$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ffa5dd-a688-3208-ab00-351cbccf276d.roa File: c8ffa5dd-a688-3208-ab00-351cbccf276d.roa (raw, json) Hash identifier: 5lb78ZH2zy2eNladI0NvfJRcILvKtVUu83twv81vDaU= Subject key identifier: 0F:78:5D:17:BB:9F:48:33:C1:D1:5F:0B:E6:E0:A7:1E:5E:04:37:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A268AD0D1506D22F2C983E480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ffa5dd-a688-3208-ab00-351cbccf276d.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 396554 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:d0:d1:50:6d:22:f2:c9:83:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=33b7b9b6-ba01-46fa-965e-169df5df09dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a5:6d:c5:f5:32:9d:a7:db:0f:0a:0b:b9:c4: fe:ad:e9:73:59:60:7f:1d:d3:39:57:da:70:a8:c3: 2a:6a:0b:a2:9c:2e:99:01:43:85:f6:27:00:a8:06: 3d:9f:d6:f7:0b:3e:b7:de:6e:ab:6f:c8:5c:10:9e: f8:da:79:6a:7a:6c:6a:78:1b:b8:91:fe:ce:45:11: de:2b:2d:fd:1f:9c:f2:d3:95:fd:ca:c5:a0:38:47: ed:dd:d6:59:53:18:b3:de:8e:a1:bc:17:f7:00:b8: 3a:db:54:70:66:19:5c:5f:aa:93:5f:1e:46:52:7c: 50:17:e5:3e:2b:80:9b:80:9f:5d:37:2b:92:07:19: 5d:42:d8:3d:b0:45:85:1b:80:41:92:e5:f6:ac:e2: 0d:87:83:66:24:9d:ed:cf:fb:77:29:50:4c:25:2a: c4:a9:31:e4:a8:f0:df:54:33:93:ea:7a:77:15:50: 50:29:35:b8:e6:7c:09:b4:9e:49:66:29:fd:ef:79: f9:70:83:12:fd:7d:0e:1b:f7:18:88:96:d4:b5:2f: 79:3f:0b:49:a6:c9:85:6f:2b:cd:9f:05:7f:68:ea: 33:40:2f:28:9b:bd:2f:e8:8f:8b:ec:b9:e2:b9:8a: 8d:d6:f3:ea:c0:eb:c1:11:b6:70:63:82:7e:18:80: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:78:5D:17:BB:9F:48:33:C1:D1:5F:0B:E6:E0:A7:1E:5E:04:37:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ffa5dd-a688-3208-ab00-351cbccf276d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5d:cb:63:df:73:14:c9:53:b6:83:ec:66:99:9b:ac:61:f0: d8:52:cc:ab:96:02:09:ae:6d:69:1d:4d:73:a7:a8:b5:71:97: d0:56:58:01:3a:d3:f0:f1:ce:ca:11:5a:aa:77:21:58:db:55: 86:b1:6f:89:aa:80:f2:02:85:b9:e6:a3:0a:31:6d:90:d1:6d: 20:ee:ee:90:7d:8c:65:fa:86:e3:40:2a:c1:55:00:79:3f:a7: 63:85:84:eb:ae:24:8d:9c:cd:6f:06:16:6c:ea:63:7f:89:01: 73:32:84:48:62:ae:c3:42:34:fe:f6:99:e7:f0:3e:9f:46:c8: db:57:f5:5f:35:87:24:2a:f2:3f:47:ee:4e:6a:0f:c1:cb:db: 28:37:b6:00:68:2a:ce:6d:0b:3b:28:a7:9c:11:06:ed:77:9e: 99:e7:5a:13:30:53:f0:cb:e5:4d:0d:a8:86:67:03:99:81:0b: 27:ec:af:7a:5b:57:e5:fb:bb:48:cb:80:d5:2e:b6:fd:5d:5d: 7d:36:79:26:4d:6f:ef:48:75:1b:73:13:6e:a3:6a:e8:20:26: 3b:5b:46:ab:41:26:a3:56:55:7a:e7:1a:4e:b8:b1:8f:bb:c8: be:77:2d:f7:a9:3d:bb:f9:9b:63:fd:1e:19:7b:67:ea:32:c3: a9:2a:11:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomitDRUG0i8smD5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MzNiN2I5YjYtYmEwMS00NmZhLTk2NWUtMTY5ZGY1ZGYwOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqVtxfUynafbDwoLucT+relzWWB/HdM5V9pw qMMqaguinC6ZAUOF9icAqAY9n9b3Cz633m6rb8hcEJ742nlqemxqeBu4kf7ORRHe Ky39H5zy05X9ysWgOEft3dZZUxiz3o6hvBf3ALg621RwZhlcX6qTXx5GUnxQF+U+ K4CbgJ9dNyuSBxldQtg9sEWFG4BBkuX2rOINh4NmJJ3tz/t3KVBMJSrEqTHkqPDf VDOT6np3FVBQKTW45nwJtJ5JZin973n5cIMS/X0OG/cYiJbUtS95PwtJpsmFbyvN nwV/aOozQC8om70v6I+L7LniuYqN1vPqwOvBEbZwY4J+GID5FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA94XRe7n0gzwdFfC+bgpx5eBDe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzhmZmE1ZGQtYTY4OC0z MjA4LWFiMDAtMzUxY2JjY2YyNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFXctj33MUyVO2g+xmmZusYfDYUsyrlgIJrm1pHU1zp6i1cZfQVlgB OtPw8c7KEVqqdyFY21WGsW+JqoDyAoW55qMKMW2Q0W0g7u6QfYxl+objQCrBVQB5 P6djhYTrriSNnM1vBhZs6mN/iQFzMoRIYq7DQjT+9pnn8D6fRsjbV/VfNYckKvI/ R+5Oag/By9soN7YAaCrObQs7KKecEQbtd56Z51oTMFPwy+VNDaiGZwOZgQsn7K96 W1fl+7tIy4DVLrb9XV19NnkmTW/vSHUbcxNuo2roICY7W0arQSajVlV65xpOuLGP u8i+dy33qT27+Ztj/R4Ze2fqMsOpKhEv -----END CERTIFICATE-----Generated at Mon Jun 16 05:28:11 2025 by rpki-client