$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa File: 5601347b-9529-3996-8a0b-84e74f65897c.roa (raw, json) Hash identifier: LcMQyd8dqum+/SDnLSkjCcfLgvHl7pUIA5s4YZ0N1Oo= Subject key identifier: 5F:42:2D:BF:93:D0:08:58:2A:6C:EC:94:23:C3:47:0C:29:F8:CC:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA64EDDA287509569FF100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396612 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:64:ed:da:28:75:09:56:9f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=7d91f251-e46b-43e4-8986-9df738b3912e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:02:7b:7d:de:ef:50:3b:16:c8:a3:28:8f: 19:71:c3:17:fd:e0:38:05:a9:63:32:32:79:8c:0a: 29:f7:39:63:ac:11:a9:cc:3b:d3:51:fc:64:b4:97: c4:5d:b8:dc:13:04:36:69:f9:e7:9e:d8:42:01:1a: 90:40:91:85:17:e5:41:2c:aa:73:c6:64:b2:73:d0: 82:95:c5:8c:02:94:4e:7a:6d:8c:ed:8f:28:e8:d3: d3:9b:bc:5b:87:8d:a8:34:a3:6c:9c:ba:58:61:81: bc:8c:d3:45:1c:79:b6:2b:04:26:a3:9b:f8:d6:47: 45:53:2f:46:00:f1:84:c6:fd:9a:fd:3c:62:c7:5e: f6:87:2a:3c:b9:88:5d:c2:e9:40:79:b1:f4:cd:ec: c8:25:47:02:af:a9:de:bb:83:93:8d:1c:7d:0f:cc: 81:73:8d:e6:a7:68:de:36:d5:91:bf:a6:d4:6a:a3: 77:71:b1:cd:9e:87:b3:0d:00:e3:28:22:c8:93:55: 83:53:10:c5:8b:2a:4a:19:01:5c:55:5e:02:f1:3d: ee:a9:fb:eb:63:0a:f6:e9:4f:89:71:37:db:1b:32: e8:ac:51:2e:df:72:ab:07:00:1b:95:8a:c1:75:d1: 11:74:91:f0:35:aa:a3:81:d3:32:0a:02:b2:1f:de: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:2D:BF:93:D0:08:58:2A:6C:EC:94:23:C3:47:0C:29:F8:CC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d3:5f:9f:32:09:33:b8:f8:2e:68:e7:37:3b:64:4f:c9:00: 2d:37:66:00:92:29:5f:c9:0a:a4:ee:49:e9:90:24:7b:33:2f: ab:4a:9a:4b:f3:52:3a:d0:97:9c:7d:26:42:01:90:4e:50:12: 52:91:f5:36:a4:47:7d:34:1f:b6:c4:90:c6:22:87:d7:e0:99: d4:57:07:e4:5f:d4:ec:f8:bf:9d:bc:5a:69:7f:9d:44:f4:93: 87:de:9f:90:6c:19:8b:d1:b9:c1:83:e4:aa:87:c8:4f:67:63: c7:23:07:fb:1b:ac:b4:e9:13:b0:86:8e:17:22:9b:fc:2a:77: f3:5f:fe:a7:b9:b5:1a:8e:05:d8:e0:bb:01:cd:29:74:ef:34: 0d:a9:63:6a:a5:90:38:49:f4:b4:b8:d0:a5:03:f9:32:ee:14: 3d:9e:6f:43:b7:88:d5:90:bc:d5:cf:ef:e5:08:25:f4:90:c9: 46:df:85:c2:0f:aa:4b:4a:78:d0:23:99:b4:f5:15:81:c8:1f: 76:78:fe:16:d7:db:bf:97:f6:fc:cd:8f:a2:6a:a9:da:9c:e1: ac:f1:27:ce:2d:be:4d:a8:1b:4d:72:26:44:4f:9b:7c:d9:c9: 72:65:8a:ae:aa:5a:46:81:4a:cd:a8:55:46:6a:a5:ec:bd:48: f0:84:5a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mTt2ih1CVaf8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk N2Q5MWYyNTEtZTQ2Yi00M2U0LTg5ODYtOWRmNzM4YjM5MTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXMCe33e71A7FsijKI8ZccMX/eA4BaljMjJ5 jAop9zljrBGpzDvTUfxktJfEXbjcEwQ2afnnnthCARqQQJGFF+VBLKpzxmSyc9CC lcWMApROem2M7Y8o6NPTm7xbh42oNKNsnLpYYYG8jNNFHHm2KwQmo5v41kdFUy9G APGExv2a/Txix172hyo8uYhdwulAebH0zezIJUcCr6neu4OTjRx9D8yBc43mp2je NtWRv6bUaqN3cbHNnoezDQDjKCLIk1WDUxDFiypKGQFcVV4C8T3uqfvrYwr26U+J cTfbGzLorFEu33KrBwAblYrBddERdJHwNaqjgdMyCgKyH94iEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9CLb+T0AhYKmzslCPDRwwp+MxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTYwMTM0N2ItOTUyOS0z OTk2LThhMGItODRlNzRmNjU4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInTX58yCTO4+C5o5zc7ZE/JAC03ZgCSKV/JCqTuSemQJHszL6tKmkvz UjrQl5x9JkIBkE5QElKR9TakR300H7bEkMYih9fgmdRXB+Rf1Oz4v528Wml/nUT0 k4fen5BsGYvRucGD5KqHyE9nY8cjB/sbrLTpE7CGjhcim/wqd/Nf/qe5tRqOBdjg uwHNKXTvNA2pY2qlkDhJ9LS40KUD+TLuFD2eb0O3iNWQvNXP7+UIJfSQyUbfhcIP qktKeNAjmbT1FYHIH3Z4/hbX27+X9vzNj6Jqqdqc4azxJ84tvk2oG01yJkRPm3zZ yXJliq6qWkaBSs2oVUZqpey9SPCEWqg= -----END CERTIFICATE-----Generated at Wed Jul 2 02:01:50 2025 by rpki-client