$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccc2b324-0165-3e5f-8134-ea33403baf20.roa File: ccc2b324-0165-3e5f-8134-ea33403baf20.roa (raw, json) Hash identifier: BjicahfL3YZDWYvk5TXlhJx5ZJRmuEjKH9NYYfyKocY= Subject key identifier: 24:18:43:71:E0:8C:D5:E5:D9:30:7F:D3:B4:97:3A:9A:04:1B:B9:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C954494D718BA32EB45A2300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccc2b324-0165-3e5f-8134-ea33403baf20.roa Signing time: Thu 08 May 2025 15:41:08 +0000 ROA not before: Thu 08 May 2025 15:41:08 +0000 ROA not after: Wed 06 Aug 2025 15:41:08 +0000 asID: 396563 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:49:4d:71:8b:a3:2e:b4:5a:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:08 2025 GMT Not After : Aug 6 15:41:08 2025 GMT Subject: CN=573cb473-5d76-4448-9c36-ed3aad610515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bf:81:8a:de:4a:d5:fa:bb:51:24:d2:78:dd: 59:68:cc:e9:7b:d6:11:64:2c:ea:9e:92:b2:05:ea: 6e:27:fb:e5:9c:18:0a:19:b8:91:35:85:6d:6f:43: 2f:e4:d1:9d:98:86:52:64:c0:c3:09:07:02:28:a4: 6f:bc:2b:1c:f3:ac:bb:57:5c:f8:d6:f8:31:32:69: 8f:62:2d:90:a2:e3:69:ad:3e:bf:f1:42:11:29:c7: d1:60:97:fc:47:6f:82:5f:0d:37:32:50:64:9c:1f: 8f:a5:5f:b2:f0:f1:4e:80:09:3d:f5:f0:43:a3:46: 92:47:ae:6a:df:bd:c3:27:c4:6e:5d:ae:9e:f2:dc: 81:20:8f:63:d7:59:2b:e1:b6:9c:c5:bd:db:06:ef: 8f:49:db:ea:33:ec:d2:2f:17:8f:29:87:55:50:dd: 4f:7e:09:ec:c6:a2:ec:42:37:e7:e7:7e:ff:78:76: e6:8c:01:3b:15:22:c2:03:01:56:06:5e:99:79:8a: 52:3f:92:06:27:91:6f:50:65:e6:28:2d:dd:01:8e: 94:37:10:0a:f5:4e:dc:61:24:a9:f2:38:16:be:70: a9:e2:91:48:38:c5:f9:21:83:11:27:34:f8:d5:85: 11:46:63:3a:30:1a:32:4c:b7:57:8e:4d:18:dd:f2: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:18:43:71:E0:8C:D5:E5:D9:30:7F:D3:B4:97:3A:9A:04:1B:B9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccc2b324-0165-3e5f-8134-ea33403baf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a6:11:e5:39:0a:0c:1c:59:6e:41:fc:55:8f:53:e2:ce:eb: d4:02:52:db:c6:ea:ba:13:f2:76:75:9e:22:d9:4c:58:d4:e9: 52:f0:e6:33:c2:5e:6f:fc:2f:71:0d:93:72:8c:39:a0:87:61: dc:26:14:5c:2d:b3:49:20:cb:db:36:45:43:67:91:4e:bb:39: fc:f2:3f:1b:5d:44:06:8d:13:6a:65:08:91:36:b6:8c:f7:88: 18:cd:01:20:0c:82:a9:e7:b2:e5:00:f7:0e:fd:0a:63:30:62: c3:da:f0:b5:c8:b1:61:ce:36:8c:69:2b:e8:e3:45:1a:ae:2e: d8:48:51:0c:bd:ea:cb:11:f2:2f:9f:7e:cf:81:11:07:e3:35: e6:6c:fc:05:c5:1d:6a:6d:67:1a:f5:0f:3d:2e:a4:a0:3f:99: 7f:ea:e9:d0:fd:7e:5b:13:2c:35:e9:11:4d:d2:fe:e4:6b:91: d9:b4:72:c6:05:e3:23:57:fc:a6:8e:f5:30:a9:54:a0:9c:35: bc:c0:f9:4b:6b:f2:0c:81:7f:d2:72:54:c5:04:17:11:21:41: 26:45:41:4f:ae:a7:cc:1d:2f:ab:e3:cc:70:f5:e0:3a:dc:72: 17:a0:67:83:53:10:8b:00:9d:56:4a:e0:71:4f:5d:b1:b3:d7: ac:5c:99:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVElNcYujLrRaIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOFoXDTI1MDgwNjE1NDEwOFowLzEtMCsGA1UEAxMk NTczY2I0NzMtNWQ3Ni00NDQ4LTljMzYtZWQzYWFkNjEwNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL+Bit5K1fq7USTSeN1ZaMzpe9YRZCzqnpKy BepuJ/vlnBgKGbiRNYVtb0Mv5NGdmIZSZMDDCQcCKKRvvCsc86y7V1z41vgxMmmP Yi2QouNprT6/8UIRKcfRYJf8R2+CXw03MlBknB+PpV+y8PFOgAk99fBDo0aSR65q 373DJ8RuXa6e8tyBII9j11kr4bacxb3bBu+PSdvqM+zSLxePKYdVUN1PfgnsxqLs Qjfn537/eHbmjAE7FSLCAwFWBl6ZeYpSP5IGJ5FvUGXmKC3dAY6UNxAK9U7cYSSp 8jgWvnCp4pFIOMX5IYMRJzT41YURRmM6MBoyTLdXjk0Y3fK9jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQYQ3HgjNXl2TB/07SXOpoEG7kIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NjMmIzMjQtMDE2NS0z ZTVmLTgxMzQtZWEzMzQwM2JhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAumEeU5CgwcWW5B/FWPU+LO69QCUtvG6roT8nZ1niLZTFjU6VLw5jPC Xm/8L3ENk3KMOaCHYdwmFFwts0kgy9s2RUNnkU67OfzyPxtdRAaNE2plCJE2toz3 iBjNASAMgqnnsuUA9w79CmMwYsPa8LXIsWHONoxpK+jjRRquLthIUQy96ssR8i+f fs+BEQfjNeZs/AXFHWptZxr1Dz0upKA/mX/q6dD9flsTLDXpEU3S/uRrkdm0csYF 4yNX/KaO9TCpVKCcNbzA+Utr8gyBf9JyVMUEFxEhQSZFQU+up8wdL6vjzHD14Drc chegZ4NTEIsAnVZK4HFPXbGz16xcmbM= -----END CERTIFICATE-----Generated at Sun May 11 00:28:47 2025 by rpki-client