$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/593fa97d-efc1-3300-8917-c0e3f0203381.roa File: 593fa97d-efc1-3300-8917-c0e3f0203381.roa (raw, json) Hash identifier: +VNZXWInP4QsFXON6lmce9P2a+7z8+hWdclii8Ij7OQ= Subject key identifier: 96:35:EE:AE:A5:5D:04:81:3E:E9:A2:F9:72:C5:EE:BA:36:71:80:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA6CEBBE1CDBCD5B10DD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/593fa97d-efc1-3300-8917-c0e3f0203381.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396574 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:6c:eb:be:1c:db:cd:5b:10:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=0a8cea71-2e7d-4e76-b17a-6d32665fe85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:05:78:8e:b8:31:36:b5:09:b0:e5:64:a2: 36:08:29:2d:0a:b9:9e:e7:b9:89:18:3d:0a:05:20: 89:2c:39:f6:47:82:3b:a9:e5:f3:20:d7:85:de:ed: 2f:da:47:bb:a7:33:b6:a4:06:f7:f9:32:24:21:29: eb:9a:a3:f8:61:bd:aa:9a:2a:4c:0f:78:75:1a:a6: a1:61:66:83:c3:4a:65:47:fc:33:e7:42:41:46:3e: b8:49:ee:0b:07:e8:90:ea:25:f9:ce:63:b6:63:73: 10:d0:8f:f9:4d:67:44:64:eb:13:db:24:d9:a3:9f: b4:e2:d7:e5:4c:0d:2a:76:05:ab:fd:bc:2c:13:5d: a6:ff:00:b3:8f:3b:9b:ee:15:2a:da:73:a5:34:73: ad:05:94:7e:e1:fb:92:3b:de:8a:7e:4f:c7:b4:67: 3e:51:2d:d0:85:1a:1e:33:11:00:e3:bd:54:ec:e3: 79:ad:d9:75:d2:a8:1f:18:b0:0d:7d:78:77:2e:a8: c4:0b:a1:47:18:9f:93:27:f0:d5:67:84:ca:12:d3: 35:d1:28:ca:7f:95:04:55:7e:d1:ac:b1:a0:4a:eb: d3:f8:69:7f:65:7f:27:85:8f:c8:fa:ae:bb:cd:27: 28:3e:b4:1c:7a:ca:07:33:f7:06:69:e1:aa:51:e8: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:EE:AE:A5:5D:04:81:3E:E9:A2:F9:72:C5:EE:BA:36:71:80:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/593fa97d-efc1-3300-8917-c0e3f0203381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2b:5a:c5:64:16:40:d4:87:07:0e:7e:6a:ed:b4:c4:b0:dc: f3:b5:14:91:cf:a0:d3:28:d6:bf:b5:2e:fd:c4:f3:12:7f:c5: ec:aa:a2:bc:2b:7e:3b:e5:54:1e:8d:c8:af:11:82:6d:c7:d0: 68:c0:23:ad:a4:30:a5:47:70:66:ec:b8:5d:14:45:9c:6d:9a: 3b:54:4f:f4:7b:fe:c3:cf:9e:4a:aa:ce:0a:8e:c4:3e:a4:48: 4e:27:72:a2:87:7b:4e:d6:8d:ec:fb:f5:da:3f:53:40:7d:d2: 44:8a:3b:23:33:1c:f4:e1:a2:fe:54:b6:84:48:bf:c7:60:11: a8:dd:52:9f:bd:d1:92:cb:08:32:1a:47:ab:16:68:ef:77:2e: 9c:d2:81:26:7f:a9:07:af:10:05:3b:66:ea:88:bb:65:cb:25: 7b:3c:f7:7c:f2:2e:5e:08:99:6d:52:de:6a:d0:e5:c1:03:d4: 8f:5b:7d:92:29:cf:19:c9:6d:67:15:1a:4c:28:5e:c6:97:20: 62:6b:23:36:84:f7:51:ae:b1:b5:f5:28:18:50:62:99:c9:bf: be:6a:e8:11:48:58:b0:44:16:f2:6c:3f:27:71:ee:77:24:9b: e8:cb:eb:a1:b5:ed:46:88:9f:7a:17:60:2c:49:08:13:64:19: 66:fb:c7:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6mzrvhzbzVsQ3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MGE4Y2VhNzEtMmU3ZC00ZTc2LWIxN2EtNmQzMjY2NWZlODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH0FeI64MTa1CbDlZKI2CCktCrme57mJGD0K BSCJLDn2R4I7qeXzINeF3u0v2ke7pzO2pAb3+TIkISnrmqP4Yb2qmipMD3h1Gqah YWaDw0plR/wz50JBRj64Se4LB+iQ6iX5zmO2Y3MQ0I/5TWdEZOsT2yTZo5+04tfl TA0qdgWr/bwsE12m/wCzjzub7hUq2nOlNHOtBZR+4fuSO96Kfk/HtGc+US3QhRoe MxEA471U7ON5rdl10qgfGLANfXh3LqjEC6FHGJ+TJ/DVZ4TKEtM10SjKf5UEVX7R rLGgSuvT+Gl/ZX8nhY/I+q67zScoPrQcesoHM/cGaeGqUejClwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJY17q6lXQSBPumi+XLF7ro2cYDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTkzZmE5N2QtZWZjMS0z MzAwLTg5MTctYzBlM2YwMjAzMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClK1rFZBZA1IcHDn5q7bTEsNzztRSRz6DTKNa/tS79xPMSf8XsqqK8 K3475VQejcivEYJtx9BowCOtpDClR3Bm7LhdFEWcbZo7VE/0e/7Dz55Kqs4KjsQ+ pEhOJ3Kih3tO1o3s+/XaP1NAfdJEijsjMxz04aL+VLaESL/HYBGo3VKfvdGSywgy GkerFmjvdy6c0oEmf6kHrxAFO2bqiLtlyyV7PPd88i5eCJltUt5q0OXBA9SPW32S Kc8ZyW1nFRpMKF7GlyBiayM2hPdRrrG19SgYUGKZyb++augRSFiwRBbybD8nce53 JJvoy+uhte1GiJ96F2AsSQgTZBlm+8fI -----END CERTIFICATE-----Generated at Sun Jun 8 18:07:25 2025 by rpki-client