$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa File: 86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa (raw, json) Hash identifier: QyMhx8Lnpv2QrqG2BLhITVWJDIc5cbW2eGK87nMP9Mw= Subject key identifier: 71:B8:D2:32:8D:54:40:56:50:89:ED:2A:85:B6:28:C8:55:BF:A7:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA6C46F047D58541C34280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396563 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:6c:46:f0:47:d5:85:41:c3:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=331ed236-2614-4cfc-8be9-4958caf2346f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:95:d3:2f:86:e1:9b:4a:d6:3a:5e:b6:b2: 14:c5:de:60:61:1d:21:47:b1:d6:86:0d:35:35:dd: 3e:ab:88:15:6f:f2:9d:ab:de:0a:54:d9:dc:a9:65: 68:88:aa:66:e0:72:66:8c:14:00:7c:9e:f2:ad:7b: 7e:ab:8a:e2:0b:9d:e3:82:2b:7d:c4:fd:52:ce:d9: 9f:bd:48:21:61:23:3b:93:34:5b:ad:f1:1c:a6:fd: 18:4a:4f:29:58:a7:fe:e0:0d:6d:98:56:78:bc:7c: 32:37:67:0c:ba:98:7a:54:28:d0:46:32:2c:e1:96: 9c:ea:eb:68:1b:5d:62:29:0d:6a:12:9f:14:6b:d0: 28:26:db:98:97:0c:0d:0e:11:e5:dd:2c:a7:3e:e0: f8:94:ea:ee:0b:ce:13:d3:05:8f:58:6e:4c:46:f3: 14:84:36:ca:47:d7:f6:3f:78:3b:9b:69:68:cb:ad: 0c:8c:a3:83:7a:73:2f:53:3d:39:26:05:f0:22:45: 28:c2:e8:fe:3d:63:77:27:7f:9d:cb:d8:f0:bd:30: 33:41:d9:23:bb:2e:dd:20:24:ef:ac:76:c5:53:64: be:c3:46:9a:4b:3f:77:da:d3:c5:5c:e5:4d:63:69: b4:5b:c5:5c:c5:e1:75:f4:e2:e6:09:03:b8:f5:a4: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:D2:32:8D:54:40:56:50:89:ED:2A:85:B6:28:C8:55:BF:A7:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cc:b2:0e:94:4c:85:0a:b4:4e:a3:e1:df:27:30:28:df:6a: 72:fd:d7:8a:34:2a:ef:30:80:25:05:47:bf:d6:3a:9b:92:c7: 90:5d:96:f9:37:59:93:fa:00:fc:a6:a2:00:c6:40:97:03:42: c1:62:22:ca:13:d1:55:dc:f0:f5:c4:6e:12:e1:db:50:a9:9c: ba:04:40:0e:95:1c:96:11:bb:1d:8e:a3:c2:9f:0f:a2:e5:b2: cc:e2:36:60:2c:86:d7:b7:d1:9f:aa:7a:45:18:da:5d:90:a7: 1b:76:6f:87:73:b6:85:bd:33:3a:32:da:b9:36:fa:fb:72:6b: 24:f5:ba:eb:e1:db:d2:35:50:7a:be:9e:15:5a:84:c8:e4:9b: ec:cc:72:3c:71:e8:e8:be:35:a6:fd:c7:cb:4d:6c:d3:7e:4b: 21:3f:d7:6a:4f:f0:54:ac:15:f1:28:a2:7b:8a:94:69:30:41: 8e:8b:12:29:ba:57:df:49:d9:25:a2:94:65:a3:42:78:3e:2e: 36:25:17:47:ed:95:ea:23:75:c0:4b:5c:62:3b:d6:ba:99:55: 3e:37:f2:94:b3:15:10:19:41:15:35:96:ea:9a:ff:96:5a:50: bd:46:15:5d:1a:76:c0:e6:82:4e:e4:13:a8:54:53:32:66:69: a6:79:42:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mxG8EfVhUHDQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MzMxZWQyMzYtMjYxNC00Y2ZjLThiZTktNDk1OGNhZjIzNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArveV0y+G4ZtK1jpetrIUxd5gYR0hR7HWhg01 Nd0+q4gVb/Kdq94KVNncqWVoiKpm4HJmjBQAfJ7yrXt+q4riC53jgit9xP1Sztmf vUghYSM7kzRbrfEcpv0YSk8pWKf+4A1tmFZ4vHwyN2cMuph6VCjQRjIs4Zac6uto G11iKQ1qEp8Ua9AoJtuYlwwNDhHl3SynPuD4lOruC84T0wWPWG5MRvMUhDbKR9f2 P3g7m2loy60MjKODenMvUz05JgXwIkUowuj+PWN3J3+dy9jwvTAzQdkjuy7dICTv rHbFU2S+w0aaSz932tPFXOVNY2m0W8VcxeF19OLmCQO49aRDIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG40jKNVEBWUIntKoW2KMhVv6dNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY0NjlhMWMtYmRkMi0z ZThmLWI2NGYtYjVmZThkNzExNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDMsg6UTIUKtE6j4d8nMCjfanL914o0Ku8wgCUFR7/WOpuSx5Bdlvk3 WZP6APymogDGQJcDQsFiIsoT0VXc8PXEbhLh21CpnLoEQA6VHJYRux2Oo8KfD6Ll ssziNmAshte30Z+qekUY2l2Qpxt2b4dztoW9Mzoy2rk2+vtyayT1uuvh29I1UHq+ nhVahMjkm+zMcjxx6Oi+Nab9x8tNbNN+SyE/12pP8FSsFfEoonuKlGkwQY6LEim6 V99J2SWilGWjQng+LjYlF0ftleojdcBLXGI71rqZVT438pSzFRAZQRU1luqa/5Za UL1GFV0adsDmgk7kE6hUUzJmaaZ5QiE= -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:46 2025 by rpki-client