$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e654885e-c454-3725-a709-730960688a5e.roa File: e654885e-c454-3725-a709-730960688a5e.roa (raw, json) Hash identifier: yMtDy1f59VAebnLRVr7WK8FY7D8H7vZCtPLX25gJd/k= Subject key identifier: 59:1C:8D:A3:50:02:E1:8A:99:29:87:92:3E:C4:76:FE:60:0F:90:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858494733F439089C4223B43E45C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e654885e-c454-3725-a709-730960688a5e.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 396594 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f4:39:08:9c:42:23:b4:3e:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=5b0f0e2f-a2a0-437d-8522-319e74955772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f5:fb:29:08:b1:2b:73:b6:97:35:f1:8e:0d: a3:ed:5d:95:00:f2:ef:09:44:23:b3:b5:bf:84:62: 4d:da:95:b4:28:be:36:8b:47:55:ff:b6:6e:04:23: ad:53:42:6b:18:bb:72:a3:3f:d4:94:34:36:9c:35: ac:7b:ba:9a:ef:a0:c9:cc:12:10:74:bc:89:fd:84: ac:da:17:1f:08:69:c1:27:11:e5:c1:64:c1:40:08: b8:83:3e:be:5e:e6:02:c5:a1:bd:09:3a:b4:db:8e: fe:9d:4b:f0:94:2e:61:15:a1:36:b7:63:5e:03:30: 85:aa:86:45:21:95:6b:b1:27:bb:e6:d5:d3:86:0d: 74:2b:89:bc:9f:7f:39:14:6b:c4:98:66:0a:2a:0a: 2d:d8:5a:b6:3f:2b:fe:5a:91:4b:c2:1c:23:ca:97: 07:93:31:30:e1:2f:51:27:f0:20:4a:d5:43:2d:f0: 61:19:eb:dd:7e:2e:f5:11:54:14:b9:6a:7e:3e:5f: 1c:b1:8f:2d:87:93:11:e7:c3:01:1e:a4:14:c8:c6: 35:f4:b5:8f:21:53:b5:4a:f1:34:64:7a:9d:94:62: a4:b0:a1:ae:56:d0:f8:c5:27:41:6f:e0:db:19:46: 84:cd:28:50:7e:d4:c1:0f:ea:e7:05:02:2f:72:5d: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:8D:A3:50:02:E1:8A:99:29:87:92:3E:C4:76:FE:60:0F:90:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e654885e-c454-3725-a709-730960688a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8d:d0:97:42:c4:18:02:9c:ed:1f:88:a3:01:a3:7b:1d:2a: 63:83:76:34:b0:f0:13:dc:6b:57:bd:ad:19:94:f8:8b:32:ea: b5:39:ca:25:da:ab:26:87:fc:c4:b4:62:b5:7a:61:18:45:bd: 06:85:e5:7f:98:9c:a7:58:82:11:39:33:51:4c:8d:cd:40:95: 35:30:8c:70:09:2f:5b:5d:7d:1b:a5:34:2c:b3:06:25:e0:56: d5:98:e6:ae:97:c0:8c:4e:07:a5:0f:d2:cb:32:9e:ad:59:70: 61:0b:d7:2d:fe:bc:4c:65:09:02:d3:6b:4b:80:6a:2a:2b:f7: 5f:08:11:38:c3:c7:53:c8:df:31:78:88:85:f2:48:fb:5d:6d: cc:eb:df:4a:e3:a3:4d:6d:c3:a7:90:89:ef:00:9f:6b:f8:91: d7:66:f0:ea:a4:8d:95:25:f0:d5:2c:50:7a:20:07:c8:76:36: eb:6c:eb:3c:44:e9:ef:5b:bc:bf:16:a1:1f:29:a0:d5:13:9d: 02:06:1b:14:3b:84:51:1e:59:36:ab:c4:7e:a2:8f:3b:fc:e5: 00:b6:16:b9:85:a5:b1:6b:af:8b:ce:f0:65:a6:d8:ee:7f:89: 4d:81:b1:8a:f5:80:b3:58:48:73:0e:77:19:30:e8:c1:75:cf: 58:25:6b:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/Q5CJxCI7Q+RcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NWIwZjBlMmYtYTJhMC00MzdkLTg1MjItMzE5ZTc0OTU1NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPX7KQixK3O2lzXxjg2j7V2VAPLvCUQjs7W/ hGJN2pW0KL42i0dV/7ZuBCOtU0JrGLtyoz/UlDQ2nDWse7qa76DJzBIQdLyJ/YSs 2hcfCGnBJxHlwWTBQAi4gz6+XuYCxaG9CTq0247+nUvwlC5hFaE2t2NeAzCFqoZF IZVrsSe75tXThg10K4m8n385FGvEmGYKKgot2Fq2Pyv+WpFLwhwjypcHkzEw4S9R J/AgStVDLfBhGevdfi71EVQUuWp+Pl8csY8th5MR58MBHqQUyMY19LWPIVO1SvE0 ZHqdlGKksKGuVtD4xSdBb+DbGUaEzShQftTBD+rnBQIvcl0TKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFkcjaNQAuGKmSmHkj7Edv5gD5AFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTY1NDg4NWUtYzQ1NC0z NzI1LWE3MDktNzMwOTYwNjg4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADjdCXQsQYApztH4ijAaN7HSpjg3Y0sPAT3GtXva0ZlPiLMuq1Ocol 2qsmh/zEtGK1emEYRb0GheV/mJynWIIROTNRTI3NQJU1MIxwCS9bXX0bpTQsswYl 4FbVmOaul8CMTgelD9LLMp6tWXBhC9ct/rxMZQkC02tLgGoqK/dfCBE4w8dTyN8x eIiF8kj7XW3M699K46NNbcOnkInvAJ9r+JHXZvDqpI2VJfDVLFB6IAfIdjbrbOs8 ROnvW7y/FqEfKaDVE50CBhsUO4RRHlk2q8R+oo87/OUAtha5haWxa6+LzvBlptju f4lNgbGK9YCzWEhzDncZMOjBdc9YJWvz -----END CERTIFICATE-----Generated at Fri Apr 11 23:16:09 2025 by rpki-client