$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2962f3df-e675-3959-a6f8-3671f876ca97.roa File: 2962f3df-e675-3959-a6f8-3671f876ca97.roa (raw, json) Hash identifier: ZoV+eLwrV7/86Y1VFvkVpMDFDu4Wlg8rN5asenBPBxk= Subject key identifier: EC:C4:B1:81:D0:46:F3:D9:85:B8:FE:F2:26:42:D3:80:AA:6F:C2:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C954491139359E0B476D3D50 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2962f3df-e675-3959-a6f8-3671f876ca97.roa Signing time: Thu 08 May 2025 15:41:08 +0000 ROA not before: Thu 08 May 2025 15:41:08 +0000 ROA not after: Wed 06 Aug 2025 15:41:08 +0000 asID: 396553 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:49:11:39:35:9e:0b:47:6d:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:08 2025 GMT Not After : Aug 6 15:41:08 2025 GMT Subject: CN=b1c90f82-ef40-4f00-abed-889160ce74bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:46:b9:72:61:d9:54:cc:69:37:d2:42:63: 36:bc:d3:ab:a3:2b:25:94:bd:85:0c:ad:61:24:58: 10:7b:24:a4:81:0b:c3:55:39:07:93:ff:3b:5f:f6: 7a:0f:2b:20:fd:48:4a:48:c1:f7:6e:64:0c:f2:21: bc:f2:8a:8b:b9:2e:eb:93:2a:81:29:63:ae:8c:b2: 1e:7f:ec:69:d1:8f:7f:1c:77:1f:f6:26:0d:02:0e: 1f:f5:1c:05:97:76:8d:32:ea:43:e7:b3:f7:75:a8: 68:80:e9:fa:99:c5:a6:4c:d9:c2:87:92:b3:4c:c9: 89:3a:60:2a:ae:c6:d8:96:4d:d2:0f:b5:34:53:2d: 25:f6:5f:6f:c9:0d:0b:ae:37:8d:ac:19:44:1f:5b: 11:48:ba:57:81:ac:34:5f:be:2d:c5:70:d7:a4:ce: 11:1c:4f:fb:81:96:8a:98:35:84:4d:34:39:58:1c: fd:6f:3a:e5:16:a3:fa:ad:7a:1c:24:21:cd:81:d2: 35:9c:9a:26:24:e3:d5:fd:e3:ef:b9:c6:c0:cc:43: 11:f0:95:36:10:42:1b:db:b2:78:a8:ce:eb:e1:a2: 33:35:20:7a:2c:a9:5c:05:0d:0d:fb:30:52:e3:5a: e0:0e:b9:ef:e3:b5:f0:2c:9f:33:26:71:12:0b:bf: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C4:B1:81:D0:46:F3:D9:85:B8:FE:F2:26:42:D3:80:AA:6F:C2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2962f3df-e675-3959-a6f8-3671f876ca97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b7:eb:d8:44:28:8c:f8:8b:5f:d2:69:3c:3a:a3:af:ca:d0: f8:94:42:aa:68:c6:d2:3d:7e:1b:6e:a3:a1:18:cc:6e:2f:10: 51:0c:91:45:55:30:c4:d5:54:8b:4c:bf:9a:0d:33:e9:27:e5: 6c:b2:da:09:b3:98:00:b0:2e:04:b3:9b:73:a8:a1:ed:d3:ed: 62:f4:1f:b2:53:4d:7b:ad:a5:e9:3a:08:1f:fc:48:69:3c:d6: 95:f5:c2:f9:e2:5c:cc:e0:37:06:34:d0:1f:c4:1c:3a:b5:9f: 9d:8f:5d:a4:7e:09:80:3e:08:ce:0d:7a:c3:0a:8f:63:d5:fd: 5c:05:7a:39:5f:70:a1:f6:07:fe:c8:a4:00:2c:88:ca:cd:14: 9d:1e:59:f3:15:e9:97:2e:6a:7d:d1:b3:53:18:bc:82:01:ad: bf:10:79:cd:26:98:5b:cb:99:72:0c:fa:5d:73:1b:f0:f9:a9: e5:2a:43:c4:ef:85:7b:c1:74:74:83:ef:8a:b0:25:4c:74:e6: 3d:cd:07:f0:42:e0:89:62:24:9b:9c:b2:c6:3a:04:29:6a:d2: c9:d0:d5:4c:93:22:d5:d1:ec:1c:c9:0e:98:ab:2c:0e:86:d2: f5:bf:f7:90:94:dc:a8:30:d7:2e:c3:89:01:f4:d7:78:75:ad: 6b:8f:4d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEkROTWeC0dtPVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOFoXDTI1MDgwNjE1NDEwOFowLzEtMCsGA1UEAxMk YjFjOTBmODItZWY0MC00ZjAwLWFiZWQtODg5MTYwY2U3NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NRGuXJh2VTMaTfSQmM2vNOroysllL2FDK1h JFgQeySkgQvDVTkHk/87X/Z6Dysg/UhKSMH3bmQM8iG88oqLuS7rkyqBKWOujLIe f+xp0Y9/HHcf9iYNAg4f9RwFl3aNMupD57P3dahogOn6mcWmTNnCh5KzTMmJOmAq rsbYlk3SD7U0Uy0l9l9vyQ0LrjeNrBlEH1sRSLpXgaw0X74txXDXpM4RHE/7gZaK mDWETTQ5WBz9bzrlFqP6rXocJCHNgdI1nJomJOPV/ePvucbAzEMR8JU2EEIb27J4 qM7r4aIzNSB6LKlcBQ0N+zBS41rgDrnv47XwLJ8zJnESC7+UJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzEsYHQRvPZhbj+8iZC04Cqb8JCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjk2MmYzZGYtZTY3NS0z OTU5LWE2ZjgtMzY3MWY4NzZjYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6369hEKIz4i1/SaTw6o6/K0PiUQqpoxtI9fhtuo6EYzG4vEFEMkUVV MMTVVItMv5oNM+kn5Wyy2gmzmACwLgSzm3Oooe3T7WL0H7JTTXutpek6CB/8SGk8 1pX1wvniXMzgNwY00B/EHDq1n52PXaR+CYA+CM4NesMKj2PV/VwFejlfcKH2B/7I pAAsiMrNFJ0eWfMV6Zcuan3Rs1MYvIIBrb8Qec0mmFvLmXIM+l1zG/D5qeUqQ8Tv hXvBdHSD74qwJUx05j3NB/BC4IliJJucssY6BClq0snQ1UyTItXR7BzJDpirLA6G 0vW/95CU3Kgw1y7DiQH013h1rWuPTQI= -----END CERTIFICATE-----Generated at Sun May 11 15:26:46 2025 by rpki-client