$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23c2c2c5-65af-364a-8d86-5fd36a88b374.roa File: 23c2c2c5-65af-364a-8d86-5fd36a88b374.roa (raw, json) Hash identifier: D2Tg014uex2SSS9LM8HwdLQ7Y6GQM/zXHP9DlzMlAGA= Subject key identifier: 63:0E:3E:9E:60:A5:6F:9E:37:49:26:4D:66:C5:E3:8E:26:C9:D0:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C95448889E55CCA927E5AD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23c2c2c5-65af-364a-8d86-5fd36a88b374.roa Signing time: Thu 08 May 2025 15:41:07 +0000 ROA not before: Thu 08 May 2025 15:41:07 +0000 ROA not after: Wed 06 Aug 2025 15:41:07 +0000 asID: 396612 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:48:88:9e:55:cc:a9:27:e5:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:07 2025 GMT Not After : Aug 6 15:41:07 2025 GMT Subject: CN=b41e07ba-b162-40f1-9ef6-d35c9de3024d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:b3:cb:b3:51:fd:ce:a7:1a:ae:dc:56:e3: 6b:e5:ee:48:60:65:3f:ed:ab:57:86:c6:b1:f8:77: 26:b6:73:a7:4c:ac:1a:4f:6d:79:8e:24:13:c1:eb: fb:77:7c:4e:ea:8a:7e:74:bc:1e:e8:22:5b:7c:d3: 6f:23:1e:9c:cd:d0:bb:33:77:90:8d:fe:65:fe:6e: eb:42:70:4d:97:ba:8e:fb:06:38:7f:f5:2c:fc:e4: a4:b3:28:51:97:94:14:fe:38:62:88:46:e3:d9:6e: ae:37:0c:9c:37:a2:58:f4:33:c0:72:db:75:35:0a: d8:d6:54:9b:a5:20:7c:c5:bb:e3:ca:2c:ef:3c:4e: d7:ce:21:0a:47:de:10:fc:61:05:68:00:00:f1:62: 52:b0:fc:6f:52:ca:91:b9:a2:f5:99:bf:17:93:cd: cf:35:d3:37:44:6a:d9:fe:78:d8:c1:f4:f9:f6:c6: 9a:24:6f:e4:a4:ed:bf:03:03:91:fd:0b:04:e1:bd: 99:a1:c7:13:d6:c1:bc:85:21:b7:f7:1d:1e:55:73: 58:3d:30:f5:b7:98:66:0f:32:21:ca:ac:b9:f4:d0: b3:2d:40:9a:ba:6e:3e:24:dd:b6:8f:ad:3c:2a:bc: f3:9f:d7:d4:ee:43:de:f8:01:28:82:7d:a1:2f:04: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0E:3E:9E:60:A5:6F:9E:37:49:26:4D:66:C5:E3:8E:26:C9:D0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23c2c2c5-65af-364a-8d86-5fd36a88b374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:07:9a:ea:ee:79:f9:34:c5:51:97:b2:c7:b7:a0:d1:3e:75: 11:87:8e:1a:83:da:ae:ba:d2:75:e8:20:65:e7:c7:b2:da:01: 67:b5:94:29:1b:38:58:f1:e3:b0:e7:17:0e:08:17:fc:91:e7: 43:c9:cd:92:ed:f2:92:f8:14:45:21:91:87:42:c5:96:7b:9c: 52:dd:83:c6:59:b2:61:51:4a:04:9d:c7:60:6b:65:8f:a0:d1: a1:a0:6b:56:d0:b0:74:b9:a6:87:ea:ad:58:54:c7:4e:08:b9: be:ce:1f:90:a5:93:39:2b:7a:c7:17:85:79:74:3f:37:62:1b: e8:37:cc:2c:f2:d5:2f:c6:e9:27:d0:fd:dd:f3:45:b8:49:ac: f7:9e:1c:1e:9d:5d:5e:59:3e:ad:01:b8:e3:e6:25:f8:8b:ae: 1b:e7:66:88:19:07:f4:7a:96:a7:cc:0a:01:08:ad:99:bf:48: 02:30:21:0e:55:0a:89:c3:83:59:cb:a8:9c:63:ef:ae:ef:56: 38:db:d4:c6:e5:84:99:5b:66:ec:74:59:6e:4d:99:2c:19:c1: 60:8f:b8:90:66:9f:cf:0d:ea:b3:f9:c3:5d:d3:dc:76:11:76: 7d:e7:dc:92:55:a6:5b:9e:f1:58:b3:76:d2:41:11:ad:2a:aa: af:29:63:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEiInlXMqSflrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwN1oXDTI1MDgwNjE1NDEwN1owLzEtMCsGA1UEAxMk YjQxZTA3YmEtYjE2Mi00MGYxLTllZjYtZDM1YzlkZTMwMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXezy7NR/c6nGq7cVuNr5e5IYGU/7atXhsax +HcmtnOnTKwaT215jiQTwev7d3xO6op+dLwe6CJbfNNvIx6czdC7M3eQjf5l/m7r QnBNl7qO+wY4f/Us/OSksyhRl5QU/jhiiEbj2W6uNwycN6JY9DPActt1NQrY1lSb pSB8xbvjyizvPE7XziEKR94Q/GEFaAAA8WJSsPxvUsqRuaL1mb8Xk83PNdM3RGrZ /njYwfT59saaJG/kpO2/AwOR/QsE4b2ZoccT1sG8hSG39x0eVXNYPTD1t5hmDzIh yqy59NCzLUCaum4+JN22j608Krzzn9fU7kPe+AEogn2hLwSSTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMOPp5gpW+eN0kmTWbF444mydD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNjMmMyYzUtNjVhZi0z NjRhLThkODYtNWZkMzZhODhiMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQHmuruefk0xVGXsse3oNE+dRGHjhqD2q660nXoIGXnx7LaAWe1lCkb OFjx47DnFw4IF/yR50PJzZLt8pL4FEUhkYdCxZZ7nFLdg8ZZsmFRSgSdx2BrZY+g 0aGga1bQsHS5pofqrVhUx04Iub7OH5ClkzkrescXhXl0PzdiG+g3zCzy1S/G6SfQ /d3zRbhJrPeeHB6dXV5ZPq0BuOPmJfiLrhvnZogZB/R6lqfMCgEIrZm/SAIwIQ5V ConDg1nLqJxj767vVjjb1MblhJlbZux0WW5NmSwZwWCPuJBmn88N6rP5w13T3HYR dn3n3JJVplue8VizdtJBEa0qqq8pY6o= -----END CERTIFICATE-----Generated at Sun May 11 10:42:17 2025 by rpki-client