$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a433553c-5fdb-33d7-83db-2f1450b8a4ff.roa File: a433553c-5fdb-33d7-83db-2f1450b8a4ff.roa (raw, json) Hash identifier: zmmASgX+mLraJ04bQbS1LQMN7j4/UwXSWRElUa2rroM= Subject key identifier: EC:64:A2:85:9A:FB:3A:3A:92:91:8B:60:60:B8:D8:90:54:08:AE:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C9544B7DF25885036D7E92C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a433553c-5fdb-33d7-83db-2f1450b8a4ff.roa Signing time: Thu 08 May 2025 15:41:09 +0000 ROA not before: Thu 08 May 2025 15:41:09 +0000 ROA not after: Wed 06 Aug 2025 15:41:09 +0000 asID: 396569 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:4b:7d:f2:58:85:03:6d:7e:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:09 2025 GMT Not After : Aug 6 15:41:09 2025 GMT Subject: CN=f20bfd72-048b-408b-8c92-f652b70f7a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:d0:8f:58:0d:11:ca:c7:1c:51:bf:7d:bf: 6c:f4:ec:02:b3:b2:d0:53:56:8f:86:ce:80:43:3c: cf:df:b9:9c:bd:45:15:e6:04:e9:7b:e3:9a:01:d4: 0a:87:8b:b1:df:58:a9:fa:fe:99:d0:ce:64:75:f8: 3e:ae:29:fa:1b:2a:bf:73:7e:59:1d:12:38:67:65: 6a:71:58:dc:46:62:ee:c3:fd:35:6a:3c:f6:ec:41: 50:89:f2:47:77:b2:39:36:d8:fe:ed:bf:fd:26:f3: e3:21:ea:18:4e:06:5d:46:0d:dc:84:c3:dd:d7:7c: 7c:45:75:35:72:95:17:a0:10:ba:a3:92:a1:78:73: 6c:75:21:a8:27:1e:82:a3:eb:13:0d:92:d2:e5:46: 29:92:ff:ee:bd:ee:d4:a5:cb:42:4b:07:fa:31:b2: d2:c5:ec:c9:94:ce:1b:ce:10:4f:5c:f9:57:85:c7: f5:a5:b7:29:46:48:89:ba:96:3d:e7:4f:4b:6f:64: ce:cd:0f:75:28:0e:4e:44:83:fb:7d:a7:a1:e4:ca: 7d:43:55:ab:66:de:6a:ac:79:db:11:40:0f:74:73: 88:c6:a7:88:82:b6:ac:b9:b4:c6:11:54:b1:a0:48: 54:d6:15:e2:c7:62:ff:ea:af:c3:05:21:e3:ef:15: 2a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:A2:85:9A:FB:3A:3A:92:91:8B:60:60:B8:D8:90:54:08:AE:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a433553c-5fdb-33d7-83db-2f1450b8a4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:50:22:ed:11:03:e0:5d:24:33:20:56:55:85:25:b1:e7:fe: fc:cc:c0:2e:71:24:48:d2:b6:86:d4:f0:e6:af:d6:4d:b0:6c: 22:b5:c5:96:a0:a2:e9:7a:2c:9e:8f:1c:49:32:49:c1:19:0f: 06:23:51:01:ec:84:c7:e7:27:60:cd:31:50:f8:da:61:d1:88: 02:1e:53:b0:a1:a1:b8:b3:99:46:7d:ef:9e:fa:91:14:84:46: d4:7b:52:44:b9:fc:67:6c:78:74:2b:67:99:f1:23:58:65:fa: 0f:92:46:7f:9e:f4:3f:64:02:d3:81:21:be:fe:66:c5:13:f6: f1:88:8d:31:65:19:44:41:bb:79:8a:45:7c:d7:22:2e:b6:95: 49:b3:d7:b3:b7:21:f8:7c:b0:94:ba:ff:b5:61:91:dd:5d:6e: 4e:7c:f3:f0:4e:c5:9e:f7:2e:c5:e1:37:a6:f3:a0:ed:e8:e9: b0:94:b1:86:81:df:22:e3:39:95:fb:37:ea:ab:30:13:af:8c: 5d:fe:c2:8f:a7:f2:9a:02:f5:f8:13:cb:c6:ce:02:4f:23:6b: eb:ef:80:aa:2e:f8:22:1a:43:7f:00:19:3e:07:74:55:3d:3d: b4:24:c4:6b:01:62:32:97:1c:67:a9:34:be:0c:19:6c:56:af: 6b:47:6b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEt98liFA21+ksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOVoXDTI1MDgwNjE1NDEwOVowLzEtMCsGA1UEAxMk ZjIwYmZkNzItMDQ4Yi00MDhiLThjOTItZjY1MmI3MGY3YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLPQj1gNEcrHHFG/fb9s9OwCs7LQU1aPhs6A QzzP37mcvUUV5gTpe+OaAdQKh4ux31ip+v6Z0M5kdfg+rin6Gyq/c35ZHRI4Z2Vq cVjcRmLuw/01ajz27EFQifJHd7I5Ntj+7b/9JvPjIeoYTgZdRg3chMPd13x8RXU1 cpUXoBC6o5KheHNsdSGoJx6Co+sTDZLS5UYpkv/uve7UpctCSwf6MbLSxezJlM4b zhBPXPlXhcf1pbcpRkiJupY9509Lb2TOzQ91KA5ORIP7faeh5Mp9Q1WrZt5qrHnb EUAPdHOIxqeIgrasubTGEVSxoEhU1hXix2L/6q/DBSHj7xUq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxkooWa+zo6kpGLYGC42JBUCK7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQzMzU1M2MtNWZkYi0z M2Q3LTgzZGItMmYxNDUwYjhhNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9QIu0RA+BdJDMgVlWFJbHn/vzMwC5xJEjStobU8Oav1k2wbCK1xZag oul6LJ6PHEkyScEZDwYjUQHshMfnJ2DNMVD42mHRiAIeU7ChobizmUZ97576kRSE RtR7UkS5/GdseHQrZ5nxI1hl+g+SRn+e9D9kAtOBIb7+ZsUT9vGIjTFlGURBu3mK RXzXIi62lUmz17O3Ifh8sJS6/7Vhkd1dbk588/BOxZ73LsXhN6bzoO3o6bCUsYaB 3yLjOZX7N+qrMBOvjF3+wo+n8poC9fgTy8bOAk8ja+vvgKou+CIaQ38AGT4HdFU9 PbQkxGsBYjKXHGepNL4MGWxWr2tHa6A= -----END CERTIFICATE-----Generated at Sun May 11 02:24:12 2025 by rpki-client