$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa File: d0daa832-6d5a-36d1-bd07-231326754f9e.roa (raw, json) Hash identifier: Rbmn6i2PEF0LWNAu29/6RFeaBbK8mRq8KxM9kbnPuQg= Subject key identifier: F2:88:67:68:A5:54:3A:E2:1C:67:55:85:7C:EB:1B:8A:9F:56:D2:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C9544AFE917A0690CFFDE080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa Signing time: Thu 08 May 2025 15:41:09 +0000 ROA not before: Thu 08 May 2025 15:41:09 +0000 ROA not after: Wed 06 Aug 2025 15:41:09 +0000 asID: 36625 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:4a:fe:91:7a:06:90:cf:fd:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:09 2025 GMT Not After : Aug 6 15:41:09 2025 GMT Subject: CN=724bf66c-f508-41e5-84f8-65181dee3702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:bd:05:5e:e2:ae:82:07:1f:99:8f:52:bd: 8a:8f:16:af:3b:66:34:ad:9c:ed:76:dc:d5:63:19: bc:6c:83:3e:62:5b:15:a4:bd:b4:6d:38:d7:83:81: 2f:de:82:80:c2:1f:ce:fe:14:ea:a3:0f:8c:c1:09: 46:25:df:84:80:bf:ad:5e:0e:63:d9:6b:e2:f5:9b: c3:49:e1:3c:b2:41:e0:4a:1a:41:93:cc:23:9d:a6: 80:39:01:b6:a7:b2:d3:2b:65:e3:f7:cc:ea:f6:85: 08:79:d4:ca:0b:e4:98:02:9f:85:f1:99:06:c0:c8: bc:f5:bd:fb:a7:44:4e:0b:8a:0e:b4:d0:1e:29:c3: c4:32:51:65:76:be:00:5f:72:2e:db:c4:82:0c:a2: 6d:a1:1f:8c:e8:cf:69:9f:5f:6b:65:32:f1:3b:7e: 36:4c:8a:39:3f:b6:c5:da:24:ab:d0:3f:71:41:90: f1:e0:b2:a1:72:e6:41:56:64:8a:58:58:af:cd:8c: a5:ab:82:94:2b:58:19:63:b8:e3:72:19:5e:35:b2: 94:b8:39:30:d6:f9:53:06:7a:95:b5:a8:2a:08:7d: 1b:20:cb:ee:1e:fb:8d:3b:cf:f6:8f:0f:78:08:02: 11:50:e9:08:bc:8a:8d:55:37:e9:71:7d:92:49:f0: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:67:68:A5:54:3A:E2:1C:67:55:85:7C:EB:1B:8A:9F:56:D2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:40:db:da:a6:9e:c7:32:3d:ca:bb:ef:57:8c:7c:42:26:d7: fb:18:c5:d5:7f:d5:f2:96:91:b3:2b:31:00:2a:b1:b6:31:eb: 6d:16:bb:ec:ae:08:ec:24:75:8c:78:7a:d4:6d:4c:82:e6:20: a1:96:84:70:c4:e2:7c:e4:c8:7d:b3:23:d0:55:fc:76:5c:b5: c2:98:35:37:9e:54:1d:6e:f7:1d:a0:88:95:70:e9:2a:8e:f4: 3a:de:c6:6f:ad:f9:4f:93:2d:c1:c3:d8:22:50:96:16:d4:45: b4:a5:f1:c2:9c:47:38:42:8d:8e:82:bd:3a:3e:c5:13:ab:26: 30:f3:6f:76:3d:a5:07:f5:b5:d0:c4:78:ab:d6:f7:18:ef:f3: f6:f0:de:d6:75:93:2a:d8:10:1a:9b:c8:ad:70:15:4d:2a:0e: 4c:53:2a:48:f3:1d:74:00:52:2a:1b:49:85:b3:f1:28:e2:87: bb:5f:d4:61:f3:79:ab:aa:bd:f7:14:e9:eb:76:0a:88:25:d0: ca:17:40:f0:95:33:37:74:cc:e3:eb:e3:25:71:2e:fe:f5:81: d2:e6:c9:41:24:f4:c4:a0:78:10:ea:61:2f:41:1b:21:e1:82: f5:99:ac:af:d5:e9:2d:3e:74:ed:43:c6:3a:73:06:02:19:67: c3:11:49:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEr+kXoGkM/94IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOVoXDTI1MDgwNjE1NDEwOVowLzEtMCsGA1UEAxMk NzI0YmY2NmMtZjUwOC00MWU1LTg0ZjgtNjUxODFkZWUzNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DC9BV7iroIHH5mPUr2KjxavO2Y0rZztdtzV Yxm8bIM+YlsVpL20bTjXg4Ev3oKAwh/O/hTqow+MwQlGJd+EgL+tXg5j2Wvi9ZvD SeE8skHgShpBk8wjnaaAOQG2p7LTK2Xj98zq9oUIedTKC+SYAp+F8ZkGwMi89b37 p0ROC4oOtNAeKcPEMlFldr4AX3Iu28SCDKJtoR+M6M9pn19rZTLxO342TIo5P7bF 2iSr0D9xQZDx4LKhcuZBVmSKWFivzYylq4KUK1gZY7jjchleNbKUuDkw1vlTBnqV tagqCH0bIMvuHvuNO8/2jw94CAIRUOkIvIqNVTfpcX2SSfAWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKIZ2ilVDriHGdVhXzrG4qfVtKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBkYWE4MzItNmQ1YS0z NmQxLWJkMDctMjMxMzI2NzU0ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5A29qmnscyPcq771eMfEIm1/sYxdV/1fKWkbMrMQAqsbYx620Wu+yu COwkdYx4etRtTILmIKGWhHDE4nzkyH2zI9BV/HZctcKYNTeeVB1u9x2giJVw6SqO 9Drexm+t+U+TLcHD2CJQlhbURbSl8cKcRzhCjY6CvTo+xROrJjDzb3Y9pQf1tdDE eKvW9xjv8/bw3tZ1kyrYEBqbyK1wFU0qDkxTKkjzHXQAUiobSYWz8Sjih7tf1GHz eauqvfcU6et2Cogl0MoXQPCVMzd0zOPr4yVxLv71gdLmyUEk9MSgeBDqYS9BGyHh gvWZrK/V6S0+dO1DxjpzBgIZZ8MRSfM= -----END CERTIFICATE-----Generated at Sun May 11 06:23:38 2025 by rpki-client