$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa File: 328e9cd1-913a-34b6-8a22-f43efa6a3758.roa (raw, json) Hash identifier: 92QttSjmsIqAhaXLprXMIIPtlzVw3TKuIesIMoPHDfk= Subject key identifier: C6:3D:B6:22:04:9F:7F:3A:AC:99:A2:23:71:F6:0C:CC:B4:38:EB:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C95445D4EBAA6459F4E39780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa Signing time: Thu 08 May 2025 15:41:06 +0000 ROA not before: Thu 08 May 2025 15:41:06 +0000 ROA not after: Wed 06 Aug 2025 15:41:06 +0000 asID: 396554 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:45:d4:eb:aa:64:59:f4:e3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:06 2025 GMT Not After : Aug 6 15:41:06 2025 GMT Subject: CN=9fefde08-92d5-45a0-90bd-b056a6be40a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:42:2b:9d:8d:28:af:2b:64:20:2c:ae:56: 7d:d8:02:cb:ca:ca:16:0b:d0:af:81:80:49:8f:5b: 6b:a7:97:de:e0:e2:1a:3c:aa:05:b5:b9:a8:b6:40: e2:57:84:7b:2c:21:93:df:04:ad:a4:6c:c8:db:1a: d0:73:96:93:db:b9:55:c4:ad:0d:f0:9a:64:9f:13: ac:b8:e3:bf:d3:89:9d:b3:a9:fc:6a:58:af:0b:44: c6:0c:3a:8a:1a:f9:4f:43:03:5d:fc:01:06:01:16: b3:8a:91:5d:95:e9:a3:1d:af:cc:2b:c1:dc:f2:68: 6b:0d:12:bf:9a:97:9b:14:4c:cd:18:80:28:bc:c1: 25:8b:2d:f5:2a:e2:7d:a4:ff:66:d8:7c:a3:de:1a: e3:e9:76:73:32:45:48:eb:3b:fa:9f:40:6c:5f:f2: 3d:44:3b:00:ba:47:e6:e3:33:e8:27:91:e0:2a:8b: 99:be:e9:5f:f5:98:a4:10:b1:c8:4b:42:1b:37:a1: 67:20:35:c9:08:b8:ff:b7:55:81:92:a3:91:5d:3e: be:54:4f:3a:20:7d:8f:9a:ed:7a:95:82:df:d2:36: db:0b:5c:d4:bf:2c:24:12:e2:27:72:09:e3:65:ab: c1:82:28:d2:34:1f:c3:b1:9e:fe:2b:5d:9a:42:d4: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:B6:22:04:9F:7F:3A:AC:99:A2:23:71:F6:0C:CC:B4:38:EB:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5b:fa:b4:8d:ff:25:78:0f:03:c5:e1:82:8e:87:a1:51:d3: 07:3a:9b:13:39:8b:03:49:1c:a1:06:55:7f:49:03:c4:72:63: 08:0f:fd:27:6d:b3:67:90:a1:57:71:08:67:0c:33:47:f8:5c: 75:eb:dd:c0:aa:e4:7c:ea:4c:2c:9f:57:36:0f:45:78:e8:30: 0e:05:70:35:48:00:a7:4f:bd:17:77:5e:e9:56:ed:99:df:c8: 8a:5c:5a:0d:ec:93:01:26:25:8f:45:ce:4e:5e:ad:c8:ce:67: 97:b0:4d:68:55:da:30:49:2a:93:f3:e7:59:84:3b:65:3c:eb: 0f:95:95:74:76:ec:71:03:e7:aa:c0:f3:db:43:f0:d2:50:9e: e7:0b:d2:4c:8e:81:c0:39:c2:ea:91:97:cc:09:26:b5:40:81: fa:aa:83:23:a0:df:fd:06:08:ae:20:7c:2e:90:97:ab:77:d7: 89:15:b8:af:25:ee:0e:81:74:2b:65:d6:fd:45:2a:39:dc:3e: da:9a:ba:ae:2b:e7:88:a3:85:71:47:af:51:37:bc:a1:f5:5f: 90:52:ab:60:52:8b:6c:27:04:cd:61:b9:72:b5:b1:fb:1e:94: 98:b0:78:90:eb:c6:55:f5:0f:82:7e:1a:52:ab:e2:57:56:c3: 5b:b8:09:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEXU66pkWfTjl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwNloXDTI1MDgwNjE1NDEwNlowLzEtMCsGA1UEAxMk OWZlZmRlMDgtOTJkNS00NWEwLTkwYmQtYjA1NmE2YmU0MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9hCK52NKK8rZCAsrlZ92ALLysoWC9CvgYBJ j1trp5fe4OIaPKoFtbmotkDiV4R7LCGT3wStpGzI2xrQc5aT27lVxK0N8JpknxOs uOO/04mds6n8alivC0TGDDqKGvlPQwNd/AEGARazipFdlemjHa/MK8Hc8mhrDRK/ mpebFEzNGIAovMEliy31KuJ9pP9m2Hyj3hrj6XZzMkVI6zv6n0BsX/I9RDsAukfm 4zPoJ5HgKouZvulf9ZikELHIS0IbN6FnIDXJCLj/t1WBkqORXT6+VE86IH2Pmu16 lYLf0jbbC1zUvywkEuIncgnjZavBgijSNB/DsZ7+K12aQtTrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY9tiIEn386rJmiI3H2DMy0OOstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI4ZTljZDEtOTEzYS0z NGI2LThhMjItZjQzZWZhNmEzNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlb+rSN/yV4DwPF4YKOh6FR0wc6mxM5iwNJHKEGVX9JA8RyYwgP/Sdt s2eQoVdxCGcMM0f4XHXr3cCq5HzqTCyfVzYPRXjoMA4FcDVIAKdPvRd3XulW7Znf yIpcWg3skwEmJY9Fzk5ercjOZ5ewTWhV2jBJKpPz51mEO2U86w+VlXR27HED56rA 89tD8NJQnucL0kyOgcA5wuqRl8wJJrVAgfqqgyOg3/0GCK4gfC6Ql6t314kVuK8l 7g6BdCtl1v1FKjncPtqauq4r54ijhXFHr1E3vKH1X5BSq2BSi2wnBM1huXK1sfse lJiweJDrxlX1D4J+GlKr4ldWw1u4CVU= -----END CERTIFICATE-----Generated at Sun May 11 06:21:37 2025 by rpki-client