$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b9ede-eb52-34db-8fd4-200bbbf7210e.roa File: f09b9ede-eb52-34db-8fd4-200bbbf7210e.roa (raw, json) Hash identifier: b8RH4M0UsSfWqTYYQklpfSkpX1ATR3Dvnt3yZ3djEnw= Subject key identifier: C2:7A:7A:6A:F3:89:3F:FE:07:15:C4:75:93:4F:BE:CC:53:A8:61:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C954499C976DD717D31F0500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b9ede-eb52-34db-8fd4-200bbbf7210e.roa Signing time: Thu 08 May 2025 15:41:08 +0000 ROA not before: Thu 08 May 2025 15:41:08 +0000 ROA not after: Wed 06 Aug 2025 15:41:08 +0000 asID: 397206 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:54:49:9c:97:6d:d7:17:d3:1f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 8 15:41:08 2025 GMT Not After : Aug 6 15:41:08 2025 GMT Subject: CN=f9c3341b-e806-40f1-985a-6dc74f12679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e0:c3:ca:f4:8a:61:5a:79:5a:f5:d2:45:c1: 25:ad:d9:92:9a:6e:a8:db:6d:fb:6d:15:00:b2:ca: 5d:7b:c1:88:ad:d7:c9:ff:1e:92:c9:5a:4d:29:3c: de:f1:3b:99:77:87:b1:10:02:4e:1c:d9:89:68:56: f0:10:19:0e:1c:7f:93:29:fe:b6:6e:10:cc:19:bc: e4:5f:fd:09:35:92:94:04:20:f4:d7:88:07:31:0c: 92:cb:a7:01:26:4b:5a:1e:7d:e4:95:bb:fe:bb:b1: 6b:a1:65:6b:0e:f3:6f:a7:c4:38:ab:54:f0:21:b5: be:87:c8:51:bb:53:8f:32:8b:c3:57:08:c9:14:cb: 2e:87:4b:9d:23:c7:a1:59:3a:c2:83:e6:1d:f3:c7: 69:8a:cb:84:47:3f:3d:b1:32:dc:1e:46:cd:d2:d3: 87:59:be:46:d1:00:b3:62:f8:76:0e:5e:3d:05:40: e7:86:90:6a:87:6c:dc:0d:7c:fe:39:64:07:14:31: 94:77:49:a2:9d:d8:c6:45:bf:07:58:24:de:0b:b3: 08:9f:23:f4:48:ab:25:7d:c4:c5:5c:3a:cb:5f:d8: 1e:65:25:7b:90:21:02:ff:aa:77:68:70:c9:d9:ce: 4a:cb:9e:41:23:1d:41:c6:fd:7c:b1:bc:47:e2:4d: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:7A:6A:F3:89:3F:FE:07:15:C4:75:93:4F:BE:CC:53:A8:61:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b9ede-eb52-34db-8fd4-200bbbf7210e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5c:7b:f8:f4:03:2d:a6:65:8d:1e:a1:7b:44:8f:f7:48:6e: ab:cc:6a:29:8f:e8:a2:76:c7:aa:44:1d:21:6d:8c:23:5c:e7: ef:16:79:f6:b7:e8:b5:09:3b:a6:c0:41:3b:c0:35:66:6a:99: b5:ee:36:7b:4f:fb:de:12:b6:3e:fb:20:ac:78:f6:57:eb:cf: a7:9e:51:d7:ce:31:5b:18:37:58:09:96:f0:54:dc:42:0a:0a: 6b:91:02:16:f0:c5:2d:3e:37:5a:38:ac:a8:e0:90:29:d9:94: 20:ac:0a:c1:64:6b:1d:bd:9b:04:c9:ec:af:61:d2:10:58:a6: 9f:bd:02:51:2b:95:62:5e:06:db:3a:92:aa:52:06:63:b4:85: c0:ee:56:0b:e9:26:b1:27:05:ac:92:e2:3d:4e:f4:a3:15:c2: 93:31:3c:f0:d2:86:7b:55:b2:0d:0a:a2:cc:49:fb:b3:ce:fd: c1:25:62:9a:12:e3:f1:b0:18:4f:f0:59:1e:45:96:d3:fe:66: d2:42:37:88:71:99:ef:7e:4c:77:b9:a1:af:c7:c7:ba:f4:d8: 3b:2b:67:02:7a:85:04:36:2d:7b:1d:db:f6:69:df:ba:ec:72: 10:98:b2:41:ad:b1:08:f4:67:c8:16:4b:12:29:28:a9:7d:e6: ef:96:a3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEmcl23XF9MfBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwODE1NDEwOFoXDTI1MDgwNjE1NDEwOFowLzEtMCsGA1UEAxMk ZjljMzM0MWItZTgwNi00MGYxLTk4NWEtNmRjNzRmMTI2NzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhODDyvSKYVp5WvXSRcElrdmSmm6o2237bRUA sspde8GIrdfJ/x6SyVpNKTze8TuZd4exEAJOHNmJaFbwEBkOHH+TKf62bhDMGbzk X/0JNZKUBCD014gHMQySy6cBJktaHn3klbv+u7FroWVrDvNvp8Q4q1TwIbW+h8hR u1OPMovDVwjJFMsuh0udI8ehWTrCg+Yd88dpisuERz89sTLcHkbN0tOHWb5G0QCz Yvh2Dl49BUDnhpBqh2zcDXz+OWQHFDGUd0mindjGRb8HWCTeC7MInyP0SKslfcTF XDrLX9geZSV7kCEC/6p3aHDJ2c5Ky55BIx1Bxv18sbxH4k2EawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ6emrziT/+BxXEdZNPvsxTqGGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA5YjllZGUtZWI1Mi0z NGRiLThmZDQtMjAwYmJiZjcyMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1ce/j0Ay2mZY0eoXtEj/dIbqvMaimP6KJ2x6pEHSFtjCNc5+8Wefa3 6LUJO6bAQTvANWZqmbXuNntP+94Stj77IKx49lfrz6eeUdfOMVsYN1gJlvBU3EIK CmuRAhbwxS0+N1o4rKjgkCnZlCCsCsFkax29mwTJ7K9h0hBYpp+9AlErlWJeBts6 kqpSBmO0hcDuVgvpJrEnBayS4j1O9KMVwpMxPPDShntVsg0KosxJ+7PO/cElYpoS 4/GwGE/wWR5FltP+ZtJCN4hxme9+THe5oa/Hx7r02DsrZwJ6hQQ2LXsd2/Zp37rs chCYskGtsQj0Z8gWSxIpKKl95u+Woz8= -----END CERTIFICATE-----Generated at Sat May 10 23:34:57 2025 by rpki-client