$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9fb477-86bb-34d1-b692-f19939e3ab38.roa File: 8f9fb477-86bb-34d1-b692-f19939e3ab38.roa (raw, json) Hash identifier: d9xEsdEvCZIVJ2Tp5RMwDrer/JhxQ/JUbWd1Kjv5oPU= Subject key identifier: B9:B1:D0:71:31:44:B4:D9:6C:C1:D0:B5:33:75:58:37:D3:82:AF:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA9C0D3D3105773A77A103300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9fb477-86bb-34d1-b692-f19939e3ab38.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 396546 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:d3:d3:10:57:73:a7:7a:10:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=cdeb7ef4-4e50-4e6a-b936-f7634a4fde4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:9e:94:d5:97:80:76:0b:85:8e:b5:41:80: 1e:d1:3c:14:a8:f3:33:e9:83:0e:12:07:d9:f1:c3: 4f:8d:18:51:da:1e:f4:23:5b:6c:8b:ac:8e:cd:79: 4d:48:50:36:7f:a1:1a:0b:0e:ba:a1:e8:06:b0:94: 86:b4:20:8c:03:aa:5c:ff:c2:82:d1:b7:a4:d9:2d: 90:30:fd:ad:d5:70:3c:9f:d0:f3:73:09:7b:59:3d: 9f:de:65:df:1e:fc:67:f1:7f:84:af:00:ab:95:29: 81:e3:2e:65:d0:b7:04:6b:91:c8:32:c2:41:5e:11: 55:cf:64:fc:13:00:4c:3b:e6:ca:6b:1f:7e:65:f0: 55:b4:4d:f9:b5:aa:e2:80:59:69:93:ae:41:50:28: aa:72:b5:77:57:e8:16:94:2d:86:92:54:21:ce:30: 8d:2b:c2:a8:35:1a:5c:f3:1d:6e:77:86:ea:2b:9e: 50:a9:c4:60:24:c9:b7:7e:be:49:23:4d:b6:7d:da: 37:7d:e4:d3:14:f3:fe:e1:fc:df:52:f3:54:d3:28: e6:cb:a9:05:ef:1f:23:68:5c:5d:ce:20:27:a9:00: 8a:09:13:0c:a4:6c:e1:9a:90:8c:f1:95:27:a1:3d: f3:30:8d:e8:d3:84:00:03:2d:4d:a4:59:01:6d:bc: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B1:D0:71:31:44:B4:D9:6C:C1:D0:B5:33:75:58:37:D3:82:AF:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9fb477-86bb-34d1-b692-f19939e3ab38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f6:ae:14:14:68:ca:42:8c:2a:13:20:73:a3:52:b5:fd:dd: 85:01:af:64:51:4b:27:d7:c4:0c:c3:a7:4a:96:e6:ee:f6:f1: 47:6b:b0:52:d0:9e:ff:54:93:dd:98:4b:7b:3e:39:5f:01:07: 95:ed:95:55:69:dc:43:5b:5a:87:28:61:a0:8c:bd:e6:46:b0: e5:44:7d:41:8c:c9:f0:d2:dc:ea:0a:73:bc:ab:0a:33:7e:f0: 7d:66:12:ea:67:55:ed:5b:7c:07:bd:fb:eb:82:65:89:fc:c5: 97:ec:80:7f:95:54:44:8a:38:ed:ca:1e:92:a1:29:7a:c6:44: d4:6d:9f:e6:eb:2a:7b:f3:60:72:74:dc:d1:ca:59:36:9a:73: 3d:8c:5e:b0:59:7c:24:9a:36:d4:1f:f4:da:1f:00:13:8f:fc: ba:91:25:ad:32:a7:8e:53:d5:23:0f:0e:56:19:57:7c:a9:58: d2:07:2c:97:21:69:66:c9:c3:8d:db:19:a8:e7:25:d0:bf:04: 93:5d:21:f5:d3:89:48:b1:82:8e:70:22:17:5e:5d:6f:29:96: 28:fb:7d:b1:b8:05:cb:c9:d0:cd:0a:af:b8:8f:0e:93:b2:da: 0c:f7:01:a4:d5:d0:ff:51:b7:33:e7:12:62:f4:d3:d5:63:86: af:30:f4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwNPTEFdzp3oQMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk Y2RlYjdlZjQtNGU1MC00ZTZhLWI5MzYtZjc2MzRhNGZkZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtSelNWXgHYLhY61QYAe0TwUqPMz6YMOEgfZ 8cNPjRhR2h70I1tsi6yOzXlNSFA2f6EaCw66oegGsJSGtCCMA6pc/8KC0bek2S2Q MP2t1XA8n9Dzcwl7WT2f3mXfHvxn8X+ErwCrlSmB4y5l0LcEa5HIMsJBXhFVz2T8 EwBMO+bKax9+ZfBVtE35tarigFlpk65BUCiqcrV3V+gWlC2GklQhzjCNK8KoNRpc 8x1ud4bqK55QqcRgJMm3fr5JI022fdo3feTTFPP+4fzfUvNU0yjmy6kF7x8jaFxd ziAnqQCKCRMMpGzhmpCM8ZUnoT3zMI3o04QAAy1NpFkBbbxgmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmx0HExRLTZbMHQtTN1WDfTgq/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGY5ZmI0NzctODZiYi0z NGQxLWI2OTItZjE5OTM5ZTNhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj2rhQUaMpCjCoTIHOjUrX93YUBr2RRSyfXxAzDp0qW5u728UdrsFLQ nv9Uk92YS3s+OV8BB5XtlVVp3ENbWocoYaCMveZGsOVEfUGMyfDS3OoKc7yrCjN+ 8H1mEupnVe1bfAe9++uCZYn8xZfsgH+VVESKOO3KHpKhKXrGRNRtn+brKnvzYHJ0 3NHKWTaacz2MXrBZfCSaNtQf9NofABOP/LqRJa0yp45T1SMPDlYZV3ypWNIHLJch aWbJw43bGajnJdC/BJNdIfXTiUixgo5wIhdeXW8plij7fbG4BcvJ0M0Kr7iPDpOy 2gz3AaTV0P9RtzPnEmL009Vjhq8w9AE= -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:51 2025 by rpki-client