$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d22d443b-bbc5-37be-9d5b-42b1f467194b.roa File: d22d443b-bbc5-37be-9d5b-42b1f467194b.roa (raw, json) Hash identifier: r2q7cZf2HzRzcArrpaaGnaXrbat8kVJfngLsg+O2mmw= Subject key identifier: 7D:A9:00:0C:DA:43:2C:7E:C4:DB:28:80:9D:8B:F6:E8:02:C1:08:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA75F08623C2A3C5843400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d22d443b-bbc5-37be-9d5b-42b1f467194b.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396591 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:75:f0:86:23:c2:a3:c5:84:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=cd24f615-1278-410f-bef5-e08faaa80811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:68:4b:c2:f4:70:7c:6e:76:ed:e6:0f:b8: 39:05:4d:8c:b0:21:d1:02:6a:97:9d:79:35:37:d5: a8:c9:dd:2b:60:21:65:3e:1b:82:9a:72:9e:a9:07: d3:5b:06:ef:0a:2e:76:f1:3f:04:f2:e1:c9:a4:44: 5e:0c:0f:08:26:21:d7:d7:82:29:bf:d8:71:e7:ba: dd:ab:6e:e1:bb:fd:64:1f:87:ed:49:53:e2:8e:40: 93:af:22:a5:49:77:91:b1:4f:8b:b7:95:19:d2:1a: 54:22:36:09:b8:12:a3:ea:bf:0f:57:85:5f:db:17: f4:2a:41:cb:ca:f4:4b:24:93:bb:b7:07:73:4a:ba: 76:40:34:1c:1b:da:e1:2c:43:57:71:e5:cc:d8:45: 62:7d:80:a6:7c:cc:67:f7:6c:b6:22:4b:16:d2:fd: 9c:1e:7d:3d:52:5c:39:20:1b:81:f9:bc:0a:51:ba: 2b:d9:37:3e:85:b8:ab:b8:9d:43:3f:d3:4c:ab:a2: 0a:17:52:bc:90:ed:e8:a6:f5:5c:1b:de:82:cd:df: 1b:3e:ec:eb:1e:a2:2f:00:b2:f4:bd:25:3e:c6:00: fe:9c:23:a7:0e:ad:e4:bb:87:d8:a2:92:91:f5:de: 82:9f:4e:2d:51:8f:0f:85:8c:bf:ae:20:90:df:60: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:00:0C:DA:43:2C:7E:C4:DB:28:80:9D:8B:F6:E8:02:C1:08:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d22d443b-bbc5-37be-9d5b-42b1f467194b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:88:03:26:e3:1a:7b:c1:d2:88:92:ae:01:96:91:65:f7:aa: 93:d6:56:ca:22:ad:f1:32:87:5b:15:18:cc:46:72:48:58:61: 5a:23:31:b0:b2:99:90:11:2b:12:d1:35:1f:bb:29:53:67:08: 4b:51:1a:0e:9b:5d:69:c7:be:22:56:01:56:59:6c:3c:be:a3: 6f:d2:3e:76:d6:bd:48:ed:01:58:ea:ca:ee:7a:f0:39:2d:99: 7d:6c:7f:ff:94:95:b1:4d:78:50:6d:1d:b9:82:96:88:aa:c3: 1d:10:4b:07:f9:11:18:5b:0d:34:c6:31:a5:9f:e9:d1:28:c6: d1:a5:90:b9:23:ee:2a:e7:78:4c:87:02:37:c8:61:3d:00:54: b4:ad:0a:a8:25:da:b1:8b:cf:3d:1f:09:fe:6b:94:6d:10:d1: 5a:1a:ca:85:f1:4f:d3:ac:3a:95:ae:cd:d3:21:ee:5c:dc:cd: c2:f1:62:a9:b1:e8:9d:5e:0d:78:d5:59:d0:e6:b0:b1:72:4f: 15:9b:f2:07:a5:13:0c:77:3e:7a:ed:d9:e5:19:49:d6:5b:46: ad:fe:b7:7e:a1:5a:b0:bc:77:0f:3e:f7:7b:33:d2:2a:63:41: 9c:50:60:8f:49:9d:af:0b:d3:a2:72:4b:92:4d:00:3f:73:6d: be:11:5c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6nXwhiPCo8WENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk Y2QyNGY2MTUtMTI3OC00MTBmLWJlZjUtZTA4ZmFhYTgwODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJNoS8L0cHxudu3mD7g5BU2MsCHRAmqXnXk1 N9Woyd0rYCFlPhuCmnKeqQfTWwbvCi528T8E8uHJpEReDA8IJiHX14Ipv9hx57rd q27hu/1kH4ftSVPijkCTryKlSXeRsU+Lt5UZ0hpUIjYJuBKj6r8PV4Vf2xf0KkHL yvRLJJO7twdzSrp2QDQcG9rhLENXceXM2EVifYCmfMxn92y2IksW0v2cHn09Ulw5 IBuB+bwKUbor2Tc+hbiruJ1DP9NMq6IKF1K8kO3opvVcG96Czd8bPuzrHqIvALL0 vSU+xgD+nCOnDq3ku4fYopKR9d6Cn04tUY8PhYy/riCQ32CLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2pAAzaQyx+xNsogJ2L9ugCwQjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIyZDQ0M2ItYmJjNS0z N2JlLTlkNWItNDJiMWY0NjcxOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyIAybjGnvB0oiSrgGWkWX3qpPWVsoirfEyh1sVGMxGckhYYVojMbCy mZARKxLRNR+7KVNnCEtRGg6bXWnHviJWAVZZbDy+o2/SPnbWvUjtAVjqyu568Dkt mX1sf/+UlbFNeFBtHbmCloiqwx0QSwf5ERhbDTTGMaWf6dEoxtGlkLkj7irneEyH AjfIYT0AVLStCqgl2rGLzz0fCf5rlG0Q0VoayoXxT9OsOpWuzdMh7lzczcLxYqmx 6J1eDXjVWdDmsLFyTxWb8gelEwx3Pnrt2eUZSdZbRq3+t36hWrC8dw8+93sz0ipj QZxQYI9Jna8L06JyS5JNAD9zbb4RXA4= -----END CERTIFICATE-----Generated at Fri Jun 6 19:43:02 2025 by rpki-client