$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa File: f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa (raw, json) Hash identifier: CFNjDPmlREpbwxeXzAnWrHzY4Pqpi/OFfzwt4/IWH9w= Subject key identifier: A8:22:64:29:6B:6F:A6:22:14:1C:D6:B3:29:ED:38:6B:7A:8B:B8:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB15FF3768BF0BB14F00BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396542 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:5f:f3:76:8b:f0:bb:14:f0:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=232b331a-8b29-49b7-b7a5-33a6c7578851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:5a:cf:7d:0c:45:88:8a:cc:ae:08:4b:70: b9:42:b5:33:1d:1d:94:3c:c7:20:69:00:2e:86:4e: a5:c0:04:ea:d0:66:b0:f7:ca:3e:f8:cc:36:bf:8c: 69:08:ae:b4:a0:c4:8c:bc:c2:34:b3:39:b2:b3:1f: 74:8d:a6:02:66:b8:94:9e:c5:c6:53:ab:be:02:24: 43:68:ae:cd:db:1d:e6:9c:98:34:7e:f3:e2:df:83: 95:3d:2b:79:7d:b5:e3:71:5b:e9:19:0b:06:1b:d8: bb:ac:c5:88:db:df:f0:c8:68:81:5e:c7:6f:91:49: ac:0a:5f:51:3b:40:df:ee:fe:79:41:fe:2f:c9:34: c8:dd:87:7f:95:62:eb:ab:0c:5b:d8:a2:b3:9d:ef: 45:99:b5:30:1a:d3:da:af:b1:c1:60:6e:19:df:e2: d7:95:68:fb:ef:58:25:45:e6:fe:c2:c2:63:1b:90: d0:84:fa:23:49:3e:7e:2c:83:f9:34:40:e2:c9:93: 70:78:53:2f:87:b3:ed:a5:08:1e:bb:a2:c9:be:9a: 29:cc:64:9d:0d:a0:26:da:f3:88:77:84:c0:6f:d4: eb:c1:1d:f7:b3:16:70:b9:2c:30:fa:49:84:f2:3c: 21:ac:c3:ca:60:a6:7b:7c:c2:97:44:87:d8:a7:0b: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:22:64:29:6B:6F:A6:22:14:1C:D6:B3:29:ED:38:6B:7A:8B:B8:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ca:7d:61:23:89:11:d7:52:38:22:29:f7:b0:e0:27:17:3d: 92:ff:12:1c:75:a5:7b:50:67:9a:71:31:a5:c4:07:b7:45:77: 10:13:94:22:f9:81:b3:73:16:9f:d5:40:c2:d4:5e:10:3c:74: 56:14:7a:b3:61:70:5b:9a:b5:82:d7:e6:91:21:59:91:23:eb: 20:e4:87:44:69:35:a3:d2:bc:c3:44:1a:09:31:76:c7:39:90: 94:c8:66:9a:26:de:f3:58:fa:af:4f:c9:2c:54:c4:fa:ed:5d: 39:68:3d:3d:a9:d3:83:18:e7:3d:54:17:ef:ac:fe:95:b3:41: ef:72:3c:a9:7b:12:c0:18:96:97:4a:40:57:01:a8:6b:b1:0b: 68:73:32:f5:82:ee:0c:f2:90:23:e0:2f:da:a7:22:c2:9f:dd: ea:95:9c:2f:78:4f:18:91:79:c9:ba:f8:3f:98:10:3f:99:24: cf:2b:5a:a4:e4:c2:dc:94:85:ad:ed:80:eb:25:2d:d9:f6:c1: 29:bc:6b:70:b8:65:f8:5e:89:e9:b8:d9:05:b1:d4:3b:f2:b3: f9:c4:84:de:f9:ff:1b:7d:3e:61:4f:04:b9:9b:54:44:65:93: b9:56:44:f3:d0:f5:93:c8:32:36:79:2b:be:29:4d:45:62:73: 9d:d0:6c:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsV/zdovwuxTwC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MjMyYjMzMWEtOGIyOS00OWI3LWI3YTUtMzNhNmM3NTc4ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMBaz30MRYiKzK4IS3C5QrUzHR2UPMcgaQAu hk6lwATq0Gaw98o++Mw2v4xpCK60oMSMvMI0szmysx90jaYCZriUnsXGU6u+AiRD aK7N2x3mnJg0fvPi34OVPSt5fbXjcVvpGQsGG9i7rMWI29/wyGiBXsdvkUmsCl9R O0Df7v55Qf4vyTTI3Yd/lWLrqwxb2KKzne9FmbUwGtPar7HBYG4Z3+LXlWj771gl Reb+wsJjG5DQhPojST5+LIP5NEDiyZNweFMvh7PtpQgeu6LJvpopzGSdDaAm2vOI d4TAb9TrwR33sxZwuSww+kmE8jwhrMPKYKZ7fMKXRIfYpwtpYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKgiZClrb6YiFBzWsyntOGt6i7gsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjg4N2EyYzgtMGYyNi0z YjVlLThjZmYtZDI3MDJkNzVkMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwyn1hI4kR11I4Iin3sOAnFz2S/xIcdaV7UGeacTGlxAe3RXcQE5Qi +YGzcxaf1UDC1F4QPHRWFHqzYXBbmrWC1+aRIVmRI+sg5IdEaTWj0rzDRBoJMXbH OZCUyGaaJt7zWPqvT8ksVMT67V05aD09qdODGOc9VBfvrP6Vs0HvcjypexLAGJaX SkBXAahrsQtoczL1gu4M8pAj4C/apyLCn93qlZwveE8YkXnJuvg/mBA/mSTPK1qk 5MLclIWt7YDrJS3Z9sEpvGtwuGX4XonpuNkFsdQ78rP5xITe+f8bfT5hTwS5m1RE ZZO5VkTz0PWTyDI2eSu+KU1FYnOd0Gy8 -----END CERTIFICATE-----Generated at Fri Apr 11 23:47:41 2025 by rpki-client