$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa File: e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa (raw, json) Hash identifier: +PkaD73NHyNDsRrZyKmvqhkuY1t8uzdMOOyWA1FiCMA= Subject key identifier: 41:6D:9A:E2:0B:DF:23:BB:1F:B3:AA:C0:B7:B9:8D:CE:6B:40:62:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C9544BA0A3057A1444B9A000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa Signing time: Thu 08 May 2025 15:41:09 +0000 ROA not before: Thu 08 May 2025 15:41:09 +0000 ROA not after: Wed 06 Aug 2025 15:41:09 +0000 asID: 396615 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:4b:a0:a3:05:7a:14:44:b9:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:09 2025 GMT Not After : Aug 6 15:41:09 2025 GMT Subject: CN=509560b1-64c2-4e51-9dac-34a48704b41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:02:ad:27:50:bf:5d:8b:73:6d:e9:40:dc: 2b:8f:3b:e9:65:81:3e:5c:ae:e5:19:a6:aa:8b:55: f9:9e:1a:a4:06:a9:13:43:e2:67:2f:97:b7:25:cf: c3:82:e4:b6:d8:e1:b5:b8:a9:05:91:b1:76:5c:09: e0:81:3c:a0:d1:88:84:61:ac:e5:9b:f4:fb:27:bd: 85:87:e2:46:0a:be:0e:85:cf:6f:8f:3e:1f:80:65: c1:3b:7f:fb:92:28:6a:7e:5b:ba:a8:45:94:47:10: ee:1a:e2:28:c7:59:3a:49:87:df:e1:4b:b5:8c:e2: 1f:a1:08:d0:10:9d:48:d4:ff:88:6b:77:23:e1:6b: a4:30:78:f1:4e:81:86:c5:5c:f3:fd:27:b8:f1:96: b8:51:2a:87:cd:a6:e2:f2:a1:b4:66:17:c7:b3:59: 09:b9:02:e4:6f:9c:df:d4:01:d4:59:01:6d:b3:14: f5:41:6c:d1:55:52:06:2d:f9:83:b8:48:2e:24:85: ec:da:a4:ae:38:a5:9e:67:c5:6f:88:1f:a2:80:cf: 5b:06:1a:e9:16:5f:55:e1:78:6a:7a:bd:18:ca:dc: f2:92:a8:16:8f:c6:b7:53:10:b8:cb:9f:51:20:d6: 59:e1:0a:c9:e1:ad:9f:53:87:65:28:63:de:19:bf: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6D:9A:E2:0B:DF:23:BB:1F:B3:AA:C0:B7:B9:8D:CE:6B:40:62:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8a:51:cb:cc:69:bf:73:2b:c9:93:9c:c4:85:2b:c7:33:53: 5a:48:9f:dc:66:00:44:6b:3a:1a:4a:b9:c4:9e:12:89:93:cc: 95:b5:03:68:32:6f:a8:d1:15:21:d3:6f:79:9f:77:59:b3:4d: 79:c8:33:d0:d6:54:79:00:97:19:5a:af:f7:12:2a:e9:10:b1: 00:46:7d:0b:d0:ca:3c:37:68:d3:b4:d1:f3:bf:47:8c:d7:4d: 01:1f:47:b8:82:58:93:51:d0:a0:b4:ca:5e:40:fc:c1:6d:70: 6a:71:93:3d:df:28:3d:3a:c4:16:e3:c7:b0:ff:a4:27:d9:56: c4:67:e2:fe:05:56:54:de:74:73:a6:11:12:d6:8f:6b:30:a8: 3a:61:6e:16:7c:05:c2:74:79:1e:62:51:5e:ea:34:97:59:78: e3:fe:75:10:30:75:70:ec:6f:bf:99:54:93:01:4d:6c:d4:09: 43:43:86:68:23:84:cd:3a:08:6d:2d:07:f4:5e:f0:4b:99:a0: bd:58:3a:65:57:77:37:8f:a8:40:52:ce:52:09:36:19:d6:6d: 6a:48:ed:d3:91:a4:6f:0e:e5:1a:95:cf:25:cc:08:49:8a:57: 19:f9:88:27:38:6f:86:66:d5:2e:67:5a:cd:8a:6c:ec:75:3a: 78:c2:ff:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEugowV6FES5oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOVoXDTI1MDgwNjE1NDEwOVowLzEtMCsGA1UEAxMk NTA5NTYwYjEtNjRjMi00ZTUxLTlkYWMtMzRhNDg3MDRiNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kcCrSdQv12Lc23pQNwrjzvpZYE+XK7lGaaq i1X5nhqkBqkTQ+JnL5e3Jc/DguS22OG1uKkFkbF2XAnggTyg0YiEYazlm/T7J72F h+JGCr4Ohc9vjz4fgGXBO3/7kihqflu6qEWURxDuGuIox1k6SYff4Uu1jOIfoQjQ EJ1I1P+Ia3cj4WukMHjxToGGxVzz/Se48Za4USqHzabi8qG0ZhfHs1kJuQLkb5zf 1AHUWQFtsxT1QWzRVVIGLfmDuEguJIXs2qSuOKWeZ8VviB+igM9bBhrpFl9V4Xhq er0YytzykqgWj8a3UxC4y59RINZZ4QrJ4a2fU4dlKGPeGb9pMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFtmuIL3yO7H7OqwLe5jc5rQGJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk3ZTNkMmUtODFhNi0z MmYyLThiZGUtNjZmNzc1M2Q5ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSKUcvMab9zK8mTnMSFK8czU1pIn9xmAERrOhpKucSeEomTzJW1A2gy b6jRFSHTb3mfd1mzTXnIM9DWVHkAlxlar/cSKukQsQBGfQvQyjw3aNO00fO/R4zX TQEfR7iCWJNR0KC0yl5A/MFtcGpxkz3fKD06xBbjx7D/pCfZVsRn4v4FVlTedHOm ERLWj2swqDphbhZ8BcJ0eR5iUV7qNJdZeOP+dRAwdXDsb7+ZVJMBTWzUCUNDhmgj hM06CG0tB/Re8EuZoL1YOmVXdzePqEBSzlIJNhnWbWpI7dORpG8O5RqVzyXMCEmK Vxn5iCc4b4Zm1S5nWs2KbOx1OnjC/6I= -----END CERTIFICATE-----Generated at Sat May 10 23:29:05 2025 by rpki-client