$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa File: af27fbd1-fccc-393f-ad38-224694a6aa8a.roa (raw, json) Hash identifier: VIcxEvJDss3IbFfLce6c7eUayprYZ5GXjgToFi0V2gw= Subject key identifier: 8C:16:40:83:CC:B8:6B:CA:6A:C6:64:70:B7:3F:B4:0D:1F:9D:AC:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA7EFFA43A45DF0C0E8D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 397211 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:7e:ff:a4:3a:45:df:0c:0e:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=a8f8d4eb-9da8-42e7-9520-dba81f321625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:e8:a9:c3:5d:8a:1f:9b:38:1f:12:c5:e3: 62:af:13:0a:4e:86:f6:40:a2:42:86:4a:72:28:35: cd:a9:1f:e8:51:e2:fb:58:7a:18:c7:af:62:c6:19: 7a:00:31:69:7d:72:2a:fa:a9:36:00:a1:68:1b:03: 0a:3d:6c:48:0e:7b:55:2a:7e:8c:c1:9a:00:48:9a: fc:3a:63:56:a6:75:75:f3:5c:d7:57:27:e0:4c:4e: 76:10:15:25:26:cd:88:14:5d:1a:e1:c3:bd:62:54: 3d:68:1a:6f:9a:28:9e:4b:44:6f:d3:ca:9a:64:04: ea:5a:f3:03:ee:93:51:94:15:30:2d:95:76:b9:69: b1:bb:61:a6:fc:b4:20:e4:7d:af:97:57:96:b5:a5: ca:2a:d8:34:9b:43:a4:d2:32:4b:46:5e:50:c8:b7: a4:f2:4e:e6:ca:59:3e:92:ac:a8:4e:4b:48:af:c6: 88:c1:eb:6f:01:0d:a0:c2:a7:ac:a0:93:03:bf:c8: 90:62:9f:d9:b3:c1:36:68:1e:56:37:a9:da:a7:3b: 0e:f0:20:28:23:b3:ad:67:52:0e:30:ea:90:a3:85: 71:2e:7b:49:7d:fd:36:c2:57:bd:3a:92:33:2f:3d: 79:94:51:8a:4d:57:46:72:ad:bd:6e:ee:90:c8:da: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:16:40:83:CC:B8:6B:CA:6A:C6:64:70:B7:3F:B4:0D:1F:9D:AC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:34:56:9c:08:76:96:44:c0:47:ae:65:66:9f:38:26:cd:cc: ec:ca:59:83:14:bf:27:25:ee:0d:ac:87:fe:62:f3:53:4d:43: 7c:f9:6c:6c:d1:b9:ef:03:a8:1f:5b:d0:05:dc:0e:b3:36:b6: 57:97:36:25:a2:b3:4f:32:2a:4b:3b:b9:42:c3:73:02:d4:e2: d2:06:ca:80:e2:07:aa:7a:63:3e:be:9c:cc:a5:e4:37:17:88: 8f:fc:ba:1b:bf:8e:aa:70:c2:82:6b:cf:af:b1:be:0d:02:7e: 8a:2d:44:6e:3d:a2:d2:43:fc:47:61:ae:15:8f:52:b0:a7:0a: f7:85:80:84:f1:c0:99:bf:e3:af:c4:7e:9a:6f:41:ea:d7:bc: 4f:dc:c5:d4:3d:08:43:ed:c2:bd:66:d9:23:11:98:40:3d:e9: 21:77:92:a5:67:1a:e7:08:b7:a9:cf:82:3d:ac:2f:25:e6:38: e7:0d:df:0b:f0:a1:14:86:51:ea:d7:fa:81:3e:53:fa:7d:c2: 1c:bd:60:3d:36:d1:8e:c8:64:86:a3:03:fa:08:e8:1f:e7:37: e5:3d:03:04:65:9e:bf:df:ec:50:4f:4b:8e:42:13:ea:09:50: 0b:85:a9:96:7e:30:b5:99:47:5a:fb:04:90:d7:d4:03:61:8a: 72:86:fd:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6n7/pDpF3wwOjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk YThmOGQ0ZWItOWRhOC00MmU3LTk1MjAtZGJhODFmMzIxNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHnoqcNdih+bOB8SxeNirxMKTob2QKJChkpy KDXNqR/oUeL7WHoYx69ixhl6ADFpfXIq+qk2AKFoGwMKPWxIDntVKn6MwZoASJr8 OmNWpnV181zXVyfgTE52EBUlJs2IFF0a4cO9YlQ9aBpvmiieS0Rv08qaZATqWvMD 7pNRlBUwLZV2uWmxu2Gm/LQg5H2vl1eWtaXKKtg0m0Ok0jJLRl5QyLek8k7mylk+ kqyoTktIr8aIwetvAQ2gwqesoJMDv8iQYp/Zs8E2aB5WN6napzsO8CAoI7OtZ1IO MOqQo4VxLntJff02wle9OpIzLz15lFGKTVdGcq29bu6QyNoDRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwWQIPMuGvKasZkcLc/tA0fnaw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYyN2ZiZDEtZmNjYy0z OTNmLWFkMzgtMjI0Njk0YTZhYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE0VpwIdpZEwEeuZWafOCbNzOzKWYMUvycl7g2sh/5i81NNQ3z5bGzR ue8DqB9b0AXcDrM2tleXNiWis08yKks7uULDcwLU4tIGyoDiB6p6Yz6+nMyl5DcX iI/8uhu/jqpwwoJrz6+xvg0CfootRG49otJD/EdhrhWPUrCnCveFgITxwJm/46/E fppvQerXvE/cxdQ9CEPtwr1m2SMRmEA96SF3kqVnGucIt6nPgj2sLyXmOOcN3wvw oRSGUerX+oE+U/p9why9YD020Y7IZIajA/oI6B/nN+U9AwRlnr/f7FBPS45CE+oJ UAuFqZZ+MLWZR1r7BJDX1ANhinKG/Sg= -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:36 2025 by rpki-client