$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json) Hash identifier: WakA1wSe91LIYvd1g3WD3ve64q2sFk8kjX8c8S1xAsE= Subject key identifier: 35:E1:88:30:39:09:4C:17:D7:FB:4C:91:52:12:66:BA:1D:2F:92:DE Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F43285849E4EFC04BD552E4E81EE72350 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 6079 IP address blocks: 208.99.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c0:4b:d5:52:e4:e8:1e:e7:23:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=c71cdd20-944d-42e4-848c-b392924eeb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:00:4c:62:7a:e7:37:e2:c1:76:2f:34:f2: 06:ec:a8:91:8d:87:f0:a3:7a:e2:b2:a3:8e:d9:26: 2f:ee:e2:05:c2:6a:44:55:18:2b:d6:3e:3e:eb:91: 7e:d6:9b:d8:c9:06:62:cc:5d:f3:1a:99:57:72:8f: f5:b0:7b:07:e3:83:d4:76:f8:82:87:d4:4e:12:03: 78:46:b8:59:26:52:ed:97:55:67:0f:21:11:b2:31: 08:9f:36:c4:b2:30:cd:ad:7b:56:d9:58:ca:8b:e9: da:b5:39:3e:d7:cd:2b:93:34:16:05:05:02:01:63: e2:32:db:c7:04:c7:13:01:d6:6a:a2:39:43:a7:86: 03:b7:dc:18:8a:21:f1:d6:98:68:d8:c7:3b:43:de: fa:fd:8e:6b:35:7c:50:a3:6f:f0:e0:4b:b6:e6:b2: 1a:f8:62:f3:c7:4e:fe:43:41:14:de:fb:87:43:23: c0:b5:8f:a9:4f:c7:8d:24:79:a3:d5:da:d9:e1:95: e5:91:a0:50:22:1b:e0:23:38:dd:21:6e:a5:57:32: 35:a6:92:f3:99:53:ef:54:23:e9:cd:5e:80:41:72: f8:47:8a:cf:bf:e9:94:44:ff:19:10:f1:63:01:66: 35:c3:61:ed:b6:c2:3e:73:a5:c8:8d:3b:f0:da:9e: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:88:30:39:09:4C:17:D7:FB:4C:91:52:12:66:BA:1D:2F:92:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:84:9a:33:24:a1:1c:69:a8:84:ee:d8:94:62:b3:96:8d:6f: c5:43:4f:ba:0c:b9:2b:f4:db:14:bd:20:2e:30:d3:0f:b0:20: 81:f7:88:6e:aa:44:5d:91:dc:48:87:36:84:92:2c:c8:87:2d: 7c:6e:1b:e8:f4:7f:fb:2b:3f:a2:d6:74:98:96:aa:e4:d6:9f: 31:64:a5:a2:e6:ce:49:61:28:81:9c:b1:a1:89:ef:5d:e2:71: c3:4d:98:50:da:04:ff:4c:46:89:a4:36:00:dc:74:bd:2d:36: 04:5a:d1:8a:40:b9:de:1a:2a:86:b8:22:6c:2f:2f:cf:99:8d: 0e:8f:b8:cb:db:10:43:60:29:42:db:5f:ba:f8:ac:a8:ea:98: cf:7b:83:76:89:c0:8d:35:8c:fb:39:d5:c1:fd:12:ad:11:cd: 68:9b:78:58:33:60:50:3e:55:32:1b:64:be:9d:2d:75:3f:55: 18:b2:de:57:a8:d3:f8:f9:b7:46:09:f5:40:20:04:0d:49:3c: 10:bd:d8:5a:a5:96:61:cb:c6:e0:71:59:71:91:1e:6f:8c:05: 8d:7e:42:ca:c9:7f:44:42:d4:82:d8:98:8d:61:b1:5c:57:14: 4f:72:6f:2f:03:0e:41:5c:ed:68:b3:ea:d6:96:32:a0:6a:91: 00:97:89:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78BL1VLk6B7nI1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YzcxY2RkMjAtOTQ0ZC00MmU0LTg0OGMtYjM5MjkyNGVlYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HIATGJ65zfiwXYvNPIG7KiRjYfwo3risqOO 2SYv7uIFwmpEVRgr1j4+65F+1pvYyQZizF3zGplXco/1sHsH44PUdviCh9ROEgN4 RrhZJlLtl1VnDyERsjEInzbEsjDNrXtW2VjKi+natTk+180rkzQWBQUCAWPiMtvH BMcTAdZqojlDp4YDt9wYiiHx1pho2Mc7Q976/Y5rNXxQo2/w4Eu25rIa+GLzx07+ Q0EU3vuHQyPAtY+pT8eNJHmj1drZ4ZXlkaBQIhvgIzjdIW6lVzI1ppLzmVPvVCPp zV6AQXL4R4rPv+mURP8ZEPFjAWY1w2HttsI+c6XIjTvw2p7C+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXhiDA5CUwX1/tMkVISZrodL5LeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzM5Y2NhMzItZjM5NS0z ZmU0LTg0ZGEtNjJkYTZiOGQyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiEmjMkoRxpqITu2JRis5aNb8VDT7oMuSv02xS9IC4w0w+wIIH3iG6q RF2R3EiHNoSSLMiHLXxuG+j0f/srP6LWdJiWquTWnzFkpaLmzklhKIGcsaGJ713i ccNNmFDaBP9MRomkNgDcdL0tNgRa0YpAud4aKoa4ImwvL8+ZjQ6PuMvbEENgKULb X7r4rKjqmM97g3aJwI01jPs51cH9Eq0RzWibeFgzYFA+VTIbZL6dLXU/VRiy3leo 0/j5t0YJ9UAgBA1JPBC92FqllmHLxuBxWXGRHm+MBY1+QsrJf0RC1ILYmI1hsVxX FE9yby8DDkFc7Wiz6taWMqBqkQCXiXY= -----END CERTIFICATE-----Generated at Sun Jun 15 19:52:05 2025 by rpki-client