$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa File: 3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa (raw, json) Hash identifier: VBzfaM1l1VNdJ3+Bngs5b2PPgoHchtgrC7Ka6wQcI/w= Subject key identifier: 33:8A:18:D1:BC:55:14:B0:FF:2D:7D:92:88:AE:1E:09:21:49:FF:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB15E5D6BC8DBDB53E8E580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396826 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:5e:5d:6b:c8:db:db:53:e8:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=a1d5cbea-4654-4e7f-82c7-5ed89eddc364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:60:c5:c3:75:7c:e1:85:1e:79:ad:0f:3d: bf:2a:26:fd:77:b9:d6:5c:dd:42:9b:fd:98:6d:08: 7e:e0:c6:d3:ed:87:a4:64:ce:ca:5b:66:69:af:39: 0e:b6:4e:bd:03:3c:55:5e:1c:47:ad:b6:2d:20:05: c2:3d:4e:82:08:25:ac:2c:84:6c:08:3e:ff:7e:1b: a3:f2:a2:6a:02:72:ef:48:10:40:25:72:a4:13:c5: e8:b3:2b:83:20:61:7b:db:ce:b0:ba:a3:9f:c5:4a: 35:c5:cb:a0:01:e9:78:7e:79:28:1d:6c:a8:ae:3d: 98:f3:70:63:49:2c:f3:d2:a4:f1:1f:d7:45:36:12: 15:35:67:91:18:2c:3f:b2:66:7c:ab:b2:4d:83:9f: 03:16:5c:5a:05:3a:30:52:a8:88:00:87:09:81:30: 7c:cc:d2:84:7c:8f:8c:31:cc:61:59:28:86:de:46: 8f:fc:14:c5:3c:90:ea:4e:c2:25:5d:e3:0a:7b:91: d8:d3:4a:e3:81:65:97:ad:9a:a9:c8:4a:8a:78:33: 8c:2d:b4:e2:2b:6c:5a:86:49:91:de:40:cb:9b:04: ff:18:e6:44:ed:10:fe:d5:ec:92:41:93:ad:5e:b9: 38:dc:86:b1:92:2e:e3:8e:04:5b:52:b2:d4:67:7b: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:18:D1:BC:55:14:B0:FF:2D:7D:92:88:AE:1E:09:21:49:FF:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:14:74:46:5f:83:43:69:62:51:a7:38:bf:e4:d6:53:4c:6a: 18:10:fc:a0:aa:d5:06:8b:75:e9:64:87:03:6b:4d:69:57:0d: 46:c9:83:8c:0f:21:88:e7:6c:20:ef:58:6c:d8:49:40:f1:3a: 93:2a:21:aa:ed:bd:31:1e:76:70:64:59:75:d8:0c:8a:07:9e: b2:99:98:e4:9d:0c:36:10:af:47:c8:e9:d7:c7:42:41:a4:5a: c9:c9:8f:5f:1b:8c:63:be:b3:39:0f:cc:d0:9e:07:7b:23:3b: ff:34:d7:d4:94:4e:19:0e:a0:25:8f:51:bb:77:85:23:15:1c: 5e:cd:c0:36:35:5c:22:da:cb:db:50:00:50:03:d7:13:9b:bb: a7:6d:69:d1:be:ca:29:1e:4f:bb:a0:a1:82:63:bc:0a:fd:64: 3d:6e:63:2a:1d:67:73:40:4c:b5:99:02:40:51:eb:9e:ee:59: f1:ed:e9:6d:f7:5c:0f:f8:9c:f1:fd:4a:76:68:51:0b:bd:af: c5:e1:dc:59:82:77:f0:73:24:20:b3:08:42:12:2c:e2:7a:e3: 67:c1:3b:49:b1:3b:47:31:72:ff:a6:b3:14:17:9e:f5:f2:d6: 4c:5e:eb:0c:75:a6:94:7d:b4:2f:bf:3d:1a:9e:95:33:3c:72: dc:aa:9d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsV5da8jb21Po5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YTFkNWNiZWEtNDY1NC00ZTdmLTgyYzctNWVkODllZGRjMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hgxcN1fOGFHnmtDz2/Kib9d7nWXN1Cm/2Y bQh+4MbT7YekZM7KW2ZprzkOtk69AzxVXhxHrbYtIAXCPU6CCCWsLIRsCD7/fhuj 8qJqAnLvSBBAJXKkE8XosyuDIGF7286wuqOfxUo1xcugAel4fnkoHWyorj2Y83Bj SSzz0qTxH9dFNhIVNWeRGCw/smZ8q7JNg58DFlxaBTowUqiIAIcJgTB8zNKEfI+M McxhWSiG3kaP/BTFPJDqTsIlXeMKe5HY00rjgWWXrZqpyEqKeDOMLbTiK2xahkmR 3kDLmwT/GOZE7RD+1eySQZOtXrk43Iaxki7jjgRbUrLUZ3s1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOKGNG8VRSw/y19koiuHgkhSf9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JmOTEzODYtOWI5ZS0z MTA0LTg5YjUtZTAxNGMxZjhjYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAUdEZfg0NpYlGnOL/k1lNMahgQ/KCq1QaLdelkhwNrTWlXDUbJg4wP IYjnbCDvWGzYSUDxOpMqIartvTEednBkWXXYDIoHnrKZmOSdDDYQr0fI6dfHQkGk WsnJj18bjGO+szkPzNCeB3sjO/8019SUThkOoCWPUbt3hSMVHF7NwDY1XCLay9tQ AFAD1xObu6dtadG+yikeT7ugoYJjvAr9ZD1uYyodZ3NATLWZAkBR657uWfHt6W33 XA/4nPH9SnZoUQu9r8Xh3FmCd/BzJCCzCEISLOJ642fBO0mxO0cxcv+msxQXnvXy 1kxe6wx1ppR9tC+/PRqelTM8ctyqnb8= -----END CERTIFICATE-----Generated at Fri Apr 11 22:57:42 2025 by rpki-client