5B:B9:64:DE:73:A4:A0:F9:EB:7E:F9:18 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584940397F790C5179BFFC2B6580 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2152 IP address blocks: 198.188.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7f:79:0c:51:79:bf:fc:2b:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=535e834b-8912-439e-9908-68ddaa2432ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:41:69:5d:cf:8b:40:b0:e7:b0:be:db:9b: 07:1c:44:70:69:3b:64:01:97:e7:71:f4:ab:0c:94: ab:ec:1f:3e:e0:e3:10:dc:98:6f:94:b1:a4:ea:c7: 91:b7:a3:ce:5b:51:6c:62:c3:4d:8b:a9:46:53:29: f6:3e:d7:c5:61:91:31:dc:dd:68:5a:5b:00:c6:66: 85:ca:32:fc:b6:f2:19:e8:52:56:a5:34:e0:7b:59: 82:11:63:17:2f:e2:78:be:9a:ca:be:0d:8d:fb:dd: 86:06:bc:77:73:aa:ed:de:85:bd:83:68:17:c1:56: 2a:6d:ed:9d:b2:63:7b:98:d0:80:4e:cc:e8:37:70: 6b:39:37:ba:d0:31:e9:e2:57:08:f5:ae:f8:3c:76: 42:38:a1:46:4e:9c:fd:59:fa:ed:94:71:2e:80:54: 5f:c6:29:4e:06:e0:b0:07:66:dd:32:5f:c2:58:68: 0c:df:40:f5:ae:69:22:3b:a5:8b:01:83:a1:e3:86: ce:75:28:a1:fb:2c:cf:c1:00:56:c9:1d:1d:51:c2: 6e:e7:01:43:7b:4c:a0:4f:82:41:84:b8:96:56:ca: bf:15:60:27:ac:fc:46:73:8a:47:99:a1:8f:e4:8b: 1a:34:38:bd:ab:cf:4d:1b:13:6e:2d:e3:0e:08:ee: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:E2:05:BE:77:19:EB:5B:B9:64:DE:73:A4:A0:F9:EB:7E:F9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:80:5f:0a:4c:66:03:e1:cc:da:44:e4:a7:b4:fc:37:a0:17: 68:b5:be:a9:ca:13:d3:9b:19:fe:28:f7:e9:f0:dc:9c:2d:94: e7:87:b9:31:30:96:40:2d:df:7a:25:0a:66:64:6f:e7:bd:11: 46:f4:a9:ad:3a:77:b2:44:ab:61:6e:f3:45:24:aa:5d:56:06: b6:07:e0:66:c2:e1:08:57:02:5f:64:c6:9d:ed:87:fc:cf:39: ed:70:0d:13:8c:2d:8a:b5:f3:f4:40:8c:bf:9a:0a:29:68:ba: 08:f4:04:c6:c2:0f:22:37:f9:00:ea:d1:8e:3a:64:40:58:6e: 22:17:b8:bf:0a:f7:8f:dc:5a:41:0c:14:a0:18:3c:c3:97:72: 29:02:0e:7a:3c:c3:e8:9f:77:ff:4a:a2:45:e4:ab:04:06:34: 21:fc:64:6e:4c:c4:f8:3d:9e:f5:a5:69:5c:30:c8:09:61:14: 5a:65:0a:73:e6:12:52:ee:27:c5:29:19:a6:5b:a6:87:98:6a: 22:7c:39:51:da:da:b2:0a:12:04:11:b3:22:a4:45:e0:cc:3e: a5:b8:16:2d:23:48:f4:43:e5:eb:1c:cf:b2:44:f2:4f:18:a0: b1:0b:54:4c:c3:51:ef:72:ae:b3:86:41:a6:6c:82:7e:fb:ab: cf:dd:66:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX95DFF5v/wrZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NTM1ZTgzNGItODkxMi00MzllLTk5MDgtNjhkZGFhMjQzMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGxBaV3Pi0Cw57C+25sHHERwaTtkAZfncfSr DJSr7B8+4OMQ3JhvlLGk6seRt6POW1FsYsNNi6lGUyn2PtfFYZEx3N1oWlsAxmaF yjL8tvIZ6FJWpTTge1mCEWMXL+J4vprKvg2N+92GBrx3c6rt3oW9g2gXwVYqbe2d smN7mNCATszoN3BrOTe60DHp4lcI9a74PHZCOKFGTpz9WfrtlHEugFRfxilOBuCw B2bdMl/CWGgM30D1rmkiO6WLAYOh44bOdSih+yzPwQBWyR0dUcJu5wFDe0ygT4JB hLiWVsq/FWAnrPxGc4pHmaGP5IsaNDi9q89NGxNuLeMOCO55owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgm4gW+dxnrW7lk3nOkoPnrfvkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmYzZTkzNDQtNmRjMy0z MmQyLWI3ZjMtNzVlMmU3NTEyYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxryRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqAXwpMZgPhzNpE5Ke0/DegF2i1vqnKE9ObGf4o9+nw3JwtlOeHuTEw lkAt33olCmZkb+e9EUb0qa06d7JEq2Fu80Ukql1WBrYH4GbC4QhXAl9kxp3th/zP Oe1wDROMLYq18/RAjL+aCilougj0BMbCDyI3+QDq0Y46ZEBYbiIXuL8K94/cWkEM FKAYPMOXcikCDno8w+ifd/9KokXkqwQGNCH8ZG5MxPg9nvWlaVwwyAlhFFplCnPm ElLuJ8UpGaZbpoeYaiJ8OVHa2rIKEgQRsyKkReDMPqW4Fi0jSPRD5escz7JE8k8Y oLELVEzDUe9yrrOGQaZsgn77q8/dZlQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:17 2025 by rpki-client