$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5da9a9e0-151d-3b41-b041-f7f1e149b828.roa File: 5da9a9e0-151d-3b41-b041-f7f1e149b828.roa (raw, json) Hash identifier: eJeDuk3nONgqGj9dQtGxmqrUE9YlSZsS0QjWVbtAopU= Subject key identifier: 3F:8B:00:61:34:9A:6C:73:5A:83:17:45:BE:62:A0:87:CA:4A:B9:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C954493E438B15003CC22580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5da9a9e0-151d-3b41-b041-f7f1e149b828.roa Signing time: Thu 08 May 2025 15:41:08 +0000 ROA not before: Thu 08 May 2025 15:41:08 +0000 ROA not after: Wed 06 Aug 2025 15:41:08 +0000 asID: 396580 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:49:3e:43:8b:15:00:3c:c2:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:08 2025 GMT Not After : Aug 6 15:41:08 2025 GMT Subject: CN=7a71ed84-afe9-403d-8498-96b5677e816c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:0b:82:c1:98:2b:b8:ed:07:a6:af:4b:d8: e9:8d:3a:85:ae:35:1c:33:e2:26:40:26:3b:5f:a2: dc:8b:b6:cc:c6:d6:46:7a:6b:44:fe:1e:e1:08:7e: 75:81:90:db:37:ae:35:41:15:80:d3:90:f2:7e:a4: be:15:72:b8:7a:85:94:f6:4f:16:73:b4:ca:46:38: 9f:ce:c7:ba:fa:a5:08:f9:64:ac:93:5f:97:e2:f0: 22:00:17:8a:a4:40:e4:9d:16:04:fa:6d:3b:b9:ba: 65:aa:24:b3:e6:76:2b:9d:ff:85:53:fc:6f:23:6d: dc:17:dc:2c:ac:7c:89:f7:87:63:22:29:e5:62:8f: 17:d0:2d:1e:53:42:74:47:95:61:e0:e3:be:60:82: af:52:cd:d9:e4:4d:f5:6b:22:a8:cd:40:0b:9f:a7: 82:d6:c4:06:15:12:f5:a7:7e:11:e7:e6:2b:cf:bf: 27:39:0c:25:eb:3b:bf:f2:f0:ba:95:8d:a9:2d:dd: 71:c8:96:11:12:bb:65:9f:e6:62:2f:9e:3b:5d:66: e9:10:8b:da:7e:8c:8a:7f:7a:cf:1d:64:67:16:86: e6:46:df:5a:4a:43:bf:d9:c4:a0:4e:fe:9b:1b:85: 47:84:b1:42:bc:cf:49:b1:99:ae:72:eb:f1:e1:b9: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8B:00:61:34:9A:6C:73:5A:83:17:45:BE:62:A0:87:CA:4A:B9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5da9a9e0-151d-3b41-b041-f7f1e149b828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:34:93:0c:87:71:a5:fd:16:d1:87:f2:d8:d8:12:67:2f:92: 69:93:01:5f:f3:50:9f:7c:4c:e8:41:8e:91:42:12:d7:a1:21: 92:39:b2:a7:75:ef:0b:3e:1e:a0:de:f6:01:6a:ce:a9:41:75: 84:27:f3:27:45:42:29:03:ee:cd:7b:57:36:00:26:dc:c4:43: 72:c0:b2:21:54:2e:b1:0e:d9:06:1f:a8:36:10:1a:d7:56:be: 69:12:c9:e4:0b:3f:67:5d:9f:d5:9f:c9:b8:cc:70:76:b9:5b: af:77:8e:fd:80:39:3c:71:2d:4c:31:bc:0d:e6:7e:e0:c4:2e: 77:5d:4d:af:7d:bb:e8:4b:e6:fe:c6:62:d4:41:ee:74:82:59: e0:d4:90:52:26:de:01:fd:38:29:89:35:b4:d7:42:04:ef:57: 32:bb:ef:63:83:93:44:b8:a9:44:09:96:7b:aa:5f:01:f1:31: 70:42:ad:e5:1a:64:19:ea:21:b3:a0:70:d6:20:8d:5a:e2:cf: ff:19:ec:a1:42:9d:3c:01:91:64:b7:cf:9d:f8:7b:a0:72:97: fa:6f:e0:d4:fc:3f:42:af:f4:30:a4:79:88:fd:c5:2d:2c:01: d9:04:1b:ec:e1:2f:bd:2d:2e:1f:9b:8c:aa:61:8f:4e:16:aa: e0:f1:3a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEk+Q4sVADzCJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOFoXDTI1MDgwNjE1NDEwOFowLzEtMCsGA1UEAxMk N2E3MWVkODQtYWZlOS00MDNkLTg0OTgtOTZiNTY3N2U4MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDkLgsGYK7jtB6avS9jpjTqFrjUcM+ImQCY7 X6Lci7bMxtZGemtE/h7hCH51gZDbN641QRWA05DyfqS+FXK4eoWU9k8Wc7TKRjif zse6+qUI+WSsk1+X4vAiABeKpEDknRYE+m07ubplqiSz5nYrnf+FU/xvI23cF9ws rHyJ94djIinlYo8X0C0eU0J0R5Vh4OO+YIKvUs3Z5E31ayKozUALn6eC1sQGFRL1 p34R5+Yrz78nOQwl6zu/8vC6lY2pLd1xyJYRErtln+ZiL547XWbpEIvafoyKf3rP HWRnFobmRt9aSkO/2cSgTv6bG4VHhLFCvM9JsZmucuvx4bl77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+LAGE0mmxzWoMXRb5ioIfKSrk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWRhOWE5ZTAtMTUxZC0z YjQxLWIwNDEtZjdmMWUxNDliODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII0kwyHcaX9FtGH8tjYEmcvkmmTAV/zUJ98TOhBjpFCEtehIZI5sqd1 7ws+HqDe9gFqzqlBdYQn8ydFQikD7s17VzYAJtzEQ3LAsiFULrEO2QYfqDYQGtdW vmkSyeQLP2ddn9WfybjMcHa5W693jv2AOTxxLUwxvA3mfuDELnddTa99u+hL5v7G YtRB7nSCWeDUkFIm3gH9OCmJNbTXQgTvVzK772ODk0S4qUQJlnuqXwHxMXBCreUa ZBnqIbOgcNYgjVriz/8Z7KFCnTwBkWS3z534e6Byl/pv4NT8P0Kv9DCkeYj9xS0s AdkEG+zhL70tLh+bjKphj04WquDxOng= -----END CERTIFICATE-----Generated at Sun May 11 00:08:05 2025 by rpki-client