$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29ae0f09-858b-3b06-953a-fac6afb6495e.roa File: 29ae0f09-858b-3b06-953a-fac6afb6495e.roa (raw, json) Hash identifier: O53gINv/2n4d9GyjR9B1kzw4la/4LbQxqx+MvsS19bs= Subject key identifier: 47:32:91:26:F6:05:A2:B4:46:F3:B4:84:03:EB:E9:ED:63:DE:70:B2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA74DE3F14E79F04D10A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29ae0f09-858b-3b06-953a-fac6afb6495e.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396581 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:74:de:3f:14:e7:9f:04:d1:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=4bb36ce2-6890-4db7-b58d-a7ed8c02fc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:77:84:93:8e:7c:cc:ca:f3:72:88:05:30: f2:81:a7:2c:84:a5:9b:7d:95:39:7b:1d:bb:b3:47: 96:52:32:bc:c3:3e:9e:cf:8c:47:46:10:cd:53:42: 69:b1:3d:51:23:1f:f9:f9:fb:00:40:a2:fd:a1:bc: 5d:1b:34:61:d7:f6:4b:12:97:c7:54:ee:12:0a:a6: 7f:2a:b0:c3:23:10:6a:79:d5:ba:45:d8:f4:3d:c0: 31:c2:d9:ff:85:ed:0e:63:99:e5:0f:75:71:fc:9e: 45:67:67:31:35:09:6a:da:12:38:c3:21:2a:46:6f: e0:69:22:9e:1b:ec:fb:31:da:9e:66:ce:69:9c:a9: e2:b5:18:1e:18:b5:e4:55:b9:f0:7a:26:a2:6b:32: 57:4f:b3:2e:89:75:48:48:db:79:bd:55:c8:4f:e5: 3b:8d:90:7e:58:fc:fb:f1:3c:8f:ea:85:f0:6a:c0: 86:5f:ea:cf:d9:c2:43:f0:82:6a:10:ef:7b:1c:d9: c5:da:6d:b1:bf:96:67:b3:d9:f4:c6:73:f5:73:3e: 86:41:f1:de:98:c4:a3:da:94:2b:c2:11:c3:7f:e9: 00:12:70:85:7c:fa:34:33:6e:7e:8e:a6:24:3e:6e: 78:71:63:31:a9:01:77:1e:84:d8:82:2b:80:c3:a5: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:32:91:26:F6:05:A2:B4:46:F3:B4:84:03:EB:E9:ED:63:DE:70:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29ae0f09-858b-3b06-953a-fac6afb6495e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:82:a4:d6:de:9b:21:62:33:fd:6f:9d:6b:18:d6:7a:44:c1: 1d:04:dc:82:4b:66:67:f8:51:76:ae:9e:b4:79:cb:6f:5d:7d: a5:b2:39:3b:6f:6c:9e:f4:ce:67:2e:dd:2b:96:d7:d9:6a:bb: 85:3a:5c:c0:ae:24:f4:18:e3:d0:a0:dd:e2:65:0b:33:4a:f8: a0:5a:83:51:20:81:8c:bf:e7:d2:db:fc:43:de:a8:55:25:53: 6f:5f:df:9d:63:89:ae:c0:48:27:80:2b:cd:4f:0d:a8:23:28: 1f:08:cb:a4:7a:3a:f8:56:27:4a:32:0f:3f:9e:f8:45:15:bb: 14:6f:45:16:1c:2d:44:e6:1d:95:46:a3:88:41:ae:b1:5d:67: 5b:fa:65:56:ec:c5:7a:f3:92:ef:3d:ce:34:41:65:ba:5e:c9: 3d:ed:1a:67:bd:cf:73:81:54:6d:6d:5b:e2:32:03:a2:50:c5: df:b3:9e:14:33:8f:5e:75:71:0f:90:0a:9d:9d:03:53:82:fd: 3f:0a:74:a5:25:14:a4:2f:4c:a7:d8:e6:14:aa:9d:9e:ad:c3: f8:33:f9:cd:4b:ac:d4:d1:ab:1d:ae:19:d0:18:6e:d8:c4:1d: cc:69:fe:1d:7b:66:90:15:9f:35:a6:ac:c8:97:b5:67:ee:90: ec:bf:44:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6nTePxTnnwTRCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NGJiMzZjZTItNjg5MC00ZGI3LWI1OGQtYTdlZDhjMDJmYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoal3hJOOfMzK83KIBTDygacshKWbfZU5ex27 s0eWUjK8wz6ez4xHRhDNU0JpsT1RIx/5+fsAQKL9obxdGzRh1/ZLEpfHVO4SCqZ/ KrDDIxBqedW6Rdj0PcAxwtn/he0OY5nlD3Vx/J5FZ2cxNQlq2hI4wyEqRm/gaSKe G+z7MdqeZs5pnKnitRgeGLXkVbnweiaiazJXT7MuiXVISNt5vVXIT+U7jZB+WPz7 8TyP6oXwasCGX+rP2cJD8IJqEO97HNnF2m2xv5Zns9n0xnP1cz6GQfHemMSj2pQr whHDf+kAEnCFfPo0M25+jqYkPm54cWMxqQF3HoTYgiuAw6XyhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEcykSb2BaK0RvO0hAPr6e1j3nCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjlhZTBmMDktODU4Yi0z YjA2LTk1M2EtZmFjNmFmYjY0OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0gqTW3pshYjP9b51rGNZ6RMEdBNyCS2Zn+FF2rp60ectvXX2lsjk7 b2ye9M5nLt0rltfZaruFOlzAriT0GOPQoN3iZQszSvigWoNRIIGMv+fS2/xD3qhV JVNvX9+dY4muwEgngCvNTw2oIygfCMukejr4VidKMg8/nvhFFbsUb0UWHC1E5h2V RqOIQa6xXWdb+mVW7MV685LvPc40QWW6Xsk97Rpnvc9zgVRtbVviMgOiUMXfs54U M49edXEPkAqdnQNTgv0/CnSlJRSkL0yn2OYUqp2ercP4M/nNS6zU0asdrhnQGG7Y xB3Maf4de2aQFZ81pqzIl7Vn7pDsv0SA -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:07 2025 by rpki-client