$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa File: 3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa (raw, json) Hash identifier: 8jrxmN2tMth+/m2qKMSS6QBZClDGRsaFSlV+FHQLGuE= Subject key identifier: 7C:1A:84:4A:88:50:08:02:5C:E6:74:1A:4D:46:51:F7:A3:F7:13:F0 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AA160D1E25A44CEB25C5B8380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 14061 IP address blocks: 198.232.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d1:e2:5a:44:ce:b2:5c:5b:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=338868ca-689c-434b-b994-ce7a721a8829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:8f:89:fd:fa:1a:a1:a0:59:de:10:89:d7: 5b:ef:d7:40:88:0c:9f:1e:43:1a:51:5e:55:d6:78: 53:ca:6a:39:14:a8:78:f7:0c:eb:d5:df:ec:1f:24: 82:85:51:51:31:09:cb:b6:fd:50:72:ad:47:6a:8f: 6c:51:66:33:34:af:39:18:5c:89:c5:7b:b8:20:a2: f2:6a:7d:13:49:ae:e2:14:e7:3a:67:38:29:97:76: d5:88:ef:21:59:0b:d1:c7:6e:f2:e7:cf:38:b9:ca: aa:b5:b9:56:b8:c5:ee:31:b4:1b:3f:33:ba:f3:6b: e5:11:d8:67:bc:d3:cc:5f:9b:7e:60:77:1e:28:b4: ca:40:c4:70:1b:ec:73:8e:dc:df:20:31:2f:8e:32: 20:d5:fb:47:df:ef:08:f5:b1:bc:02:08:a5:7c:be: 2f:ea:26:a4:01:49:83:a3:57:8f:d2:54:13:3c:c2: ae:2e:28:35:98:fe:6e:06:0d:25:57:e6:54:66:c6: b7:a8:87:38:6d:ad:a0:4c:d5:97:40:03:8c:e2:0d: 5b:69:b1:4a:72:90:d0:f0:d7:4b:af:ee:2c:d2:6b: 47:3e:bf:57:e2:08:4f:06:d7:61:4b:82:cb:9c:2f: c3:de:4b:6b:eb:ec:d9:5d:3b:82:50:f1:63:82:14: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1A:84:4A:88:50:08:02:5C:E6:74:1A:4D:46:51:F7:A3:F7:13:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.232.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7a:26:ff:54:6e:ab:c9:47:fb:40:3a:dc:15:c8:b7:1b:ed: b7:b6:be:d9:f2:7f:ff:34:87:fb:36:ce:4f:5c:d9:bb:19:bd: 10:ac:58:e0:7c:a0:82:17:d6:1f:a0:da:ab:98:38:23:05:33: b3:d5:c8:4c:bf:33:3d:f9:97:d2:09:e3:d9:9c:d1:53:bf:5d: fb:81:4a:49:2a:41:a3:9c:44:aa:88:16:f5:b3:de:12:14:dc: 7e:95:76:2e:7c:d6:c3:25:e8:69:88:73:d7:b3:98:7d:80:e8: b9:07:15:d1:92:e2:f2:53:16:94:df:79:33:e2:43:00:1e:97: e8:27:ce:e0:40:ed:30:82:65:89:ac:96:b0:1b:ec:61:ee:08: 13:24:ed:f3:9c:93:1a:e4:3f:62:89:e1:2c:b0:49:d4:3f:fd: 61:b8:6c:01:42:f1:48:8b:cd:8c:8f:a6:69:c2:82:a9:68:19: 76:d9:37:59:7e:67:a2:3f:d0:4b:2b:e2:92:93:30:ae:3b:70: 47:7f:64:e3:73:18:d8:14:c0:16:ba:c3:42:70:ea:21:92:53: a0:f0:a4:54:57:46:11:0b:4e:19:a1:e6:8d:b3:53:18:cd:bb: 73:ad:04:5e:35:86:05:30:ad:ae:22:b2:3b:2b:5f:ca:3f:87: 2c:b7:0c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNHiWkTOslxbg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MzM4ODY4Y2EtNjg5Yy00MzRiLWI5OTQtY2U3YTcyMWE4ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPaPif36GqGgWd4Qiddb79dAiAyfHkMaUV5V 1nhTymo5FKh49wzr1d/sHySChVFRMQnLtv1Qcq1Hao9sUWYzNK85GFyJxXu4IKLy an0TSa7iFOc6Zzgpl3bViO8hWQvRx27y5884ucqqtblWuMXuMbQbPzO682vlEdhn vNPMX5t+YHceKLTKQMRwG+xzjtzfIDEvjjIg1ftH3+8I9bG8AgilfL4v6iakAUmD o1eP0lQTPMKuLig1mP5uBg0lV+ZUZsa3qIc4ba2gTNWXQAOM4g1babFKcpDQ8NdL r+4s0mtHPr9X4ghPBtdhS4LLnC/D3ktr6+zZXTuCUPFjghR2jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwahEqIUAgCXOZ0Gk1GUfej9xPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2NlMjE3MTItYjk0YS0z NDQ3LTlmMDMtMWUxNGQyYTdhZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN6Jv9UbqvJR/tAOtwVyLcb7be2vtnyf/80h/s2zk9c2bsZvRCsWOB8 oIIX1h+g2quYOCMFM7PVyEy/Mz35l9IJ49mc0VO/XfuBSkkqQaOcRKqIFvWz3hIU 3H6Vdi581sMl6GmIc9ezmH2A6LkHFdGS4vJTFpTfeTPiQwAel+gnzuBA7TCCZYms lrAb7GHuCBMk7fOckxrkP2KJ4SywSdQ//WG4bAFC8UiLzYyPpmnCgqloGXbZN1l+ Z6I/0Esr4pKTMK47cEd/ZONzGNgUwBa6w0Jw6iGSU6DwpFRXRhELThmh5o2zUxjN u3OtBF41hgUwra4isjsrX8o/hyy3DGA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:18 2025 by rpki-client