$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa File: 8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa (raw, json) Hash identifier: 8074OQOpZafJaaCfIsw5HVfmceRWSUf1rOpBneDqeY8= Subject key identifier: AF:8D:BF:51:52:F6:47:10:06:D5:87:08:B0:8B:EC:8C:62:5D:BE:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C95446D9212BC1BCC80E5480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa Signing time: Thu 08 May 2025 15:41:07 +0000 ROA not before: Thu 08 May 2025 15:41:07 +0000 ROA not after: Wed 06 Aug 2025 15:41:07 +0000 asID: 396605 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:46:d9:21:2b:c1:bc:c8:0e:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:07 2025 GMT Not After : Aug 6 15:41:07 2025 GMT Subject: CN=2c84903c-4e33-4736-a799-65c74d8416fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:ed:28:c3:b5:b6:f3:a6:dd:46:83:65:ea: b6:9c:33:d0:30:38:25:d1:51:d4:ea:02:36:98:32: a5:3c:81:16:a2:58:bd:b7:f7:12:fe:20:73:d3:76: 32:60:77:7c:e3:30:97:58:94:db:6e:19:e4:4d:df: 06:10:42:07:de:70:0f:00:4e:9b:f6:3c:7f:7e:8d: 04:60:5c:26:b7:4e:a1:a2:80:de:87:2c:ce:85:23: b1:ca:d0:49:3b:10:8f:39:ed:f7:fd:1a:44:f4:26: af:34:7b:2c:88:3e:17:54:a9:a9:c3:73:81:18:59: 35:9f:e8:c5:39:b5:a3:f9:00:45:1a:1f:f5:db:61: ce:c2:85:7a:9c:aa:22:8f:4a:d0:ad:1b:72:e5:1b: 3c:bf:53:2f:e2:0d:93:f6:7f:57:ba:c7:d8:69:a0: 49:8a:d9:1e:7d:cc:f0:78:9d:47:96:22:bf:f4:4f: 62:71:81:c5:0f:6b:6f:40:fb:ca:54:da:61:79:81: 7a:e3:5c:3b:72:55:9f:1b:4b:42:be:b7:92:24:87: 2c:04:50:af:46:87:ee:9e:23:7a:a4:55:da:ea:5b: e9:a3:d5:62:58:f8:5f:db:da:24:1e:59:84:65:c4: d5:9f:a2:60:b8:bc:f0:42:31:d1:a2:1d:e8:d2:ba: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8D:BF:51:52:F6:47:10:06:D5:87:08:B0:8B:EC:8C:62:5D:BE:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b4:22:fb:e6:da:52:61:4d:fd:91:4d:1f:d9:b8:9d:0a:33: 19:e2:0d:dc:01:86:c4:0c:19:75:8c:77:66:20:52:92:de:bb: 5e:b1:82:a8:ad:e0:29:2d:25:54:e5:70:79:f3:72:47:37:a9: 5d:39:d7:8a:98:b0:c1:4d:55:a2:da:46:18:73:18:9f:a8:19: 77:9a:11:b5:26:dc:28:b0:73:7b:44:85:25:97:a2:3e:1e:79: 61:65:bf:df:9c:12:c8:b9:ea:10:df:61:92:ad:b8:d4:78:41: dc:f1:4a:d9:ea:d1:56:4c:24:1e:1d:9d:d4:3a:7a:16:5d:00: 63:27:2f:e6:c4:7c:32:67:66:67:80:43:7a:4e:c3:27:0c:b7: fd:5d:d3:ca:08:6d:0f:16:fc:35:de:f6:63:29:08:e5:56:91: 50:d4:68:a7:ae:1e:d3:1b:b5:57:34:f6:0b:b8:56:c1:d3:42: 33:9b:95:dc:b3:20:93:e8:5e:b5:d7:b7:df:2f:ac:40:98:c9: 74:38:24:7d:3f:8e:60:7a:49:05:ef:c9:38:bb:ae:bf:8d:e4: 38:ff:99:f5:cc:d3:4b:93:53:07:0c:82:5b:0d:b7:b9:df:6f: 3b:dc:d5:35:a3:bf:e3:21:c9:0a:0e:73:fe:53:2c:fb:8b:ad: b8:08:97:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEbZISvBvMgOVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwN1oXDTI1MDgwNjE1NDEwN1owLzEtMCsGA1UEAxMk MmM4NDkwM2MtNGUzMy00NzM2LWE3OTktNjVjNzRkODQxNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX7tKMO1tvOm3UaDZeq2nDPQMDgl0VHU6gI2 mDKlPIEWoli9t/cS/iBz03YyYHd84zCXWJTbbhnkTd8GEEIH3nAPAE6b9jx/fo0E YFwmt06hooDehyzOhSOxytBJOxCPOe33/RpE9CavNHssiD4XVKmpw3OBGFk1n+jF ObWj+QBFGh/122HOwoV6nKoij0rQrRty5Rs8v1Mv4g2T9n9XusfYaaBJitkefczw eJ1HliK/9E9icYHFD2tvQPvKVNpheYF641w7clWfG0tCvreSJIcsBFCvRofuniN6 pFXa6lvpo9ViWPhf29okHlmEZcTVn6JguLzwQjHRoh3o0rqh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+Nv1FS9kcQBtWHCLCL7IxiXb6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGZjYjhhYTgtOWNhNS0z YTNjLTkzNWItZTFiZGRmZDcwNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC0Ivvm2lJhTf2RTR/ZuJ0KMxniDdwBhsQMGXWMd2YgUpLeu16xgqit 4CktJVTlcHnzckc3qV0514qYsMFNVaLaRhhzGJ+oGXeaEbUm3Ciwc3tEhSWXoj4e eWFlv9+cEsi56hDfYZKtuNR4QdzxStnq0VZMJB4dndQ6ehZdAGMnL+bEfDJnZmeA Q3pOwycMt/1d08oIbQ8W/DXe9mMpCOVWkVDUaKeuHtMbtVc09gu4VsHTQjObldyz IJPoXrXXt98vrECYyXQ4JH0/jmB6SQXvyTi7rr+N5Dj/mfXM00uTUwcMglsNt7nf bzvc1TWjv+MhyQoOc/5TLPuLrbgIl3s= -----END CERTIFICATE-----Generated at Sat May 10 23:16:01 2025 by rpki-client