$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ec5391-0aa9-3333-a0a7-0244e04ab71b.roa File: 42ec5391-0aa9-3333-a0a7-0244e04ab71b.roa (raw, json) Hash identifier: uSEutFFsBU8uXNIa2pc7adyi7te7CVbE1KREBBbs2p8= Subject key identifier: 47:93:71:3B:E2:91:1F:D0:F3:85:91:78:D2:3A:44:61:C1:FE:14:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3A15916B9B7F2D0A084EE180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ec5391-0aa9-3333-a0a7-0244e04ab71b.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 397197 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:91:6b:9b:7f:2d:0a:08:4e:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=9ce73a5a-5446-44a3-8878-f2934ebcb834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:b3:54:14:d7:71:3b:00:2b:c4:77:ae:72: 4c:79:8b:59:96:3f:f9:b0:f3:c5:85:9b:23:7a:5d: 88:a8:b2:2a:fd:d5:13:4e:c4:72:34:93:2c:31:38: 3a:12:b1:76:ec:6f:dd:58:ef:d6:31:51:22:37:b9: f5:93:b3:79:2b:12:87:21:67:b6:07:e6:93:69:6d: e7:71:06:b8:c5:d6:50:ae:36:71:2c:12:88:22:5d: e9:98:de:2d:37:dd:cc:3e:57:0a:05:3f:f0:34:96: 64:2a:52:0b:56:dd:77:9d:ee:34:a8:f8:37:ba:f8: 56:80:34:95:be:b2:ec:59:26:8e:2b:22:e9:26:06: 02:e8:59:8a:03:85:7f:07:70:d4:3e:63:f2:e3:06: 8b:27:59:e5:a9:d1:96:f2:05:9d:37:10:93:85:98: 08:71:c7:ac:7a:41:c4:3c:31:e7:a9:22:38:a8:1c: 64:c5:1a:2c:43:02:86:95:bf:4d:4d:24:cb:66:85: 36:40:91:33:7d:40:66:fa:45:f7:08:75:a9:8e:cf: af:c2:b9:72:a7:23:72:bb:a0:22:f8:af:34:bc:c4: 9a:13:55:73:b8:bc:ba:7f:ec:ca:e7:1f:b1:cf:0a: b9:a7:75:f5:89:3f:bd:fd:c2:6f:ec:99:7a:af:31: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:93:71:3B:E2:91:1F:D0:F3:85:91:78:D2:3A:44:61:C1:FE:14:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ec5391-0aa9-3333-a0a7-0244e04ab71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ab:39:e1:a3:98:4e:89:ae:82:da:16:c1:59:31:45:1c:e2: c2:48:bd:26:79:5a:55:6b:93:ae:dd:32:19:f6:45:af:19:2d: 89:37:24:50:6d:aa:ab:7a:3f:24:b6:4f:b1:d8:36:dc:63:ad: dd:40:49:33:de:50:79:7d:fc:f1:83:de:cd:bd:9d:5b:ea:29: 9d:05:a0:3f:e5:e6:6b:19:e4:7d:32:78:43:8f:66:29:41:9f: ef:82:82:78:12:98:db:42:3e:a2:ca:33:f6:4c:19:ec:81:61: 49:20:78:b1:3f:9e:79:da:5c:42:be:bc:c5:8d:93:97:42:88: 5c:ac:fe:15:6c:6e:ab:8c:0c:ff:2a:2b:b6:bb:42:0a:88:d3: b4:f6:47:56:31:9c:79:cf:8f:4b:1b:61:bf:fd:82:50:9e:46: 26:69:b9:2c:35:f6:98:98:10:32:52:b4:5c:ae:a0:7a:77:9d: cc:58:37:a7:74:37:d1:70:53:dd:f1:19:c7:fd:77:e6:f0:33: 04:5d:d1:2a:a1:0e:39:98:66:ae:77:44:3c:e1:9f:4c:49:eb: 00:c9:10:26:c7:0d:99:b5:f5:a0:33:f8:95:cf:79:5a:96:95: 82:91:49:18:53:88:66:b9:5d:c2:31:77:49:ac:d7:16:55:21: cb:9b:4d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZFrm38tCghO4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OWNlNzNhNWEtNTQ0Ni00NGEzLTg4NzgtZjI5MzRlYmNiODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0OzVBTXcTsAK8R3rnJMeYtZlj/5sPPFhZsj el2IqLIq/dUTTsRyNJMsMTg6ErF27G/dWO/WMVEiN7n1k7N5KxKHIWe2B+aTaW3n cQa4xdZQrjZxLBKIIl3pmN4tN93MPlcKBT/wNJZkKlILVt13ne40qPg3uvhWgDSV vrLsWSaOKyLpJgYC6FmKA4V/B3DUPmPy4waLJ1nlqdGW8gWdNxCThZgIccesekHE PDHnqSI4qBxkxRosQwKGlb9NTSTLZoU2QJEzfUBm+kX3CHWpjs+vwrlypyNyu6Ai +K80vMSaE1VzuLy6f+zK5x+xzwq5p3X1iT+9/cJv7Jl6rzGEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeTcTvikR/Q84WReNI6RGHB/hSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDJlYzUzOTEtMGFhOS0z MzMzLWEwYTctMDI0NGUwNGFiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOrOeGjmE6JroLaFsFZMUUc4sJIvSZ5WlVrk67dMhn2Ra8ZLYk3JFBt qqt6PyS2T7HYNtxjrd1ASTPeUHl9/PGD3s29nVvqKZ0FoD/l5msZ5H0yeEOPZilB n++CgngSmNtCPqLKM/ZMGeyBYUkgeLE/nnnaXEK+vMWNk5dCiFys/hVsbquMDP8q K7a7QgqI07T2R1YxnHnPj0sbYb/9glCeRiZpuSw19piYEDJStFyuoHp3ncxYN6d0 N9FwU93xGcf9d+bwMwRd0SqhDjmYZq53RDzhn0xJ6wDJECbHDZm19aAz+JXPeVqW lYKRSRhTiGa5XcIxd0ms1xZVIcubTYQ= -----END CERTIFICATE-----Generated at Mon Jun 30 14:43:47 2025 by rpki-client