$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8a84bf2-7216-3fe9-bf97-f94431c67da2.roa File: f8a84bf2-7216-3fe9-bf97-f94431c67da2.roa (raw, json) Hash identifier: bfcHbJaNtD2OzIWKO4kMGseFHzf+FtHRMtZEyNfspn4= Subject key identifier: 7A:80:7E:2E:AC:A3:5E:66:1D:24:6B:74:31:D3:2D:7C:97:80:2C:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858494733F6006E571E3F29DC7000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8a84bf2-7216-3fe9-bf97-f94431c67da2.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 36626 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f6:00:6e:57:1e:3f:29:dc:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=5a4b9bfc-0af4-45cc-9b18-9c16ed4dd36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:d7:6e:57:8c:74:c2:b8:57:9e:f6:7b:58: 50:b7:4f:e7:87:93:fa:ca:c6:52:f7:15:26:d8:a5: 43:12:1c:dd:f0:33:64:ee:0a:f3:67:30:2e:dc:08: 14:e2:38:d4:a7:fe:21:af:ec:ac:a3:d6:c1:14:81: b5:41:00:da:7c:18:da:47:97:41:1b:e7:e5:92:a5: 71:51:94:cb:53:9e:f9:95:6e:2c:6f:5b:87:6b:d7: 90:89:a3:a7:e5:a5:3b:83:99:f0:c9:9f:6e:10:e7: 1d:23:b5:6e:fb:e9:47:bc:27:7c:40:1f:b0:f9:ed: a6:62:0d:d0:85:6e:28:99:2d:19:79:16:43:ec:92: 92:45:e5:bd:db:44:73:f8:58:08:ca:11:da:5d:2b: 1d:a1:ea:40:4f:04:7e:f2:de:49:5f:cf:fa:45:3a: b2:0c:e2:41:65:53:c8:18:7b:ff:ea:db:52:0b:e4: 5e:1e:c5:70:cc:38:a4:a9:12:df:e2:01:df:8c:b5: e2:8a:4a:10:da:1b:37:42:fe:5c:c3:3a:9c:d2:81: b6:e7:d8:64:36:2e:d8:3c:1d:d6:42:31:99:ae:13: bd:26:b1:7e:1d:d0:66:30:ed:4b:dc:10:b5:7e:3b: 0d:0b:b3:31:a7:55:0b:3d:8c:6a:d8:91:a0:91:71: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:7E:2E:AC:A3:5E:66:1D:24:6B:74:31:D3:2D:7C:97:80:2C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8a84bf2-7216-3fe9-bf97-f94431c67da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:9a:d8:7a:b0:d8:7b:11:ff:65:f6:8c:60:b5:44:85:93:b9: f6:87:c7:4c:18:44:cd:ae:16:d2:bc:7a:43:b3:75:00:ff:b6: 57:f6:f8:98:75:e4:c4:cc:4f:04:29:43:ba:0d:87:70:58:72: c7:0a:23:d2:d1:da:11:f8:df:87:89:be:b4:9e:56:d5:9c:86: 38:3c:a5:27:e9:a1:2f:0e:62:bf:5e:b4:4f:bb:65:f9:e1:77: 8e:c2:60:95:e9:89:66:1a:f1:57:45:f8:0e:12:69:b3:ce:91: 84:6c:14:61:0b:c4:90:37:a4:30:9a:83:ba:71:4e:a9:86:ee: 30:76:8c:ae:f9:5e:99:64:cc:a1:25:b7:12:63:16:52:6a:97: 13:e6:d3:a3:bc:7e:f3:59:d8:b7:5d:18:6f:92:1b:14:8d:fa: 66:a4:3d:64:5e:a1:40:03:c7:ea:a4:1b:ef:da:42:bf:47:3a: ac:b5:2d:8b:82:f3:0c:f8:21:6e:e9:5f:04:ca:0e:fd:64:f4: 7a:be:2a:f5:ad:e8:91:51:fe:a7:42:80:7a:b0:0a:b7:be:f0: e7:a4:e5:79:b6:69:42:99:0f:d3:38:2a:d2:75:7c:53:17:8a: 17:3e:ed:d3:05:f1:e8:32:c7:b8:18:29:5a:eb:2f:73:27:0d: ad:fd:86:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/YAblcePynccAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NWE0YjliZmMtMGFmNC00NWNjLTliMTgtOWMxNmVkNGRkMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjPXbleMdMK4V572e1hQt0/nh5P6ysZS9xUm 2KVDEhzd8DNk7grzZzAu3AgU4jjUp/4hr+yso9bBFIG1QQDafBjaR5dBG+flkqVx UZTLU575lW4sb1uHa9eQiaOn5aU7g5nwyZ9uEOcdI7Vu++lHvCd8QB+w+e2mYg3Q hW4omS0ZeRZD7JKSReW920Rz+FgIyhHaXSsdoepATwR+8t5JX8/6RTqyDOJBZVPI GHv/6ttSC+ReHsVwzDikqRLf4gHfjLXiikoQ2hs3Qv5cwzqc0oG259hkNi7YPB3W QjGZrhO9JrF+HdBmMO1L3BC1fjsNC7Mxp1ULPYxq2JGgkXHumwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHqAfi6so15mHSRrdDHTLXyXgCwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjhhODRiZjItNzIxNi0z ZmU5LWJmOTctZjk0NDMxYzY3ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCnmth6sNh7Ef9l9oxgtUSFk7n2h8dMGETNrhbSvHpDs3UA/7ZX9viY deTEzE8EKUO6DYdwWHLHCiPS0doR+N+Hib60nlbVnIY4PKUn6aEvDmK/XrRPu2X5 4XeOwmCV6YlmGvFXRfgOEmmzzpGEbBRhC8SQN6QwmoO6cU6phu4wdoyu+V6ZZMyh JbcSYxZSapcT5tOjvH7zWdi3XRhvkhsUjfpmpD1kXqFAA8fqpBvv2kK/RzqstS2L gvMM+CFu6V8Eyg79ZPR6vir1reiRUf6nQoB6sAq3vvDnpOV5tmlCmQ/TOCrSdXxT F4oXPu3TBfHoMse4GCla6y9zJw2t/YZb -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:37 2025 by rpki-client