$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa File: a38a8da5-2705-3176-9add-cee9d33d73a3.roa (raw, json) Hash identifier: wMXhfXLsS7SJUCJJme9nvbmoDE3sWtd6Kplrrbh4RC0= Subject key identifier: 35:9F:D4:8B:87:78:71:B9:00:ED:35:AA:BA:52:7D:F5:94:6A:B6:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA715D940F74AC48BBE250 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 397200 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:71:5d:94:0f:74:ac:48:bb:e2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=5fde7921-d7be-4f4a-b59f-84576d3cd55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:10:95:99:ec:3f:20:c8:05:60:9d:b4:df: a1:02:ba:e4:f6:8c:5d:66:3a:3b:6d:e7:c5:38:87: 62:19:50:c3:b2:40:ed:37:dd:39:bc:05:4b:f5:18: 44:0a:e4:11:5d:70:f6:31:61:0f:09:c3:d8:de:d7: 0d:80:4d:7e:29:40:b4:e7:0c:85:96:30:c7:1d:51: 81:a0:f9:83:d3:76:fc:25:b0:ce:7d:0f:ac:b6:35: 53:03:b1:92:2f:7d:5f:17:20:60:ce:6c:0b:4b:92: ab:6e:6d:6a:bd:22:ec:70:69:46:f4:dc:01:df:ef: c4:f6:61:d3:4e:bd:c4:7c:b2:9f:c0:d8:95:2d:e6: 09:4c:bb:29:75:cb:61:b5:5a:d1:7e:18:5c:7b:0c: 57:6a:a9:02:25:e0:1d:f1:a2:1e:3c:d2:6d:ec:5f: 80:e3:ef:0b:db:66:1c:da:3a:08:8a:ff:12:a9:6e: 96:a7:3d:d4:b5:2f:95:25:52:94:2e:ee:5e:90:22: ea:1b:bf:29:7f:f1:5b:60:ca:1e:e1:b3:5e:fe:7a: 7c:51:b5:53:54:94:33:b2:a8:f2:79:00:c0:63:5a: 7f:44:10:46:b0:2a:55:20:e4:54:04:c6:c6:8b:75: 79:7f:f3:15:e3:90:d8:6b:a2:1d:ff:be:20:93:4a: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:D4:8B:87:78:71:B9:00:ED:35:AA:BA:52:7D:F5:94:6A:B6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a38a8da5-2705-3176-9add-cee9d33d73a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:13:33:33:13:17:76:ee:a5:eb:ac:f2:5a:14:ea:9e:af:7f: f6:a3:f0:bf:1e:7a:6d:4a:ee:d7:89:b5:39:ac:81:07:98:d6: b2:38:4c:1b:cc:c7:d4:85:fc:d9:14:04:21:c8:51:46:4d:2c: b7:56:76:9a:a7:6d:12:cb:3d:71:96:d4:f8:84:c6:92:45:c3: 5c:3e:2d:fa:83:66:9a:cf:a8:57:4a:8d:10:ef:2c:f5:08:f4: 17:e3:7a:f1:47:6b:85:6b:bd:cc:32:66:6b:e1:ef:bb:26:73: 67:66:92:7c:a8:98:66:af:6c:6f:69:29:ad:14:51:e0:79:1d: 9f:b1:d3:cb:92:2e:31:de:4f:88:99:3d:b1:0d:1e:fe:b0:eb: cb:c1:9d:7d:de:8f:d1:0b:ed:c7:f8:52:3f:15:5c:34:2b:31: 26:cb:a6:c2:ab:ab:b1:e4:8f:fd:75:96:6b:ff:96:5d:64:02: 8c:88:fe:c0:a0:19:e6:00:66:8f:ce:aa:07:52:b7:5b:77:79: 39:5d:17:53:8c:df:06:1f:97:0e:6c:70:b2:dc:55:0a:39:4d: e1:ce:b8:18:51:6d:ce:5b:dc:53:5e:bf:46:ad:dd:c1:75:91: 06:9b:2d:db:43:77:9d:e1:73:0f:31:4d:e9:96:4a:22:ef:90: 29:f7:0e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6nFdlA90rEi74lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NWZkZTc5MjEtZDdiZS00ZjRhLWI1OWYtODQ1NzZkM2NkNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw8QlZnsPyDIBWCdtN+hArrk9oxdZjo7befF OIdiGVDDskDtN905vAVL9RhECuQRXXD2MWEPCcPY3tcNgE1+KUC05wyFljDHHVGB oPmD03b8JbDOfQ+stjVTA7GSL31fFyBgzmwLS5Krbm1qvSLscGlG9NwB3+/E9mHT Tr3EfLKfwNiVLeYJTLspdcthtVrRfhhcewxXaqkCJeAd8aIePNJt7F+A4+8L22Yc 2joIiv8SqW6Wpz3UtS+VJVKULu5ekCLqG78pf/FbYMoe4bNe/np8UbVTVJQzsqjy eQDAY1p/RBBGsCpVIORUBMbGi3V5f/MV45DYa6Id/74gk0qRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWf1IuHeHG5AO01qrpSffWUarZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM4YThkYTUtMjcwNS0z MTc2LTlhZGQtY2VlOWQzM2Q3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8TMzMTF3bupeus8loU6p6vf/aj8L8eem1K7teJtTmsgQeY1rI4TBvM x9SF/NkUBCHIUUZNLLdWdpqnbRLLPXGW1PiExpJFw1w+LfqDZprPqFdKjRDvLPUI 9BfjevFHa4VrvcwyZmvh77smc2dmknyomGavbG9pKa0UUeB5HZ+x08uSLjHeT4iZ PbENHv6w68vBnX3ej9EL7cf4Uj8VXDQrMSbLpsKrq7Hkj/11lmv/ll1kAoyI/sCg GeYAZo/OqgdSt1t3eTldF1OM3wYflw5scLLcVQo5TeHOuBhRbc5b3FNev0at3cF1 kQabLdtDd53hcw8xTemWSiLvkCn3DoA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:15:16 2025 by rpki-client