$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa File: cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa (raw, json) Hash identifier: uZDMaSeKS+p4qfR15T11/FbfbOlJ8On9bjebJXFnWwM= Subject key identifier: 4D:F2:3D:27:31:9C:AC:69:DA:77:D9:93:95:1F:76:17:A7:12:8C:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A268ACF7CD90B544536A3B960 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 396583 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:cf:7c:d9:0b:54:45:36:a3:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=6b334959-de64-4b74-be9f-277b0d0623b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fd:99:57:07:c2:8b:48:58:bf:ee:a8:f8:5a: 79:3e:2c:3b:74:30:83:b6:a1:d3:07:4d:21:ee:91: 46:0a:8a:f9:53:18:5b:af:e5:f7:da:fe:0c:e3:ba: 48:4c:44:10:be:ce:80:85:2e:68:c7:f9:df:f5:f2: e3:8e:8b:df:fc:ed:f4:af:e0:b7:a4:d2:2c:6a:ea: ea:8c:64:90:47:b4:05:3f:ec:e3:ec:ec:ea:49:4d: c2:74:fb:89:a6:bb:a7:12:f7:54:3d:33:de:01:8b: 66:98:ef:ea:09:6c:f2:3b:4a:44:d7:ae:44:69:c4: a2:42:75:41:a7:a0:07:a1:15:77:75:cb:da:8b:b4: 5c:a5:4e:57:6b:0d:2d:b8:74:11:4e:f4:bc:98:29: 97:6e:ea:24:79:0f:6a:66:78:b7:f5:0a:45:33:03: 21:fd:19:c0:85:53:ea:58:be:02:76:81:7d:4c:d5: 07:2e:1a:45:d8:42:5f:95:17:27:c5:04:5e:e0:17: 28:85:89:39:98:20:5d:9c:ce:6b:47:4f:81:8c:14: a1:6f:e3:f6:c6:41:69:59:d1:3d:32:1b:62:1d:06: 24:2c:0f:72:52:1d:18:92:1b:b6:6a:e1:ec:34:e3: 5d:7f:14:70:3c:4e:3e:2c:99:8d:65:55:ac:2b:8e: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F2:3D:27:31:9C:AC:69:DA:77:D9:93:95:1F:76:17:A7:12:8C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f8:13:d9:69:35:ab:e6:66:3f:1f:f9:f6:3b:63:17:49:d6: 5a:17:33:87:70:48:45:93:0a:0e:30:e6:ba:3f:14:9e:04:9b: b3:f8:dd:d1:3a:6f:26:e6:2d:81:66:6f:fa:17:d5:a8:42:6d: d1:3a:b7:ce:3a:b3:30:90:e4:d2:36:74:af:4f:b9:b7:54:23: e1:58:0d:68:b0:70:89:42:0f:5e:40:6e:29:f2:20:d0:ea:8c: b0:9e:15:c7:6e:37:da:6d:90:9f:bd:0e:a0:24:87:39:e2:cb: 17:bb:c5:0c:b2:79:8d:54:dd:79:51:6f:21:03:c7:82:8e:c1: 86:b4:a0:7d:5b:a8:f5:76:0d:80:41:99:cb:48:4a:6a:e2:cf: c8:55:be:36:e6:45:50:5a:49:4c:69:9e:8e:78:1c:7e:68:3e: 71:d1:f5:e9:08:89:4b:da:59:26:a2:83:96:7a:fd:9e:34:f3: c6:e5:81:f7:3c:a3:b8:41:85:8f:08:69:de:4e:87:77:8c:be: df:3e:86:af:1d:41:f7:98:7c:f1:fc:90:bf:c5:9b:4b:4f:a1: e0:cc:dd:14:46:17:4a:17:3f:ad:8d:88:29:cc:67:a0:43:06: e8:9d:b8:7f:d4:cb:2d:d1:cd:0f:50:54:77:eb:62:a4:e5:a6: c3:5e:a2:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomis982QtURTajuWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NmIzMzQ5NTktZGU2NC00Yjc0LWJlOWYtMjc3YjBkMDYyM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv2ZVwfCi0hYv+6o+Fp5Piw7dDCDtqHTB00h 7pFGCor5Uxhbr+X32v4M47pITEQQvs6AhS5ox/nf9fLjjovf/O30r+C3pNIsaurq jGSQR7QFP+zj7OzqSU3CdPuJprunEvdUPTPeAYtmmO/qCWzyO0pE165EacSiQnVB p6AHoRV3dcvai7RcpU5Xaw0tuHQRTvS8mCmXbuokeQ9qZni39QpFMwMh/RnAhVPq WL4CdoF9TNUHLhpF2EJflRcnxQRe4BcohYk5mCBdnM5rR0+BjBShb+P2xkFpWdE9 MhtiHQYkLA9yUh0Ykhu2auHsNONdfxRwPE4+LJmNZVWsK47HeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE3yPScxnKxp2nfZk5UfdhenEoy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YxYTI4MzItYWIzMS0z OGQxLWI0MmEtYjRlMGJlNmM0MDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN+BPZaTWr5mY/H/n2O2MXSdZaFzOHcEhFkwoOMOa6PxSeBJuz+N3R Om8m5i2BZm/6F9WoQm3ROrfOOrMwkOTSNnSvT7m3VCPhWA1osHCJQg9eQG4p8iDQ 6oywnhXHbjfabZCfvQ6gJIc54ssXu8UMsnmNVN15UW8hA8eCjsGGtKB9W6j1dg2A QZnLSEpq4s/IVb425kVQWklMaZ6OeBx+aD5x0fXpCIlL2lkmooOWev2eNPPG5YH3 PKO4QYWPCGneTod3jL7fPoavHUH3mHzx/JC/xZtLT6HgzN0URhdKFz+tjYgpzGeg Qwbonbh/1Mst0c0PUFR362Kk5abDXqIC -----END CERTIFICATE-----Generated at Tue Jul 1 09:26:44 2025 by rpki-client