$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa File: 6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa (raw, json) Hash identifier: rmJssRBziuSorpBqkPtVcDDMJxTxhnLzHp013WiDwQ0= Subject key identifier: 17:EF:13:2C:55:70:E7:E4:54:87:FF:30:33:C0:D5:98:EF:D4:30:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA66FEF349B0758414A680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396545 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:66:fe:f3:49:b0:75:84:14:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=969307d8-5249-4557-86f9-2ef9bda77ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:cf:5f:60:6a:5f:ec:d7:b6:7c:07:3a:42: 8d:07:f2:71:08:cf:00:d6:57:e4:a7:ae:e8:b0:11: 74:e7:fc:0f:5d:78:52:cd:6b:3e:ea:65:a9:bb:1d: 86:71:19:5a:59:1d:7e:a8:c2:88:3a:1a:f5:65:9d: d3:f8:6d:98:a1:71:83:ee:2e:0e:c9:3e:1c:f1:72: b5:cc:f9:c9:cd:44:50:e3:ac:69:b8:0f:22:25:b5: 1d:4c:1a:bb:b5:61:b5:4e:c4:a1:2e:d0:f5:e5:f9: cf:54:37:6f:5a:44:62:a7:b8:fa:c3:a0:77:44:95: 2c:2a:06:3d:26:4c:83:d0:be:a5:ec:0a:20:63:ae: 3a:5f:b4:92:84:11:1f:12:42:1d:78:1e:c6:d2:89: 0b:de:9f:7a:ba:fe:68:2f:b2:16:cc:2b:a8:71:1f: 7b:20:e1:7e:d6:08:98:e2:9a:dc:fb:64:a0:28:33: f8:98:6c:55:2a:2d:4a:f8:e0:32:ac:c8:97:86:47: 19:35:6e:cf:e3:bd:3f:a5:1f:9c:a4:65:64:9f:55: 06:19:69:b4:6a:21:a6:70:45:fc:d7:65:1f:dc:ac: ba:bd:d2:37:8f:b3:71:bc:10:fc:f6:c1:1f:24:a8: 27:32:e1:4e:e5:d4:0a:f4:28:2f:b8:a0:58:b2:49: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EF:13:2C:55:70:E7:E4:54:87:FF:30:33:C0:D5:98:EF:D4:30:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:51:6b:df:cb:b4:e6:ae:26:34:c7:3c:55:da:1f:a6:17:e0: 70:b4:cc:1c:6b:be:0a:be:29:f7:bf:e8:ef:c3:e3:72:6d:86: b7:91:b6:8a:29:87:03:cd:be:23:bf:8d:df:48:da:51:6c:63: 38:fb:40:0f:06:99:31:d4:c7:6c:54:00:a3:79:37:c6:84:9a: b5:97:92:02:e5:dd:ea:25:2a:89:95:70:01:a4:19:9f:02:d1: df:7b:1b:ed:ec:ba:b2:d0:67:ed:41:a6:e7:a7:39:40:d1:d2: ff:76:df:eb:b7:e8:7f:63:f2:73:ac:b9:90:37:2e:a9:16:3d: b7:8c:bb:67:e7:32:1f:05:eb:46:a5:23:a7:45:68:c8:9f:b4: c7:51:5b:2b:9a:ba:29:4e:e3:9b:a8:9a:c7:cd:d4:77:71:09: bd:2a:90:97:90:4d:4d:51:f5:12:7e:f7:05:2e:db:59:be:df: 2d:f6:ce:03:af:ca:3a:36:b8:2c:36:61:9c:29:d5:d4:1e:f4: d2:3b:92:dc:89:9c:73:b9:38:73:f6:88:5e:b8:66:a7:7a:62: 9d:12:f4:eb:8d:7e:44:63:95:8a:ac:c8:fe:5b:a7:92:fe:d0: 4c:bd:22:c4:1a:02:e7:84:2f:4d:09:f8:d3:99:f8:48:63:c0: c5:fe:c3:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mb+80mwdYQUpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk OTY5MzA3ZDgtNTI0OS00NTU3LTg2ZjktMmVmOWJkYTc3YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHbPX2BqX+zXtnwHOkKNB/JxCM8A1lfkp67o sBF05/wPXXhSzWs+6mWpux2GcRlaWR1+qMKIOhr1ZZ3T+G2YoXGD7i4OyT4c8XK1 zPnJzURQ46xpuA8iJbUdTBq7tWG1TsShLtD15fnPVDdvWkRip7j6w6B3RJUsKgY9 JkyD0L6l7AogY646X7SShBEfEkIdeB7G0okL3p96uv5oL7IWzCuocR97IOF+1giY 4prc+2SgKDP4mGxVKi1K+OAyrMiXhkcZNW7P470/pR+cpGVkn1UGGWm0aiGmcEX8 12Uf3Ky6vdI3j7NxvBD89sEfJKgnMuFO5dQK9CgvuKBYskkvRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfvEyxVcOfkVIf/MDPA1Zjv1DDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmFmMmEzYTctZjliOC0z NWU3LTk2OGUtMmYwMTY4YTUxMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRRa9/LtOauJjTHPFXaH6YX4HC0zBxrvgq+Kfe/6O/D43JthreRtoop hwPNviO/jd9I2lFsYzj7QA8GmTHUx2xUAKN5N8aEmrWXkgLl3eolKomVcAGkGZ8C 0d97G+3surLQZ+1BpuenOUDR0v923+u36H9j8nOsuZA3LqkWPbeMu2fnMh8F60al I6dFaMiftMdRWyuauilO45uomsfN1HdxCb0qkJeQTU1R9RJ+9wUu21m+3y32zgOv yjo2uCw2YZwp1dQe9NI7ktyJnHO5OHP2iF64Zqd6Yp0S9OuNfkRjlYqsyP5bp5L+ 0Ey9IsQaAueEL00J+NOZ+EhjwMX+w1A= -----END CERTIFICATE-----Generated at Sat Jun 7 04:24:24 2025 by rpki-client