$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa File: 3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa (raw, json) Hash identifier: HE9me6sETSANXYTNtBU1ocPjcyuELvkzM7H7aAarKVU= Subject key identifier: 6C:AD:AF:ED:E5:31:72:02:F8:74:F7:F7:D6:DC:3E:4A:63:DB:3F:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB159B6F9DF49B1720A6100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396573 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:59:b6:f9:df:49:b1:72:0a:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=0eb42b9f-df5d-4407-9d20-6c424de66059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:bf:1c:8d:c2:eb:1b:bd:66:e1:3f:0f:1f: e3:b2:01:14:a0:ab:95:c9:3b:2e:94:13:78:55:1c: bb:7e:c2:e3:d8:9e:e8:ff:9c:db:9b:a8:49:72:5b: 08:98:c7:0c:7f:7c:ac:92:de:24:ef:e3:07:c7:5e: 89:22:41:2d:d6:7e:14:24:98:97:28:93:84:02:2d: cf:61:46:b5:28:87:b3:ac:81:a7:ef:17:23:9e:4e: eb:ae:bf:1a:7d:c4:f8:e2:8f:9c:96:27:45:86:90: 03:de:04:50:d8:75:b9:da:5c:73:03:05:c6:d8:6b: 91:c7:0f:c1:36:67:60:e8:0d:a7:96:36:be:c0:2a: a4:58:af:2f:1c:e2:69:e8:f2:4b:68:78:33:9c:4d: 06:b4:9e:a8:84:90:c4:0b:90:fc:b8:1a:76:23:7a: 31:23:f1:33:6d:e7:04:1f:eb:a8:ce:0c:88:66:82: 5a:43:e8:f6:66:a7:f5:2d:4c:b9:ca:66:79:38:b5: c2:b9:19:78:5d:fb:d2:7f:fd:a3:0c:9a:d5:5f:cf: cd:f0:81:87:15:cc:68:0d:b2:19:56:4c:22:14:b9: 26:c3:4d:39:db:1d:89:76:67:9a:be:4d:d2:3a:02: df:38:bf:51:f0:5e:f2:85:e8:91:c8:4b:85:d2:d3: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AD:AF:ED:E5:31:72:02:F8:74:F7:F7:D6:DC:3E:4A:63:DB:3F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff6a521-7fa9-3335-aab7-6b040d6e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a9:6a:43:8b:81:ba:9a:7e:0c:70:08:1b:70:4d:ba:39:20: 7e:59:b9:5a:c6:4d:15:3c:68:b4:55:f5:3d:e6:4b:f5:85:cd: 38:50:28:cd:eb:b8:86:4e:5b:d2:70:dd:ba:4a:16:9c:ba:8c: 11:ca:62:2b:b6:68:a0:1b:46:67:4d:6f:7d:48:28:99:91:32: 13:0d:9f:f3:15:d3:54:65:65:7d:2b:5c:38:37:d5:9c:80:ca: f4:6d:67:41:7e:c1:b5:79:49:bd:1a:08:d6:12:12:f8:34:5a: 92:8f:05:aa:97:9b:72:86:9f:78:39:46:95:a6:9d:4f:a2:cb: 69:b2:50:ef:a9:5f:f6:54:2a:6a:2f:b3:80:25:04:d0:35:da: 44:ce:65:58:42:92:10:03:dd:47:11:1f:e1:62:88:6e:96:79: 2c:e2:dc:5a:bf:ca:67:6a:e7:21:21:36:7a:0b:73:c1:0b:50: 05:8d:c4:f5:e3:79:ba:c5:80:7e:8d:19:14:84:32:8e:e2:66: 78:04:e0:8e:f7:a3:aa:b0:77:89:fe:4b:f1:e4:ce:5f:74:b8: 34:1f:8f:ff:ef:28:dd:cb:68:1f:f2:ce:76:be:6a:a8:ce:39: be:cb:d0:7d:70:9d:55:3d:f6:26:42:b7:93:5e:b7:3c:2d:93: ca:0b:66:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsVm2+d9JsXIKYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MGViNDJiOWYtZGY1ZC00NDA3LTlkMjAtNmM0MjRkZTY2MDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwq/HI3C6xu9ZuE/Dx/jsgEUoKuVyTsulBN4 VRy7fsLj2J7o/5zbm6hJclsImMcMf3yskt4k7+MHx16JIkEt1n4UJJiXKJOEAi3P YUa1KIezrIGn7xcjnk7rrr8afcT44o+clidFhpAD3gRQ2HW52lxzAwXG2GuRxw/B Nmdg6A2nlja+wCqkWK8vHOJp6PJLaHgznE0GtJ6ohJDEC5D8uBp2I3oxI/EzbecE H+uozgyIZoJaQ+j2Zqf1LUy5ymZ5OLXCuRl4XfvSf/2jDJrVX8/N8IGHFcxoDbIZ VkwiFLkmw0052x2Jdmeavk3SOgLfOL9R8F7yheiRyEuF0tOI5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGytr+3lMXIC+HT399bcPkpj2z8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZmNmE1MjEtN2ZhOS0z MzM1LWFhYjctNmIwNDBkNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGpakOLgbqafgxwCBtwTbo5IH5ZuVrGTRU8aLRV9T3mS/WFzThQKM3r uIZOW9Jw3bpKFpy6jBHKYiu2aKAbRmdNb31IKJmRMhMNn/MV01RlZX0rXDg31ZyA yvRtZ0F+wbV5Sb0aCNYSEvg0WpKPBaqXm3KGn3g5RpWmnU+iy2myUO+pX/ZUKmov s4AlBNA12kTOZVhCkhAD3UcRH+FiiG6WeSzi3Fq/ymdq5yEhNnoLc8ELUAWNxPXj ebrFgH6NGRSEMo7iZngE4I73o6qwd4n+S/Hkzl90uDQfj//vKN3LaB/yzna+aqjO Ob7L0H1wnVU99iZCt5Netzwtk8oLZhI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:52:37 2025 by rpki-client