$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e21a324-6bac-3b69-bfc2-b776cccbf01d.roa File: 1e21a324-6bac-3b69-bfc2-b776cccbf01d.roa (raw, json) Hash identifier: WQLiWrTrLDeLaMajjRVuODeQo/+dN9+KigJgzLPmEVs= Subject key identifier: 46:99:1D:47:C0:CD:B7:25:76:F2:0A:D8:E6:80:24:DA:B9:A4:1C:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C9544B8F4C14D95D846E7440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e21a324-6bac-3b69-bfc2-b776cccbf01d.roa Signing time: Thu 08 May 2025 15:41:09 +0000 ROA not before: Thu 08 May 2025 15:41:09 +0000 ROA not after: Wed 06 Aug 2025 15:41:09 +0000 asID: 396552 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:4b:8f:4c:14:d9:5d:84:6e:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:09 2025 GMT Not After : Aug 6 15:41:09 2025 GMT Subject: CN=4e6974bb-4e7c-4a60-842f-54bbebd2e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:d3:c9:2a:39:5f:f3:46:0b:11:88:c7:b6: 76:a5:ae:71:bf:a0:0f:fe:e8:2b:24:31:98:c1:e3: 27:27:e3:d0:2c:ce:e9:8e:b4:d5:36:78:3b:a0:3c: 83:bf:e9:34:28:44:ca:be:e0:5a:c0:d8:05:41:b6: 70:0c:f6:37:40:85:bf:a9:75:e8:02:59:8a:22:a8: 21:70:76:c6:eb:77:fa:d7:95:2d:64:56:1b:4b:ad: dc:aa:26:ec:89:47:17:14:5d:9e:3c:8c:6f:da:60: 37:cd:ef:06:6c:dd:eb:0c:1a:ec:6d:c7:45:f6:f5: df:43:dd:1e:9c:28:a2:92:67:18:47:c6:1e:a9:79: 48:84:61:3a:9e:33:97:31:7e:4d:c1:80:f5:8b:5b: ff:ba:a8:5c:d0:f9:03:95:fa:24:92:4d:8a:42:05: a2:aa:ed:81:f5:a2:82:39:da:12:23:a3:6f:29:89: bc:ae:9f:2f:37:5a:6c:5d:b7:b2:1c:02:6e:02:da: 84:a1:cd:ac:97:4c:0e:58:6c:9c:9b:88:77:73:35: f8:2c:8e:e7:97:88:9b:ba:a3:a7:00:a5:e7:c8:f2: 5b:f8:c2:3d:9a:e4:f3:02:81:ed:59:74:c5:1f:77: 3e:89:cf:85:2f:01:4d:bb:67:b8:c8:aa:b1:fd:1b: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:99:1D:47:C0:CD:B7:25:76:F2:0A:D8:E6:80:24:DA:B9:A4:1C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e21a324-6bac-3b69-bfc2-b776cccbf01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8f:2e:33:fa:a1:50:2e:ba:a2:42:3f:1c:11:73:a5:91:b4: 88:9b:83:4b:a3:63:ed:1f:c3:1f:a5:6d:85:62:2b:a0:9e:50: 2c:19:d0:d1:33:9f:d4:36:ad:18:cc:da:05:d7:05:63:55:9d: dd:fe:20:8f:da:b4:f8:e9:84:4b:86:af:83:77:92:f0:0b:ef: 2c:e8:9a:80:8d:8e:22:f6:47:ea:74:75:26:d4:b7:25:7c:30: 8f:32:c2:31:c8:c2:97:46:50:c7:68:36:0b:cf:de:4c:05:06: 01:71:11:65:14:10:72:ff:73:bb:ea:ed:e2:b4:55:be:97:48: 4d:6e:07:3e:4d:d6:20:a2:c1:c2:01:53:3e:eb:cd:14:55:4a: 15:e3:4b:9f:26:92:ac:50:4d:4b:e7:d2:b1:90:78:a4:56:41: f1:e2:1f:4e:7a:2b:20:d9:79:6c:6f:92:3e:b0:ca:db:0c:78: 51:86:8b:73:60:f5:2a:3b:0e:c0:e8:5b:32:b2:c8:31:66:d3: a9:24:aa:25:47:db:4f:bf:64:bf:f1:61:88:e2:bc:5c:db:89: 4c:7a:78:46:de:76:5f:18:d2:d0:f0:66:35:c5:7c:77:a9:c2: 81:67:36:0e:b5:a5:d8:6c:fe:11:5e:28:7f:d1:59:fb:32:11: 76:df:e6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEuPTBTZXYRudEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOVoXDTI1MDgwNjE1NDEwOVowLzEtMCsGA1UEAxMk NGU2OTc0YmItNGU3Yy00YTYwLTg0MmYtNTRiYmViZDJlNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzfTySo5X/NGCxGIx7Z2pa5xv6AP/ugrJDGY weMnJ+PQLM7pjrTVNng7oDyDv+k0KETKvuBawNgFQbZwDPY3QIW/qXXoAlmKIqgh cHbG63f615UtZFYbS63cqibsiUcXFF2ePIxv2mA3ze8GbN3rDBrsbcdF9vXfQ90e nCiikmcYR8YeqXlIhGE6njOXMX5NwYD1i1v/uqhc0PkDlfokkk2KQgWiqu2B9aKC OdoSI6NvKYm8rp8vN1psXbeyHAJuAtqEoc2sl0wOWGycm4h3czX4LI7nl4ibuqOn AKXnyPJb+MI9muTzAoHtWXTFH3c+ic+FLwFNu2e4yKqx/RsS+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaZHUfAzbcldvIK2OaAJNq5pBzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUyMWEzMjQtNmJhYy0z YjY5LWJmYzItYjc3NmNjY2JmMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyPLjP6oVAuuqJCPxwRc6WRtIibg0ujY+0fwx+lbYViK6CeUCwZ0NEz n9Q2rRjM2gXXBWNVnd3+II/atPjphEuGr4N3kvAL7yzomoCNjiL2R+p0dSbUtyV8 MI8ywjHIwpdGUMdoNgvP3kwFBgFxEWUUEHL/c7vq7eK0Vb6XSE1uBz5N1iCiwcIB Uz7rzRRVShXjS58mkqxQTUvn0rGQeKRWQfHiH056KyDZeWxvkj6wytsMeFGGi3Ng 9So7DsDoWzKyyDFm06kkqiVH20+/ZL/xYYjivFzbiUx6eEbedl8Y0tDwZjXFfHep woFnNg61pdhs/hFeKH/RWfsyEXbf5jU= -----END CERTIFICATE-----Generated at Sun May 11 00:46:45 2025 by rpki-client