$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa File: ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa (raw, json) Hash identifier: 7zoE/pduqTqepACqsvWwDdnIC07OWx+6cZ3wdfzAOhU= Subject key identifier: 37:68:C4:5B:61:13:4C:03:4A:1A:FA:33:4F:4A:80:71:D6:2F:0E:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA7C1A07B73E3DE3671830 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396614 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:7c:1a:07:b7:3e:3d:e3:67:18:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=64a6cf41-e189-407e-9fd3-ccc7f39e6f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:b9:bf:66:89:11:19:e2:60:c4:22:a4:0b: d4:f9:5c:7f:01:46:3b:2b:19:8f:ea:b1:8c:cc:0f: e1:04:06:9c:90:d0:21:9d:5e:83:a6:c1:88:12:be: 34:23:78:c8:f6:ea:b2:4c:5c:56:67:21:55:87:fb: 39:b8:99:f7:40:91:4c:19:be:6f:a4:cd:19:64:d1: 8c:92:e9:51:da:53:50:13:9e:3a:6d:c9:1d:6a:f8: 00:b2:59:9d:83:e0:32:a9:41:47:2c:74:17:bf:33: 6c:fe:41:ff:72:0a:88:4f:43:55:8a:a7:de:c5:63: 09:24:0e:c2:3c:18:74:19:cb:1a:ef:83:7e:f2:82: a2:9b:b4:a5:12:1c:23:06:ed:2a:d7:1a:54:00:b1: 5d:8a:bb:aa:70:ef:8c:37:65:83:6f:26:c5:d4:12: aa:82:17:d3:5e:50:0d:b2:c3:1c:5e:81:21:7d:84: 6b:4a:1b:2e:0d:76:20:f4:68:a2:92:69:18:1f:ba: 95:61:a9:4c:80:01:4b:ba:55:84:6c:1e:e0:2b:5b: 24:5d:2c:9b:ec:58:6d:8a:c0:7d:6e:d6:46:43:79: bc:fb:82:c1:98:92:5a:32:46:79:7a:96:4f:dd:36: af:e6:9c:63:42:4e:f2:87:72:ae:63:9f:71:b2:40: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:C4:5B:61:13:4C:03:4A:1A:FA:33:4F:4A:80:71:D6:2F:0E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c1:45:62:a5:89:b6:6c:e5:80:b2:74:c0:08:88:90:9c:64: c6:6b:67:6b:db:1a:e7:be:44:e7:a5:e6:99:b7:80:b7:fd:6b: 36:f8:ee:ba:c3:04:d6:c6:b1:46:ea:70:a4:22:60:f4:31:d8: 54:68:a3:fa:6c:b2:65:5c:bb:03:88:74:06:f9:f5:11:ac:a0: bb:17:5c:4c:d1:a3:ae:49:5e:4d:89:c9:1b:fa:9d:c3:08:59: 6b:26:7b:12:40:c5:5b:c7:5d:33:9a:f0:f6:c1:a3:f6:29:52: b4:ac:92:8e:c7:52:53:e1:21:7f:9e:1e:17:4e:97:df:9f:fc: 5a:23:9a:5f:6f:03:43:cf:cf:15:1f:e2:b6:3b:90:9b:66:9f: cc:70:d7:3a:04:51:96:34:c6:c3:3e:e1:b1:09:3e:f1:c8:da: 50:67:0a:b2:b7:2e:c2:d3:80:fa:57:bf:6b:b1:8f:cf:64:ef: 28:5e:f9:d5:73:4a:4e:47:27:3c:b1:10:da:38:7d:f9:3d:32: 94:fc:7b:35:6a:b0:8a:d7:02:c8:ca:9e:b6:ba:2b:16:eb:79: 1d:eb:cf:8d:88:06:af:07:35:1d:db:15:13:c5:b1:38:3d:54: 9e:80:3f:5a:5c:88:66:73:70:37:51:04:04:64:0a:1b:fc:1c: 90:e4:75:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6nwaB7c+PeNnGDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NjRhNmNmNDEtZTE4OS00MDdlLTlmZDMtY2NjN2YzOWU2ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktO5v2aJERniYMQipAvU+Vx/AUY7KxmP6rGM zA/hBAackNAhnV6DpsGIEr40I3jI9uqyTFxWZyFVh/s5uJn3QJFMGb5vpM0ZZNGM kulR2lNQE546bckdavgAslmdg+AyqUFHLHQXvzNs/kH/cgqIT0NViqfexWMJJA7C PBh0Gcsa74N+8oKim7SlEhwjBu0q1xpUALFdiruqcO+MN2WDbybF1BKqghfTXlAN ssMcXoEhfYRrShsuDXYg9GiikmkYH7qVYalMgAFLulWEbB7gK1skXSyb7FhtisB9 btZGQ3m8+4LBmJJaMkZ5epZP3Tav5pxjQk7yh3KuY59xskA63wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDdoxFthE0wDShr6M09KgHHWLw42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWY4ZmMyYzctZmYyYi0z NzA1LTk3ZmYtZjE1YjUyZGU4Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAwUVipYm2bOWAsnTACIiQnGTGa2dr2xrnvkTnpeaZt4C3/Ws2+O66 wwTWxrFG6nCkImD0MdhUaKP6bLJlXLsDiHQG+fURrKC7F1xM0aOuSV5Nickb+p3D CFlrJnsSQMVbx10zmvD2waP2KVK0rJKOx1JT4SF/nh4XTpffn/xaI5pfbwNDz88V H+K2O5CbZp/McNc6BFGWNMbDPuGxCT7xyNpQZwqyty7C04D6V79rsY/PZO8oXvnV c0pORyc8sRDaOH35PTKU/Hs1arCK1wLIyp62uisW63kd68+NiAavBzUd2xUTxbE4 PVSegD9aXIhmc3A3UQQEZAob/ByQ5HXS -----END CERTIFICATE-----Generated at Fri Jun 6 19:36:02 2025 by rpki-client