$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa File: 324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa (raw, json) Hash identifier: vo3eSDeb8iWgZ+c0LezaoMrGFqNmE6wxXhiPxywG1Oc= Subject key identifier: DB:34:7B:44:55:68:69:99:E4:6C:49:22:96:60:CC:64:50:19:3D:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB14534BC6DFCA46752DD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396551 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:45:34:bc:6d:fc:a4:67:52:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=2914f4ae-5948-4658-a646-33468b102ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:00:68:66:92:bb:37:be:83:45:d5:d5:49:63: 5f:4f:f0:43:b1:69:8d:4e:bb:4f:2c:c7:7a:0f:bd: c3:54:05:de:38:4c:9f:66:74:ec:b6:57:6b:c0:15: c4:f2:4b:56:ab:3e:42:80:3f:1d:15:a1:bf:0c:e5: cf:5c:8e:b1:31:68:43:59:e3:50:fb:00:52:a6:5b: d1:c1:7d:f3:0a:05:74:93:66:c4:ea:8d:7d:ae:74: 13:0e:3f:e2:c7:24:98:83:72:57:f6:c5:62:dc:52: 3b:db:1a:a3:a4:b3:3a:af:20:26:02:40:78:0d:13: 1e:e9:28:4c:15:99:2e:e1:b6:62:5f:ef:3b:69:bf: f4:2c:5c:c1:76:be:27:de:eb:b3:c1:30:28:08:a4: b5:4b:f5:b6:cd:b0:de:6c:6e:f0:b1:79:e4:fa:b7: dc:a7:bd:b0:a1:ce:cf:57:eb:06:30:69:bf:18:67: cc:de:74:07:24:02:d9:13:b3:bf:cc:6e:24:b3:e2: 62:0c:d7:bc:03:9c:86:fc:f0:25:a5:c5:69:c1:38: 69:c0:24:dd:33:b0:e3:d7:83:ff:e4:5e:cb:f6:ce: 45:9c:a9:69:0d:f5:4f:47:bd:0b:a7:97:db:f4:3c: 34:2c:45:09:61:73:7e:0d:15:dc:20:88:54:97:0a: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:34:7B:44:55:68:69:99:E4:6C:49:22:96:60:CC:64:50:19:3D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b2:ae:e6:d3:c6:2d:b4:d8:d8:1a:b8:1a:e8:2c:ed:d3:fa: 19:41:01:5f:2e:1a:8d:eb:4f:bc:bd:47:d7:a5:44:92:46:ed: 90:3a:95:91:d1:b1:34:8a:d0:91:e0:a4:0f:80:6d:4f:a3:37: 44:6b:cc:29:69:e8:06:46:32:9d:79:6f:11:70:95:b5:ab:26: 89:8e:66:fe:9b:8e:9b:18:9b:fe:cf:23:c6:c5:8a:70:17:31: 4e:a0:d0:05:f6:40:73:c1:3f:6b:de:47:97:43:37:93:e8:c7: 87:ab:ae:1b:d5:98:ac:96:f6:d8:14:5a:8d:a6:6e:aa:bc:36: 54:50:02:c2:30:8f:e7:78:c0:c5:e4:cd:67:55:83:58:f4:4a: 63:80:d0:ef:3e:74:8a:8b:a9:72:7e:8e:a3:fe:e9:e5:01:00: 5b:9c:f3:91:db:1f:0f:df:2f:8b:72:2e:9f:a2:73:ae:32:9a: 8e:5c:2c:4a:cc:81:c7:d8:b8:fa:9e:ec:35:6c:9c:d2:76:a5: 0c:1f:0b:cd:56:1b:8c:70:05:60:0d:fa:4a:f5:ee:0c:13:29: 81:27:6d:be:f1:b3:1c:90:78:b4:f5:32:9f:c3:27:64:83:16: d5:5d:b6:ac:2c:1b:70:3a:73:97:d5:d8:d2:9c:a4:83:df:6c: f8:c4:4b:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsUU0vG38pGdS3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MjkxNGY0YWUtNTk0OC00NjU4LWE2NDYtMzM0NjhiMTAyYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQBoZpK7N76DRdXVSWNfT/BDsWmNTrtPLMd6 D73DVAXeOEyfZnTstldrwBXE8ktWqz5CgD8dFaG/DOXPXI6xMWhDWeNQ+wBSplvR wX3zCgV0k2bE6o19rnQTDj/ixySYg3JX9sVi3FI72xqjpLM6ryAmAkB4DRMe6ShM FZku4bZiX+87ab/0LFzBdr4n3uuzwTAoCKS1S/W2zbDebG7wsXnk+rfcp72woc7P V+sGMGm/GGfM3nQHJALZE7O/zG4ks+JiDNe8A5yG/PAlpcVpwThpwCTdM7Dj14P/ 5F7L9s5FnKlpDfVPR70Lp5fb9Dw0LEUJYXN+DRXcIIhUlwpbFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNs0e0RVaGmZ5GxJIpZgzGRQGT0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI0YzhhZjctNmQzMy0z YTZlLWI4NGYtM2NjZWM0ZGFmZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC0sq7m08YttNjYGrga6Czt0/oZQQFfLhqN60+8vUfXpUSSRu2QOpWR 0bE0itCR4KQPgG1PozdEa8wpaegGRjKdeW8RcJW1qyaJjmb+m46bGJv+zyPGxYpw FzFOoNAF9kBzwT9r3keXQzeT6MeHq64b1ZislvbYFFqNpm6qvDZUUALCMI/neMDF 5M1nVYNY9EpjgNDvPnSKi6lyfo6j/unlAQBbnPOR2x8P3y+Lci6fonOuMpqOXCxK zIHH2Lj6nuw1bJzSdqUMHwvNVhuMcAVgDfpK9e4MEymBJ22+8bMckHi09TKfwydk gxbVXbasLBtwOnOX1djSnKSD32z4xEvy -----END CERTIFICATE-----Generated at Sat May 10 23:14:43 2025 by rpki-client