$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4d4c82-7804-332c-9584-a990b4d5321e.roa File: 3c4d4c82-7804-332c-9584-a990b4d5321e.roa (raw, json) Hash identifier: S0M3EXMzCqlIe+gMJ62HAgP6ibEPU80bO1truj6UiNY= Subject key identifier: E9:F4:D0:FF:E8:54:1A:49:33:FA:37:E4:74:AF:51:BE:21:A8:3C:6E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA7F69E9488A64C3F89100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4d4c82-7804-332c-9584-a990b4d5321e.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396590 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:7f:69:e9:48:8a:64:c3:f8:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=35b85740-d9a9-4018-be85-ec1fb344e4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:44:ea:92:29:b4:00:7d:28:b2:38:9b:c8: 55:f0:82:8b:98:ae:c1:18:c0:4e:e3:d3:c6:d4:63: c9:0e:ac:3f:6f:8f:1c:e4:e1:6f:aa:da:7a:c4:29: 20:32:64:c6:57:cc:7d:76:ec:1e:15:53:71:b4:97: d1:78:a1:be:63:30:2d:d3:c2:a8:f6:35:57:d9:57: 83:85:9a:0c:af:d2:a6:1d:11:43:96:cb:f8:74:4d: 2a:12:eb:0c:2a:5a:2b:66:92:f7:ed:81:2b:30:ea: b0:1f:4a:c1:c0:44:be:bc:a7:d7:b1:ba:22:e1:51: 4e:a0:db:af:ac:9f:bd:72:00:54:40:b0:ef:52:31: f0:a1:25:86:77:e1:a9:76:f0:3a:b5:9e:b6:74:e2: fd:3f:e0:20:3a:e6:dd:ea:29:f4:eb:1d:53:c9:67: 82:41:71:34:35:c0:f7:72:d4:e8:7d:1c:07:21:46: d8:92:d8:d4:80:32:10:6f:cd:65:dc:66:04:cd:52: 04:7a:ad:ae:e3:23:19:88:d8:2d:2d:8d:76:17:53: 39:b3:8e:0b:c7:4c:74:11:8d:15:68:32:1f:65:f2: 96:de:e7:4f:a1:fb:55:b1:a8:dc:d4:38:fe:e0:d1: 92:e6:48:ee:59:77:32:1b:bf:e0:e0:1c:0e:ea:ea: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F4:D0:FF:E8:54:1A:49:33:FA:37:E4:74:AF:51:BE:21:A8:3C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4d4c82-7804-332c-9584-a990b4d5321e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:e5:d9:bb:0e:59:85:d5:8c:4c:ed:75:84:f2:27:16:84:93: 2e:f0:c0:e4:70:75:44:58:b1:af:59:ca:c1:91:63:ab:30:2a: 35:ec:bf:f7:06:fc:2f:dc:ef:79:ac:48:9f:a3:f4:c8:56:2a: 56:95:c6:49:7f:f3:6b:f5:eb:6e:99:1a:e2:dd:ba:73:7e:c7: 3a:b3:14:36:00:1e:75:e3:75:82:c0:45:0a:0e:75:8c:47:c6: 55:2a:43:1f:25:fa:de:f9:f1:5c:90:a9:a5:51:2a:6d:27:31: da:5f:2a:7f:5c:30:4c:24:13:1e:8a:d9:0f:6b:83:0a:60:58: 88:b2:b9:1e:08:da:c8:97:9d:bb:21:f7:f5:90:78:0d:ec:53: f3:1d:cd:5a:ba:bf:d3:29:05:ee:c9:a0:c3:63:3c:ff:c8:ae: 06:84:a2:fa:20:3b:82:99:25:3c:58:69:fc:05:a9:a6:9b:2b: e4:6b:65:cb:45:b4:8f:11:d1:6c:d3:88:64:c9:78:ef:c9:80: eb:98:e7:01:d7:30:11:b1:d3:b7:6a:c1:cd:21:58:db:fe:41: 02:b2:6a:e3:e4:2c:7c:67:16:95:df:78:5b:c0:eb:28:15:34: 1d:5e:07:a7:3c:57:30:98:b9:c2:2d:90:8b:ec:02:d9:74:e1: 6c:b1:c4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6n9p6UiKZMP4kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MzViODU3NDAtZDlhOS00MDE4LWJlODUtZWMxZmIzNDRlNGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzVE6pIptAB9KLI4m8hV8IKLmK7BGMBO49PG 1GPJDqw/b48c5OFvqtp6xCkgMmTGV8x9duweFVNxtJfReKG+YzAt08Ko9jVX2VeD hZoMr9KmHRFDlsv4dE0qEusMKlorZpL37YErMOqwH0rBwES+vKfXsboi4VFOoNuv rJ+9cgBUQLDvUjHwoSWGd+GpdvA6tZ62dOL9P+AgOubd6in06x1TyWeCQXE0NcD3 ctTofRwHIUbYktjUgDIQb81l3GYEzVIEeq2u4yMZiNgtLY12F1M5s44Lx0x0EY0V aDIfZfKW3udPoftVsajc1Dj+4NGS5kjuWXcyG7/g4BwO6uogMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn00P/oVBpJM/o35HSvUb4hqDxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M0ZDRjODItNzgwNC0z MzJjLTk1ODQtYTk5MGI0ZDUzMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjl2bsOWYXVjEztdYTyJxaEky7wwORwdURYsa9ZysGRY6swKjXsv/cG /C/c73msSJ+j9MhWKlaVxkl/82v1626ZGuLdunN+xzqzFDYAHnXjdYLARQoOdYxH xlUqQx8l+t758VyQqaVRKm0nMdpfKn9cMEwkEx6K2Q9rgwpgWIiyuR4I2siXnbsh 9/WQeA3sU/MdzVq6v9MpBe7JoMNjPP/IrgaEovogO4KZJTxYafwFqaabK+RrZctF tI8R0WzTiGTJeO/JgOuY5wHXMBGx07dqwc0hWNv+QQKyauPkLHxnFpXfeFvA6ygV NB1eB6c8VzCYucItkIvsAtl04WyxxAk= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:27 2025 by rpki-client