$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43451f1b-a049-31af-9139-27f1529a7c6b.roa File: 43451f1b-a049-31af-9139-27f1529a7c6b.roa (raw, json) Hash identifier: Iy2tfNMixmPoo+JXY3vZl6kT4ErCshXw89BymptFFPw= Subject key identifier: 4E:FB:B7:7C:36:B5:75:15:30:77:2C:DD:29:1C:CC:00:B4:04:CF:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB162C476DAC929D7285100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43451f1b-a049-31af-9139-27f1529a7c6b.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 397208 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:62:c4:76:da:c9:29:d7:28:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=17643e10-8ad4-42e8-a314-e2bed2367ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fb:f8:51:25:12:fe:68:ed:d8:66:cd:3e:c3: c3:5e:e0:84:19:cf:35:5f:17:54:de:69:5c:74:78: 28:17:32:47:bb:9b:df:b3:b4:ea:f5:c0:16:1a:00: 14:35:54:ad:8f:f4:4f:67:96:ab:59:8f:07:55:12: 1d:fa:6a:ed:0e:8d:cf:ff:74:82:91:45:33:88:db: 3f:a8:4f:cd:ff:02:ce:8c:0d:45:fc:eb:e6:76:f4: 85:fa:e3:54:70:1e:dd:d9:85:a4:01:4a:b8:f0:91: 41:7d:51:b7:f3:d6:71:3c:78:be:fa:af:e0:26:d8: 77:35:33:0b:ae:1b:f1:8f:15:8c:6a:aa:57:56:e1: f8:7d:c0:b2:1f:50:fd:e2:9a:f6:fa:ce:74:3c:5d: e6:63:ca:77:91:34:e2:fc:5f:c1:95:9f:c0:fe:f5: 88:0c:3b:dd:e5:81:3e:e3:48:f1:71:3d:ae:55:5c: f6:cf:a7:c6:83:4f:07:c7:6e:bf:cd:bf:dc:cb:9d: 78:e4:40:0a:92:50:e6:ab:81:02:6d:4e:c6:5c:da: 19:94:21:9c:32:11:36:27:22:87:9a:8b:29:01:59: 6a:0e:3f:94:83:63:cb:df:7a:57:86:a4:63:48:27: 17:eb:1c:e6:f2:cc:6c:02:6c:d0:14:fe:88:a0:08: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FB:B7:7C:36:B5:75:15:30:77:2C:DD:29:1C:CC:00:B4:04:CF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43451f1b-a049-31af-9139-27f1529a7c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:35:94:ad:ea:00:2b:c5:f7:41:33:f4:25:2a:fd:69:5a:3f: b6:50:ac:c9:48:90:d9:c5:ef:59:51:01:cf:6f:8d:27:b0:d1: ee:19:fa:8a:99:b1:10:4a:88:05:01:a3:5e:96:87:8c:69:f6: cd:88:7d:19:7b:fb:74:f3:5f:31:dd:b1:b2:7b:6e:a5:1e:48: 93:e1:7e:55:d9:28:54:3a:14:61:30:d1:1d:de:63:94:f9:a4: 64:77:46:f0:a0:a3:f6:10:06:c8:8c:0a:ee:63:8e:34:73:f4: e5:45:6b:08:a2:58:ad:20:59:5d:f5:f6:a2:c5:68:57:e3:cb: d5:4c:46:ce:cb:0a:b5:4c:81:e1:e8:a0:4a:50:dd:01:57:73: 91:b5:1d:61:47:05:ef:63:5f:fc:34:41:01:d4:7d:ca:d6:e8: 92:b8:15:4c:21:01:7e:6d:52:95:c7:0e:44:64:68:27:20:7a: 74:6b:2c:8e:98:33:2d:cf:4a:19:ac:0a:ff:92:92:a5:64:50: 4e:b4:16:03:58:f1:44:dd:d3:8c:9d:75:5d:e9:73:0b:1d:b3: d4:1e:67:e5:1e:0e:1b:fe:05:a4:8f:b4:60:20:5e:d7:09:e7: 3c:d4:55:06:48:7a:df:b0:9e:73:59:5c:f1:b3:61:2a:76:04: e3:e8:27:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsWLEdtrJKdcoUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MTc2NDNlMTAtOGFkNC00MmU4LWEzMTQtZTJiZWQyMzY3YmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/v4USUS/mjt2GbNPsPDXuCEGc81XxdU3mlc dHgoFzJHu5vfs7Tq9cAWGgAUNVStj/RPZ5arWY8HVRId+mrtDo3P/3SCkUUziNs/ qE/N/wLOjA1F/OvmdvSF+uNUcB7d2YWkAUq48JFBfVG389ZxPHi++q/gJth3NTML rhvxjxWMaqpXVuH4fcCyH1D94pr2+s50PF3mY8p3kTTi/F/BlZ/A/vWIDDvd5YE+ 40jxcT2uVVz2z6fGg08Hx26/zb/cy5145EAKklDmq4ECbU7GXNoZlCGcMhE2JyKH mospAVlqDj+Ug2PL33pXhqRjSCcX6xzm8sxsAmzQFP6IoAjYtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE77t3w2tXUVMHcs3SkczAC0BM/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM0NTFmMWItYTA0OS0z MWFmLTkxMzktMjdmMTUyOWE3YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCNZSt6gArxfdBM/QlKv1pWj+2UKzJSJDZxe9ZUQHPb40nsNHuGfqK mbEQSogFAaNeloeMafbNiH0Ze/t0818x3bGye26lHkiT4X5V2ShUOhRhMNEd3mOU +aRkd0bwoKP2EAbIjAruY440c/TlRWsIolitIFld9faixWhX48vVTEbOywq1TIHh 6KBKUN0BV3ORtR1hRwXvY1/8NEEB1H3K1uiSuBVMIQF+bVKVxw5EZGgnIHp0ayyO mDMtz0oZrAr/kpKlZFBOtBYDWPFE3dOMnXVd6XMLHbPUHmflHg4b/gWkj7RgIF7X Cec81FUGSHrfsJ5zWVzxs2EqdgTj6Cfs -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:35 2025 by rpki-client