$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccc2b324-0165-3e5f-8134-ea33403baf20.roa File: ccc2b324-0165-3e5f-8134-ea33403baf20.roa (raw, json) Hash identifier: Qdf/kEOoZU2Bjqwvxd3YmTUQQ/vUpIUQjg+UWTi8jYo= Subject key identifier: 67:69:85:00:72:5E:E9:3F:8F:BF:5C:35:94:57:E7:E8:19:7E:C4:83 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA9C0D68A8A1E327B19D20AE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccc2b324-0165-3e5f-8134-ea33403baf20.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 396563 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:d6:8a:8a:1e:32:7b:19:d2:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=e952ab1d-8915-4b84-9b14-fa46681c8730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:bf:d7:e2:b9:c6:04:5f:b5:6a:6e:e7:57: 23:c7:1b:7d:5a:c5:ed:41:c1:c3:1f:b5:9f:77:32: 12:e3:14:e4:e1:72:c3:e7:a8:2b:0d:a7:a0:41:dd: 12:fc:5f:b0:cd:23:1c:f2:45:67:33:84:7d:04:8f: fb:ba:a2:f0:97:06:eb:75:73:c9:37:8a:c7:c6:6c: 68:52:7f:07:26:85:5d:d2:48:9c:da:e1:e2:fc:ee: 76:d8:64:25:ef:e8:97:a6:a0:4c:67:f4:65:3d:ac: 19:7f:68:e4:46:c0:a6:f7:61:02:75:4f:d0:f7:af: 83:16:5e:b8:5e:78:9d:bc:ac:1f:ca:23:97:4d:26: f2:20:f5:28:ec:4f:e0:46:8a:01:3f:bb:2b:a2:73: cc:e2:85:a9:5b:f2:a5:45:47:db:9b:9a:4c:ec:35: 14:62:4d:76:b4:8e:a8:c6:f9:23:3a:50:a9:37:95: bb:3a:33:97:ac:74:cc:10:10:ab:6b:df:97:04:6e: 8d:ce:36:5e:f1:45:c2:11:0c:63:40:c1:65:f0:50: ce:80:28:09:ac:ed:c7:33:71:2b:95:44:43:91:12: 9f:6f:d1:44:90:4c:af:a5:0f:13:ea:00:c3:72:e8: af:01:1d:3f:06:34:5f:8e:9b:ab:cf:31:aa:9d:1f: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:69:85:00:72:5E:E9:3F:8F:BF:5C:35:94:57:E7:E8:19:7E:C4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccc2b324-0165-3e5f-8134-ea33403baf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b9:f3:6f:82:43:7e:8d:fd:3a:13:50:53:1b:00:52:4c:d7: 2c:45:8b:8e:16:a8:e1:d3:23:e4:44:db:2d:84:93:31:ab:79: ab:f2:82:46:91:90:d6:23:a0:85:8f:ee:2e:58:01:ff:ad:b5: be:aa:38:8b:f9:cc:0a:a5:7e:07:cd:22:48:50:52:81:5c:5d: 06:57:c5:cc:da:34:8b:70:4d:c5:69:af:e0:cc:72:09:f1:4a: a4:a9:a9:59:d6:02:7d:3e:b8:46:ea:92:0f:4f:ec:5d:c7:d0: 9e:34:32:95:b8:1f:78:93:23:89:fd:d0:b7:93:92:2a:63:62: e5:b1:97:52:da:98:7f:7e:d0:5f:74:9c:45:55:15:09:a9:28: 45:0c:9a:54:c7:13:c9:ed:fe:0b:1d:00:d6:a7:9e:42:0f:04: d1:12:58:08:51:c2:0b:d7:6d:a9:b0:d8:7f:17:92:d6:f2:e4: 8c:f1:c2:b3:56:42:81:e2:33:9a:57:6c:e1:99:a2:d8:35:15: 43:38:e1:7d:1c:54:a4:a8:e3:b2:f9:27:f6:ab:4d:a9:f0:3c: a0:02:42:a3:15:10:2a:e3:28:28:de:21:e8:1e:0c:4a:2b:d9: 65:15:13:26:67:c8:fc:c4:39:5e:6b:9c:32:5c:dd:33:d6:01: cc:d6:30:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwNaKih4yexnSCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk ZTk1MmFiMWQtODkxNS00Yjg0LTliMTQtZmE0NjY4MWM4NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOK/1+K5xgRftWpu51cjxxt9WsXtQcHDH7Wf dzIS4xTk4XLD56grDaegQd0S/F+wzSMc8kVnM4R9BI/7uqLwlwbrdXPJN4rHxmxo Un8HJoVd0kic2uHi/O522GQl7+iXpqBMZ/RlPawZf2jkRsCm92ECdU/Q96+DFl64 XnidvKwfyiOXTSbyIPUo7E/gRooBP7sronPM4oWpW/KlRUfbm5pM7DUUYk12tI6o xvkjOlCpN5W7OjOXrHTMEBCra9+XBG6NzjZe8UXCEQxjQMFl8FDOgCgJrO3HM3Er lURDkRKfb9FEkEyvpQ8T6gDDcuivAR0/BjRfjpurzzGqnR8wsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdphQByXuk/j79cNZRX5+gZfsSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NjMmIzMjQtMDE2NS0z ZTVmLTgxMzQtZWEzMzQwM2JhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe582+CQ36N/ToTUFMbAFJM1yxFi44WqOHTI+RE2y2EkzGreavygkaR kNYjoIWP7i5YAf+ttb6qOIv5zAqlfgfNIkhQUoFcXQZXxczaNItwTcVpr+DMcgnx SqSpqVnWAn0+uEbqkg9P7F3H0J40MpW4H3iTI4n90LeTkipjYuWxl1LamH9+0F90 nEVVFQmpKEUMmlTHE8nt/gsdANannkIPBNESWAhRwgvXbamw2H8Xktby5IzxwrNW QoHiM5pXbOGZotg1FUM44X0cVKSo47L5J/arTanwPKACQqMVECrjKCjeIegeDEor 2WUVEyZnyPzEOV5rnDJc3TPWAczWMJE= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:58 2025 by rpki-client