$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9356bbbf-d558-3596-bb05-a155e298d87b.roa File: 9356bbbf-d558-3596-bb05-a155e298d87b.roa (raw, json) Hash identifier: YlcbAslx9pEX/kHmLRYhxF1HEVnWwYaBS8Hk9Tk5eGc= Subject key identifier: 2F:AC:F0:76:A5:01:D9:C6:B0:48:B6:62:16:F3:3D:9D:16:33:4A:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA9C0D62CC92BF32D5D751C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9356bbbf-d558-3596-bb05-a155e298d87b.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 36620 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:d6:2c:c9:2b:f3:2d:5d:75:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=4283c9e9-da01-45ed-882d-0000c921df86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:45:82:88:d9:36:7d:63:3c:20:b0:cd:2f: d0:c9:1f:c3:1f:30:64:ab:bd:9b:46:26:ac:37:bb: 98:ab:9c:e3:46:5e:20:1a:b7:8b:5c:a8:8f:e2:2d: 67:76:3d:1e:7b:6f:1e:2d:95:7d:dd:d2:e1:27:08: 9f:bd:0d:dc:7d:ce:c7:32:06:4a:87:4b:23:74:08: 3e:b7:8e:69:0c:40:22:41:4f:c9:57:af:54:12:9f: ef:c3:a4:f2:89:91:89:8c:5d:f9:87:82:f2:eb:df: 11:dc:e8:d8:97:24:76:ad:ea:fe:18:ce:45:40:9b: e8:74:5a:89:8c:09:35:1b:6d:b3:36:e6:37:1e:ed: f6:bc:07:4e:54:d2:2f:0f:93:ef:62:90:44:7c:7c: d2:f2:c7:7c:89:11:8e:56:28:6c:a5:94:3f:4f:01: 4d:98:d2:db:45:2a:f7:5e:bd:48:fb:24:9b:31:97: a1:8c:d4:93:8e:54:f8:01:90:ec:c5:0a:44:a8:cd: 7e:cc:cd:c8:a6:b0:7a:aa:cf:ec:98:c9:99:79:c8: fd:bf:81:c3:9b:82:9a:93:ce:70:41:2e:7d:37:4b: 72:dc:cc:2f:bf:80:d3:fa:03:b9:95:1a:b9:6b:a3: a7:83:69:6f:2a:5c:42:59:aa:09:3d:40:bb:01:3b: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AC:F0:76:A5:01:D9:C6:B0:48:B6:62:16:F3:3D:9D:16:33:4A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9356bbbf-d558-3596-bb05-a155e298d87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a5:9e:ef:00:8a:c4:18:3f:58:19:d8:e8:03:e5:0e:19:62: 6a:c2:d8:41:cc:0f:d3:28:27:25:49:eb:58:12:f3:02:d1:a7: 3f:ae:73:f8:3d:c5:02:59:30:67:32:a9:63:a0:7a:52:d1:de: 03:1a:7b:97:6d:88:f2:a2:c2:c0:8a:be:24:99:94:08:45:75: ca:66:0b:9f:2f:08:71:33:8a:f1:99:1d:ba:27:25:85:0b:f7: 58:9b:7f:46:14:6a:36:52:c7:89:e7:e9:51:f3:20:1a:f5:41: 38:16:99:fd:51:95:05:58:f7:26:eb:2b:e3:a5:e5:89:41:a8: 20:89:0d:18:c0:97:a5:11:de:6b:9e:ed:3d:7d:a4:1f:37:c4: 4d:55:72:9a:e2:27:45:1b:c1:ec:2c:93:dc:52:29:0b:33:6c: 2c:54:c3:fe:86:7c:3b:e2:f6:57:d9:ec:ce:37:26:17:61:31: b9:da:9e:b5:70:ba:fe:9b:11:66:7f:88:e7:5d:2b:30:44:fc: 65:39:f4:ad:67:39:5a:4f:75:90:93:66:48:d8:45:5e:76:6c: 65:ba:6f:27:4b:4f:8e:74:dd:fb:a2:a8:f0:ff:2d:75:a8:4a: f4:64:c7:f0:96:44:20:5c:9b:3f:e9:33:42:42:95:a4:c9:ad: f8:c2:bf:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwNYsySvzLV11HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk NDI4M2M5ZTktZGEwMS00NWVkLTg4MmQtMDAwMGM5MjFkZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN5FgojZNn1jPCCwzS/QyR/DHzBkq72bRias N7uYq5zjRl4gGreLXKiP4i1ndj0ee28eLZV93dLhJwifvQ3cfc7HMgZKh0sjdAg+ t45pDEAiQU/JV69UEp/vw6TyiZGJjF35h4Ly698R3OjYlyR2rer+GM5FQJvodFqJ jAk1G22zNuY3Hu32vAdOVNIvD5PvYpBEfHzS8sd8iRGOVihspZQ/TwFNmNLbRSr3 Xr1I+ySbMZehjNSTjlT4AZDsxQpEqM1+zM3IprB6qs/smMmZecj9v4HDm4Kak85w QS59N0ty3Mwvv4DT+gO5lRq5a6Ong2lvKlxCWaoJPUC7ATui8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+s8HalAdnGsEi2YhbzPZ0WM0rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTM1NmJiYmYtZDU1OC0z NTk2LWJiMDUtYTE1NWUyOThkODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGlnu8AisQYP1gZ2OgD5Q4ZYmrC2EHMD9MoJyVJ61gS8wLRpz+uc/g9 xQJZMGcyqWOgelLR3gMae5dtiPKiwsCKviSZlAhFdcpmC58vCHEzivGZHbonJYUL 91ibf0YUajZSx4nn6VHzIBr1QTgWmf1RlQVY9ybrK+Ol5YlBqCCJDRjAl6UR3mue 7T19pB83xE1VcpriJ0Ubwewsk9xSKQszbCxUw/6GfDvi9lfZ7M43JhdhMbnanrVw uv6bEWZ/iOddKzBE/GU59K1nOVpPdZCTZkjYRV52bGW6bydLT4503fuiqPD/LXWo SvRkx/CWRCBcmz/pM0JClaTJrfjCv3s= -----END CERTIFICATE-----Generated at Wed Aug 6 14:17:24 2025 by rpki-client