$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cdcfa6f-db14-308b-9152-6ac038f5d299.roa File: 5cdcfa6f-db14-308b-9152-6ac038f5d299.roa (raw, json) Hash identifier: N+516IAWQ5V1jKUcluYa6BN6/iDk/DVXvtpslNdsf7g= Subject key identifier: F0:35:D0:5A:6C:27:2E:AF:97:73:C7:AD:2E:D1:8B:B3:D0:DF:79:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA70829801193477899F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cdcfa6f-db14-308b-9152-6ac038f5d299.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396590 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:70:82:98:01:19:34:77:89:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=21469df1-fe5c-4329-8caa-d9a7ac07053b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:22:41:0c:9b:5f:82:73:41:43:6d:e2:7c:af: 70:15:bf:f8:00:59:13:18:d8:3a:9e:d6:9f:7a:8c: a1:c9:6c:33:fd:41:3d:80:d9:26:d8:6c:d9:78:c6: d4:75:93:02:d4:1f:21:a5:29:30:65:3f:7c:f1:fe: b7:9e:9d:f3:4e:40:4b:42:22:eb:67:c1:17:f0:6d: 17:17:32:d3:5f:dd:cc:0c:0b:b1:9e:6a:9f:e0:8d: d4:09:62:9f:f2:9b:86:3e:76:7d:f4:8c:0c:52:b0: c2:91:ae:94:82:1a:8b:74:92:b8:ca:3a:2d:14:88: d7:bd:96:c1:a3:89:91:2f:9a:46:52:6e:87:6b:88: 6b:71:10:a0:ed:07:61:a2:fd:f9:6c:22:ce:6d:cc: b9:46:15:d3:74:23:58:4e:42:c4:a1:a9:7c:32:30: 85:ee:2d:c8:76:16:11:e5:8e:fd:c4:7f:2d:32:dc: 8d:62:cb:ac:cd:e1:01:37:a0:f5:3a:5e:ec:d3:83: 6f:df:0f:be:60:3e:89:30:21:cb:cd:2f:d4:55:1b: 88:b9:01:f6:80:62:e9:5a:53:e7:74:be:a5:c7:16: 02:99:cf:b1:ee:c4:ab:0c:df:66:37:35:17:f2:34: f9:85:e6:c4:56:cd:bd:cf:88:e1:b2:60:b4:97:44: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:D0:5A:6C:27:2E:AF:97:73:C7:AD:2E:D1:8B:B3:D0:DF:79:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cdcfa6f-db14-308b-9152-6ac038f5d299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:77:67:b9:2e:0d:02:ae:93:02:e4:82:13:05:05:1c:51:b3: 0c:05:10:a5:58:77:64:b3:dc:d7:9e:fe:a8:d7:45:c6:23:7f: a2:af:50:a3:a7:b3:0a:4b:3e:6a:86:bc:b6:2c:74:0c:03:02: da:fc:91:01:33:41:5b:79:8e:00:46:44:7c:e5:0b:3c:5d:70: 39:af:77:af:9f:00:4d:33:75:96:bb:86:72:85:e5:0e:78:a1: 46:54:7e:0f:a6:dc:d8:f6:2a:c6:94:bd:45:be:d6:80:9a:23: 91:01:05:31:df:96:5b:84:3a:22:d4:f1:8c:11:00:69:39:4e: dd:43:ce:e2:ef:da:37:68:89:91:45:96:8d:20:35:f4:95:b8: 8a:83:ff:ff:a9:30:cd:b7:62:f1:61:ea:d4:e7:6f:b3:e4:8a: 84:4b:0f:b8:c3:06:5d:91:a8:c8:d7:66:e7:e9:08:87:11:50: 95:02:26:d8:f3:b8:1b:57:8b:df:1b:be:22:5d:af:f9:05:dc: 7d:ef:df:6f:88:d0:b2:95:34:c8:ad:58:5b:b5:cb:ed:db:3f: 85:11:e9:89:12:34:17:c5:1d:dd:b9:23:52:d3:d0:38:b1:5e: f6:0f:45:64:dc:13:ff:45:ea:a4:15:d5:e9:b5:17:fb:d8:f4: e9:19:eb:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6nCCmAEZNHeJn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MjE0NjlkZjEtZmU1Yy00MzI5LThjYWEtZDlhN2FjMDcwNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yJBDJtfgnNBQ23ifK9wFb/4AFkTGNg6ntaf eoyhyWwz/UE9gNkm2GzZeMbUdZMC1B8hpSkwZT988f63np3zTkBLQiLrZ8EX8G0X FzLTX93MDAuxnmqf4I3UCWKf8puGPnZ99IwMUrDCka6UghqLdJK4yjotFIjXvZbB o4mRL5pGUm6Ha4hrcRCg7Qdhov35bCLObcy5RhXTdCNYTkLEoal8MjCF7i3IdhYR 5Y79xH8tMtyNYsuszeEBN6D1Ol7s04Nv3w++YD6JMCHLzS/UVRuIuQH2gGLpWlPn dL6lxxYCmc+x7sSrDN9mNzUX8jT5hebEVs29z4jhsmC0l0QO9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPA10FpsJy6vl3PHrS7Ri7PQ33n4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWNkY2ZhNmYtZGIxNC0z MDhiLTkxNTItNmFjMDM4ZjVkMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBud2e5Lg0CrpMC5IITBQUcUbMMBRClWHdks9zXnv6o10XGI3+ir1Cj p7MKSz5qhry2LHQMAwLa/JEBM0FbeY4ARkR85Qs8XXA5r3evnwBNM3WWu4ZyheUO eKFGVH4PptzY9irGlL1FvtaAmiORAQUx35ZbhDoi1PGMEQBpOU7dQ87i79o3aImR RZaNIDX0lbiKg///qTDNt2LxYerU52+z5IqESw+4wwZdkajI12bn6QiHEVCVAibY 87gbV4vfG74iXa/5Bdx9799viNCylTTIrVhbtcvt2z+FEemJEjQXxR3duSNS09A4 sV72D0Vk3BP/ReqkFdXptRf72PTpGeu5 -----END CERTIFICATE-----Generated at Sat Jun 7 04:22:05 2025 by rpki-client