$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa File: 23885c03-aace-3b48-a92a-a3768e582bdd.roa (raw, json) Hash identifier: mhemKdWR7XhD5sPA1gazbCEMuEO5gV1Arm4aQ6hItXE= Subject key identifier: A8:50:D0:90:6F:5B:E1:7C:B7:F7:70:8B:21:76:03:29:1D:4F:70:6C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A268AD0893A1BE22103106400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 36620 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:d0:89:3a:1b:e2:21:03:10:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=f3a78ae3-9ede-46de-b689-1b842e6b9843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:66:64:a9:04:fc:86:d7:ff:2b:d1:57:13: c4:72:0a:2f:75:3f:e9:3a:c6:93:85:9c:25:4b:b2: 89:39:b9:98:86:e2:96:4e:02:00:65:2e:7e:6a:7d: 82:de:bd:ec:a6:2a:e9:86:dc:8a:ca:e8:7d:d0:a9: 64:6d:37:f0:6d:08:38:bb:10:78:3f:5c:14:56:98: 75:dd:f2:aa:76:01:da:f6:5d:6d:ee:1f:9b:f5:2f: d0:a1:ea:e1:0b:74:83:1a:1d:26:2f:86:d3:55:fc: ec:80:99:25:16:44:30:86:4e:e3:80:79:d5:e1:60: 31:d9:c1:4d:dd:bd:12:eb:ed:f4:3e:84:80:36:5a: 5c:ae:f3:b6:03:ff:a3:51:23:7a:fd:de:98:f1:76: e8:9a:36:8a:87:9f:05:55:f2:ef:f1:5c:3d:c5:2b: 65:67:3e:e3:57:53:05:73:82:4e:8f:f4:fd:2b:6e: 6f:de:d4:20:08:a1:be:45:f3:5f:a8:19:14:01:af: 13:ca:3e:88:11:f0:f5:44:4c:06:30:61:79:00:ad: 79:bd:0f:93:58:e4:05:e9:59:a0:bc:92:86:8e:d5: ce:1f:dd:8f:0e:f8:2a:a7:91:2b:d2:3a:dc:dc:09: f7:11:c6:04:73:67:a5:5d:16:2b:f7:69:7f:da:d4: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:50:D0:90:6F:5B:E1:7C:B7:F7:70:8B:21:76:03:29:1D:4F:70:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:21:53:b4:da:c8:ad:2f:17:74:0a:07:b2:6b:38:dd:39:5d: 98:08:0e:3d:9b:0c:e8:d7:65:0d:2c:db:e6:b5:e1:d8:3d:8a: 65:38:da:51:eb:d9:92:d3:ca:0e:75:b6:bb:e4:b4:26:98:11: 10:0d:0a:7a:38:b0:86:f2:7f:4b:67:ed:07:85:bb:96:ab:c2: 85:39:e6:48:3a:a3:11:2d:1b:c8:e8:5e:22:89:9e:2c:7b:a7: 44:ca:67:09:21:bf:82:d1:b2:a2:cc:95:0d:b2:0e:7a:03:a7: f5:47:c0:6b:2c:76:97:14:37:90:f9:72:07:9b:1b:ef:58:1b: fe:14:bb:fb:8f:7e:49:ec:f2:ac:b1:d8:db:d7:85:e0:73:1a: 37:fc:89:f4:81:5b:83:65:8e:1b:0a:34:9e:42:5f:dd:3e:aa: 0c:a8:e0:75:41:8e:87:b8:01:4e:68:e3:9d:3f:06:5e:33:4d: 58:42:cb:6a:2a:4c:3d:46:7c:e0:68:08:22:ed:2f:98:18:3a: d0:06:aa:7e:0a:20:08:b5:2d:43:5a:75:53:9e:5c:fe:3e:66: c0:d7:14:48:7f:5a:e3:d0:03:59:4b:3a:25:1f:be:dd:c4:40: 51:5a:71:5c:3f:1c:de:7d:16:80:59:c5:50:a2:99:a3:d3:37: c3:f3:52:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomitCJOhviIQMQZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjNhNzhhZTMtOWVkZS00NmRlLWI2ODktMWI4NDJlNmI5ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxmZKkE/IbX/yvRVxPEcgovdT/pOsaThZwl S7KJObmYhuKWTgIAZS5+an2C3r3spirphtyKyuh90KlkbTfwbQg4uxB4P1wUVph1 3fKqdgHa9l1t7h+b9S/QoerhC3SDGh0mL4bTVfzsgJklFkQwhk7jgHnV4WAx2cFN 3b0S6+30PoSANlpcrvO2A/+jUSN6/d6Y8XbomjaKh58FVfLv8Vw9xStlZz7jV1MF c4JOj/T9K25v3tQgCKG+RfNfqBkUAa8Tyj6IEfD1REwGMGF5AK15vQ+TWOQF6Vmg vJKGjtXOH92PDvgqp5Er0jrc3An3EcYEc2elXRYr92l/2tSk9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKhQ0JBvW+F8t/dwiyF2AykdT3BsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM4ODVjMDMtYWFjZS0z YjQ4LWE5MmEtYTM3NjhlNTgyYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMIVO02sitLxd0CgeyazjdOV2YCA49mwzo12UNLNvmteHYPYplONpR 69mS08oOdba75LQmmBEQDQp6OLCG8n9LZ+0HhbuWq8KFOeZIOqMRLRvI6F4iiZ4s e6dEymcJIb+C0bKizJUNsg56A6f1R8BrLHaXFDeQ+XIHmxvvWBv+FLv7j35J7PKs sdjb14Xgcxo3/In0gVuDZY4bCjSeQl/dPqoMqOB1QY6HuAFOaOOdPwZeM01YQstq Kkw9RnzgaAgi7S+YGDrQBqp+CiAItS1DWnVTnlz+PmbA1xRIf1rj0ANZSzolH77d xEBRWnFcPxzefRaAWcVQopmj0zfD81K3 -----END CERTIFICATE-----Generated at Mon Jun 30 15:21:16 2025 by rpki-client