$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa File: d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa (raw, json) Hash identifier: DeIEraF8rxKR9t+0DN7mZpI+f3W2pVQOl3S04UqU0sE= Subject key identifier: 21:58:F0:94:65:5B:C1:7C:61:2F:4E:1A:EB:C0:89:09:16:F2:28:14 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B004BF6EA060F641E2EA3C300 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 2152 IP address blocks: 198.189.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f6:ea:06:0f:64:1e:2e:a3:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=3c9345ad-f88c-48b7-87f9-64cae2ddbb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:e0:94:88:8a:0e:93:7d:aa:40:3d:94:de: 1e:02:47:fa:96:79:dd:f2:5c:03:95:c2:57:b3:49: 1a:05:d1:ce:3e:a1:5d:bf:e7:d0:1d:dc:89:81:75: 0e:e3:1d:65:c5:80:5b:68:d0:15:60:2c:b2:13:8a: 39:ee:84:b2:56:06:b5:53:1f:01:4e:a2:a7:82:0d: 74:40:86:92:9a:28:ff:c3:e1:62:17:10:cc:ca:ba: df:2f:69:79:48:4d:ec:4c:27:96:42:1a:3a:71:3f: 81:7e:9b:a0:6f:87:12:47:30:44:09:d9:a6:32:28: a2:4e:22:63:d8:c5:fb:c5:34:ce:ab:53:eb:ff:f3: 1f:36:f4:d2:c6:d9:26:de:a5:5d:78:7e:6a:77:a2: 30:26:15:db:32:f4:d3:51:7c:96:ab:be:04:6e:8a: aa:69:8d:0b:19:0f:35:6b:e7:af:28:a9:b8:68:47: fd:01:9e:28:7b:0d:f1:f0:04:f8:77:3e:c5:ec:f4: f1:7a:eb:ea:c4:30:d0:28:63:d1:2c:d0:c7:36:be: d9:85:76:34:87:88:12:01:51:fe:66:93:00:e7:c0: 33:42:72:0e:db:42:7d:3d:50:de:e4:f9:05:2a:23: 98:2e:52:6a:26:70:4f:23:48:6f:32:53:78:5f:f8: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:58:F0:94:65:5B:C1:7C:61:2F:4E:1A:EB:C0:89:09:16:F2:28:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:24:e0:f2:03:ee:e1:9c:3a:99:82:17:82:6c:d2:57:98:0e: 0b:6c:cc:ad:af:87:01:af:e6:68:04:ed:33:dd:dd:77:38:66: 47:cb:63:68:d3:ed:c2:26:16:e2:09:4a:4d:1b:61:f7:64:06: 50:5e:18:6d:0f:7e:18:03:7f:78:c1:5a:7a:16:29:c1:45:e2: e0:99:3b:d4:a5:c8:1f:ff:c7:a4:b5:75:af:f1:f6:a3:be:14: a1:11:fb:c9:b1:cd:51:17:07:ad:81:24:d8:41:81:db:4d:3f: 03:99:6d:7d:93:d0:0e:3a:c6:20:3b:26:8b:0e:69:26:db:00: 82:09:e0:9e:bf:cb:9f:58:57:f9:28:0d:e0:59:e3:2b:9a:2e: d5:64:0f:67:5e:a2:e0:d8:c8:5e:55:3f:51:df:4e:b7:77:00: 64:5f:7f:47:e1:d9:0a:44:18:83:85:c9:ae:15:64:7f:32:de: a9:55:f3:f4:ad:86:cb:49:63:cd:52:91:38:4d:e1:24:53:84: 42:05:b0:87:47:91:b9:9d:97:5b:00:74:29:ae:3d:34:91:0f: 71:26:75:98:a5:e7:f9:96:3a:ac:cb:c9:ae:2a:ab:8f:1a:d3: 43:2d:2e:7d:91:30:8f:70:2a:00:4b:4d:08:cf:af:25:29:c0: a4:2e:92:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/bqBg9kHi6jwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk M2M5MzQ1YWQtZjg4Yy00OGI3LTg3ZjktNjRjYWUyZGRiYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHnglIiKDpN9qkA9lN4eAkf6lnnd8lwDlcJX s0kaBdHOPqFdv+fQHdyJgXUO4x1lxYBbaNAVYCyyE4o57oSyVga1Ux8BTqKngg10 QIaSmij/w+FiFxDMyrrfL2l5SE3sTCeWQho6cT+Bfpugb4cSRzBECdmmMiiiTiJj 2MX7xTTOq1Pr//MfNvTSxtkm3qVdeH5qd6IwJhXbMvTTUXyWq74EboqqaY0LGQ81 a+evKKm4aEf9AZ4oew3x8AT4dz7F7PTxeuvqxDDQKGPRLNDHNr7ZhXY0h4gSAVH+ ZpMA58AzQnIO20J9PVDe5PkFKiOYLlJqJnBPI0hvMlN4X/jATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFY8JRlW8F8YS9OGuvAiQkW8igUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZDFhNGZiNmUtYzNmZS0z MjJkLThiODktMDBhMTc4Y2ZlNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEk4PID7uGcOpmCF4Js0leYDgtszK2vhwGv5mgE7TPd3Xc4ZkfLY2jT 7cImFuIJSk0bYfdkBlBeGG0PfhgDf3jBWnoWKcFF4uCZO9SlyB//x6S1da/x9qO+ FKER+8mxzVEXB62BJNhBgdtNPwOZbX2T0A46xiA7JosOaSbbAIIJ4J6/y59YV/ko DeBZ4yuaLtVkD2deouDYyF5VP1HfTrd3AGRff0fh2QpEGIOFya4VZH8y3qlV8/St hstJY81SkThN4SRThEIFsIdHkbmdl1sAdCmuPTSRD3EmdZil5/mWOqzLya4qq48a 00MtLn2RMI9wKgBLTQjPryUpwKQukoQ= -----END CERTIFICATE-----Generated at Fri Sep 5 04:18:12 2025 by rpki-client