$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa File: cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa (raw, json) Hash identifier: qhCL4qiF0vdK2xGFYb3DpA/Z+Qds9zQjGa8hR8qKf+s= Subject key identifier: 1E:42:5D:57:23:3E:04:FF:7E:19:5A:41:FF:AF:55:BD:00:40:31:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA7193401DE4898C43BC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396559 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:71:93:40:1d:e4:89:8c:43:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=ad26b70e-0fcf-4a14-b4fd-e490b36b6b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:8a:5b:67:b0:33:5a:72:1e:4e:19:e9:5f: 84:0d:55:9a:7a:78:43:79:50:67:7f:3e:83:f8:03: f5:6e:52:e9:bd:1e:3c:e5:fb:ad:45:05:ba:7b:0b: e2:1d:53:5a:a7:ab:e4:00:de:5c:66:3b:cc:c1:71: 99:19:38:e8:89:e9:91:53:8f:74:4b:7b:7a:e1:01: 94:46:a6:06:da:18:11:5d:99:e2:0e:02:57:1a:58: 9e:4e:e6:8a:99:c9:e1:3a:85:73:fc:24:d4:c7:c7: 0d:8e:93:04:d9:98:63:30:87:71:99:19:63:f1:d5: ca:7c:84:b1:f1:86:0c:6e:be:1b:6c:49:79:18:e7: c5:f4:f8:7c:e1:4b:2c:7f:c0:2c:53:12:cf:a3:0f: 48:16:fc:9f:37:45:70:3d:c7:e3:d0:83:77:0d:0e: b9:cd:56:5d:1f:9e:8b:34:0d:a3:7b:43:92:31:45: 43:bc:26:e9:74:5b:2f:de:ff:8c:02:bd:c1:f2:dd: 57:6d:16:88:d7:5a:ed:1c:b3:27:24:d5:84:39:dd: 65:80:a5:34:b7:52:3c:03:9f:cc:ec:f6:81:36:43: 57:aa:43:a8:55:ae:3d:eb:8d:21:8f:62:b8:8c:40: ab:61:5f:e9:65:b7:67:f5:e7:6b:bf:d0:b3:c4:7b: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:42:5D:57:23:3E:04:FF:7E:19:5A:41:FF:AF:55:BD:00:40:31:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1a:15:ac:c3:76:d8:2d:e9:d6:a4:a5:ce:f8:bc:89:24:65: 58:88:0e:0f:ff:b4:bc:26:13:18:a0:89:d1:87:8b:01:bc:eb: 72:11:01:d8:13:28:f5:25:9d:d8:96:06:03:a2:43:62:38:35: 87:b3:1c:92:fe:37:2b:ed:f7:b0:83:ce:91:d4:21:f0:8e:00: 92:1a:df:c0:bc:75:be:ae:d8:b7:d2:d6:d3:04:d5:69:e8:ac: ab:23:26:55:00:fc:87:e0:0e:40:fe:75:13:4f:a0:b3:76:d6: 62:8a:6d:0a:40:7b:13:00:e0:da:44:75:0b:dd:1d:29:0a:7f: a3:97:64:08:65:0e:76:13:61:49:fb:f2:37:c1:44:4a:84:69: c0:a0:69:7a:e2:d6:f6:34:3f:48:70:d1:2d:1c:8b:c0:2f:a1: 01:70:d4:f8:85:a5:4a:5e:5d:b4:e3:38:09:6f:78:3c:62:bc: 49:5b:99:2c:01:f0:cf:fb:5e:c5:ff:d3:59:30:eb:ed:38:f0: de:0e:97:d6:1b:52:df:de:6b:6f:ab:42:7e:e9:23:e1:70:bd: f3:81:a8:3a:27:6e:5f:34:d2:7a:4c:ea:93:f4:5a:70:ca:eb: 62:1b:ab:2c:bb:fc:63:07:d7:bf:63:40:ff:82:ea:92:bc:62: 15:3c:bb:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6nGTQB3kiYxDvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk YWQyNmI3MGUtMGZjZi00YTE0LWI0ZmQtZTQ5MGIzNmI2YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnreKW2ewM1pyHk4Z6V+EDVWaenhDeVBnfz6D +AP1blLpvR485futRQW6ewviHVNap6vkAN5cZjvMwXGZGTjoiemRU490S3t64QGU RqYG2hgRXZniDgJXGlieTuaKmcnhOoVz/CTUx8cNjpME2ZhjMIdxmRlj8dXKfISx 8YYMbr4bbEl5GOfF9Ph84Ussf8AsUxLPow9IFvyfN0VwPcfj0IN3DQ65zVZdH56L NA2je0OSMUVDvCbpdFsv3v+MAr3B8t1XbRaI11rtHLMnJNWEOd1lgKU0t1I8A5/M 7PaBNkNXqkOoVa49640hj2K4jECrYV/pZbdn9edrv9CzxHu5SwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB5CXVcjPgT/fhlaQf+vVb0AQDEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y5ZjkwN2YtZTljYy0z YTYyLWFjMDUtMDNiNGU3MTkxZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCuGhWsw3bYLenWpKXO+LyJJGVYiA4P/7S8JhMYoInRh4sBvOtyEQHY Eyj1JZ3YlgYDokNiODWHsxyS/jcr7fewg86R1CHwjgCSGt/AvHW+rti30tbTBNVp 6KyrIyZVAPyH4A5A/nUTT6CzdtZiim0KQHsTAODaRHUL3R0pCn+jl2QIZQ52E2FJ +/I3wURKhGnAoGl64tb2ND9IcNEtHIvAL6EBcNT4haVKXl204zgJb3g8YrxJW5ks AfDP+17F/9NZMOvtOPDeDpfWG1Lf3mtvq0J+6SPhcL3zgag6J25fNNJ6TOqT9Fpw yutiG6ssu/xjB9e/Y0D/guqSvGIVPLtM -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:20 2025 by rpki-client