$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23cb877-4269-381d-8037-2744789720ce.roa File: e23cb877-4269-381d-8037-2744789720ce.roa (raw, json) Hash identifier: 4vLTwf+HwmHwihNtsAgZKmlGnfYXrIE4Dq5zIWVUMZE= Subject key identifier: A9:51:26:2E:44:92:C4:17:E4:41:00:C0:A0:9E:67:6A:4D:A4:07:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C95448F254493396892F8D20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23cb877-4269-381d-8037-2744789720ce.roa Signing time: Thu 08 May 2025 15:41:08 +0000 ROA not before: Thu 08 May 2025 15:41:08 +0000 ROA not after: Wed 06 Aug 2025 15:41:08 +0000 asID: 36623 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:48:f2:54:49:33:96:89:2f:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:08 2025 GMT Not After : Aug 6 15:41:08 2025 GMT Subject: CN=1fe82c0b-169c-4971-8e11-0726354ec860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d2:df:78:c9:d4:98:2d:43:b3:2d:be:cd:d7: f7:7a:9b:55:b9:db:f8:58:0f:17:4e:fd:70:cc:f7: e8:ab:9d:af:7a:cf:d9:58:32:c0:6f:f7:f5:4e:58: 7d:68:43:51:b9:5b:cf:8c:76:7f:2e:78:79:c2:0a: 64:99:18:97:6c:90:d0:24:6d:6e:1d:85:da:80:85: 50:ab:e5:a9:da:ae:85:99:2f:75:f6:ee:95:8a:8b: be:f3:44:d4:36:61:aa:92:50:7d:e2:fb:6b:cb:7e: e7:45:e5:43:9a:87:c1:20:cf:3f:be:0c:5f:5f:9a: ff:05:e2:19:4c:20:11:75:5c:48:db:cc:2c:d7:4b: f4:3b:dc:62:af:0a:6b:d8:9e:de:82:ad:b9:ac:c1: 8b:d0:a2:c2:02:97:8d:ac:ca:e7:c0:16:6a:2f:4d: 8d:d7:4e:38:1d:17:44:ff:c1:35:3a:59:a6:26:5b: 34:4d:c2:66:3e:b8:61:2a:06:29:c3:8f:0a:6d:ae: f8:c3:6e:b3:ba:7c:b2:18:48:c4:4d:27:a2:56:a1: 50:4f:09:cb:a3:4c:91:1c:59:8e:28:a7:25:66:14: b6:24:4c:d8:96:b7:3c:65:74:03:4a:89:e2:c4:fb: 5c:0f:e0:18:a3:32:ec:01:34:7b:28:20:c8:94:11: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:26:2E:44:92:C4:17:E4:41:00:C0:A0:9E:67:6A:4D:A4:07:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23cb877-4269-381d-8037-2744789720ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:56:1c:fb:b7:56:ab:91:9a:a7:e8:dc:df:7c:23:fe:98:bb: cd:cc:0b:c2:bf:4d:a0:bc:4f:14:33:d8:9e:5c:89:a7:85:53: 09:14:f6:5f:86:82:c8:9f:2d:4f:f6:60:95:eb:88:18:25:b8: d1:95:08:1b:e2:dc:41:5b:d2:90:c5:92:a4:f3:f8:97:aa:75: d4:e2:22:f3:8c:19:71:fb:4b:d3:e1:81:d7:7c:85:15:97:cb: 36:ff:27:48:08:ab:44:a7:d9:80:17:5c:10:03:8b:e6:bb:78: 04:dd:7a:51:df:c5:f6:d6:8b:4d:2f:8e:1c:bc:d0:58:88:2e: aa:4c:93:5d:ae:da:81:15:a0:c4:50:2e:1f:a4:2a:3b:e7:9d: b5:50:00:3b:7f:bb:07:67:c0:2d:69:b6:1c:d4:47:07:32:9d: a0:18:6a:86:2c:8c:96:bd:f6:2b:e7:23:1a:0e:84:50:56:5c: 60:c3:7d:29:ed:96:b6:17:0a:25:4f:f7:b4:63:43:7e:1d:43: a6:b8:07:3f:92:04:11:86:6c:00:9c:71:32:86:87:a1:ba:1c: 52:cb:cd:66:0a:39:2e:29:18:08:dd:51:de:28:d4:03:e5:e4: 27:1b:45:e6:ba:04:2c:0b:02:9c:45:10:37:3f:85:e2:0a:df: 9f:46:73:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEjyVEkzlokvjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOFoXDTI1MDgwNjE1NDEwOFowLzEtMCsGA1UEAxMk MWZlODJjMGItMTY5Yy00OTcxLThlMTEtMDcyNjM1NGVjODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltLfeMnUmC1Dsy2+zdf3eptVudv4WA8XTv1w zPfoq52ves/ZWDLAb/f1Tlh9aENRuVvPjHZ/Lnh5wgpkmRiXbJDQJG1uHYXagIVQ q+Wp2q6FmS919u6Viou+80TUNmGqklB94vtry37nReVDmofBIM8/vgxfX5r/BeIZ TCARdVxI28ws10v0O9xirwpr2J7egq25rMGL0KLCApeNrMrnwBZqL02N1044HRdE /8E1OlmmJls0TcJmPrhhKgYpw48Kba74w26zunyyGEjETSeiVqFQTwnLo0yRHFmO KKclZhS2JEzYlrc8ZXQDSonixPtcD+AYozLsATR7KCDIlBGFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlRJi5EksQX5EEAwKCeZ2pNpAfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIzY2I4NzctNDI2OS0z ODFkLTgwMzctMjc0NDc4OTcyMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5WHPu3VquRmqfo3N98I/6Yu83MC8K/TaC8TxQz2J5ciaeFUwkU9l+G gsifLU/2YJXriBgluNGVCBvi3EFb0pDFkqTz+JeqddTiIvOMGXH7S9Phgdd8hRWX yzb/J0gIq0Sn2YAXXBADi+a7eATdelHfxfbWi00vjhy80FiILqpMk12u2oEVoMRQ Lh+kKjvnnbVQADt/uwdnwC1pthzURwcynaAYaoYsjJa99ivnIxoOhFBWXGDDfSnt lrYXCiVP97RjQ34dQ6a4Bz+SBBGGbACccTKGh6G6HFLLzWYKOS4pGAjdUd4o1APl 5CcbRea6BCwLApxFEDc/heIK359Gc/M= -----END CERTIFICATE-----Generated at Tue May 13 11:25:29 2025 by rpki-client