$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/309385c9-453b-3b6f-aedc-3c59ebe5f444.roa File: 309385c9-453b-3b6f-aedc-3c59ebe5f444.roa (raw, json) Hash identifier: nVNoaEA9S6KP8xB8NbcMHbIdVUXGciJRQDIaNFLxIv0= Subject key identifier: 7A:7A:9D:00:05:0E:8E:A9:5E:48:0B:76:FA:0C:26:2E:CF:0D:A8:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA693567F34D833BE83550 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/309385c9-453b-3b6f-aedc-3c59ebe5f444.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396617 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:69:35:67:f3:4d:83:3b:e8:35:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=a3b22455-e579-4dec-a179-fda5b6a1001f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:88:e6:8f:62:9b:d1:6b:54:70:58:b0:40: 0f:42:1c:e2:de:e7:f1:9d:30:e6:4c:e3:aa:56:2e: 14:4c:11:e9:9a:af:21:ec:77:a4:f8:57:c2:f3:a1: fd:4a:2d:f8:0f:1b:30:dd:d3:2a:f4:1c:73:92:70: 8a:4e:fe:6e:aa:9f:d4:b6:a5:8c:0c:f2:e1:88:62: 56:4d:52:eb:1a:bd:9f:d0:78:7e:af:42:98:c6:41: 28:14:3e:a6:04:5c:c0:69:3f:fc:e1:96:8d:dc:6a: 86:8e:fe:47:4a:ff:65:86:9d:01:f7:23:b3:68:a8: 88:fa:71:39:26:f5:78:3f:8c:bc:bb:a9:36:09:a9: 0e:d0:3c:80:12:b9:cf:cb:8d:d8:4f:4f:be:e7:a8: 81:4c:44:2a:55:03:8e:61:62:b9:ef:67:f0:45:c5: f4:de:70:2a:a5:e2:de:9a:ac:97:bd:02:7b:60:89: 95:cf:68:ca:25:ba:1e:ce:4f:22:e5:a5:36:de:bc: 67:cc:c9:db:27:a6:8a:d8:9a:80:56:ef:2c:ea:b7: 15:57:2a:7a:09:1d:8f:e5:b7:cb:b5:2e:47:3b:fc: 48:ac:6c:8a:29:0b:a0:c1:16:0e:3a:a8:48:c1:a0: 73:ef:5a:f5:98:be:af:0e:ab:51:43:30:2e:7c:34: 79:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:9D:00:05:0E:8E:A9:5E:48:0B:76:FA:0C:26:2E:CF:0D:A8:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/309385c9-453b-3b6f-aedc-3c59ebe5f444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a2:05:bc:e8:be:f5:b3:55:6a:cd:81:b7:da:65:ea:ed:4a: 7c:66:14:f7:7d:b1:6b:bb:de:de:4d:34:75:df:ba:30:46:09: d1:2b:a1:2a:59:e0:e7:8e:ee:38:a5:d2:ed:eb:7d:0d:4a:e0: a6:e3:6f:8b:b7:cb:f7:e9:bb:fc:10:57:3e:0c:3c:e9:6c:41: ee:c0:87:7e:13:2f:f6:06:40:2d:57:4e:e8:94:14:69:bf:5a: 74:d1:e2:63:99:a1:1f:b3:be:3a:da:84:aa:8f:83:98:e4:4e: 53:4b:a4:99:26:b7:79:26:58:0e:ad:47:02:39:45:f8:c7:c2: db:ca:88:17:c0:5c:f3:24:ee:e6:88:95:10:04:7c:18:19:5d: f2:9a:9b:e9:6f:45:64:bf:ab:77:23:94:01:78:97:be:d1:5c: 44:85:c2:d4:94:a3:7b:50:44:eb:5f:26:af:8b:01:db:ae:e5: ce:f4:48:0b:c2:8a:77:e2:8c:aa:17:2d:13:4d:e2:a8:a3:69: 1e:05:ba:b6:69:60:21:1e:03:9b:84:39:33:ce:39:c4:9e:fd: ba:03:82:a1:f1:ce:45:3a:0c:d2:53:ea:85:bb:22:59:31:1c: 89:61:bc:8b:3a:6d:cd:cd:db:15:d5:46:7f:93:30:53:c2:e2: 5f:88:16:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6mk1Z/NNgzvoNVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk YTNiMjI0NTUtZTU3OS00ZGVjLWExNzktZmRhNWI2YTEwMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm56I5o9im9FrVHBYsEAPQhzi3ufxnTDmTOOq Vi4UTBHpmq8h7Hek+FfC86H9Si34Dxsw3dMq9BxzknCKTv5uqp/UtqWMDPLhiGJW TVLrGr2f0Hh+r0KYxkEoFD6mBFzAaT/84ZaN3GqGjv5HSv9lhp0B9yOzaKiI+nE5 JvV4P4y8u6k2CakO0DyAErnPy43YT0++56iBTEQqVQOOYWK572fwRcX03nAqpeLe mqyXvQJ7YImVz2jKJboezk8i5aU23rxnzMnbJ6aK2JqAVu8s6rcVVyp6CR2P5bfL tS5HO/xIrGyKKQugwRYOOqhIwaBz71r1mL6vDqtRQzAufDR5bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHp6nQAFDo6pXkgLdvoMJi7PDaiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA5Mzg1YzktNDUzYi0z YjZmLWFlZGMtM2M1OWViZTVmNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJogW86L71s1VqzYG32mXq7Up8ZhT3fbFru97eTTR137owRgnRK6Eq WeDnju44pdLt630NSuCm42+Lt8v36bv8EFc+DDzpbEHuwId+Ey/2BkAtV07olBRp v1p00eJjmaEfs7462oSqj4OY5E5TS6SZJrd5JlgOrUcCOUX4x8LbyogXwFzzJO7m iJUQBHwYGV3ympvpb0Vkv6t3I5QBeJe+0VxEhcLUlKN7UETrXyaviwHbruXO9EgL wop34oyqFy0TTeKoo2keBbq2aWAhHgObhDkzzjnEnv26A4Kh8c5FOgzSU+qFuyJZ MRyJYbyLOm3NzdsV1UZ/kzBTwuJfiBY1 -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:04 2025 by rpki-client