$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64e67900-69fc-3e59-ad02-7dacc9d2e915.roa File: 64e67900-69fc-3e59-ad02-7dacc9d2e915.roa (raw, json) Hash identifier: /uKuP0nzmJemSRrsnkZ5UIvhRjfUHGsWkyZbbHhO/eM= Subject key identifier: 74:E4:BC:60:1F:37:AB:67:F4:92:50:27:4F:DD:C1:45:46:39:77:75 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA72180E6B381B9ED8E79C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64e67900-69fc-3e59-ad02-7dacc9d2e915.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 21313 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:72:18:0e:6b:38:1b:9e:d8:e7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=034e8d19-54d1-42d0-b0cb-c5f6ec8b529c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:7a:53:99:87:8c:17:5c:4b:a7:f6:11:3a: 35:8d:eb:3a:ce:28:56:9b:be:f6:06:fa:e0:15:2a: 22:2e:88:19:86:6b:53:a6:cc:56:b7:56:86:62:34: fc:b5:66:b5:69:3f:18:fa:65:15:a3:4f:40:a8:e4: 85:58:56:e0:da:01:9d:e3:22:52:4b:f3:73:c1:34: 3c:c1:a9:64:a4:40:05:94:53:83:54:4c:4b:b2:d1: 7b:a5:bd:30:2e:87:34:b6:8a:9e:a3:d4:9f:bb:58: c2:38:c1:db:13:ba:6a:dc:b6:f2:14:8b:e8:d9:45: b2:4e:a4:cd:66:ad:cd:0c:6d:f1:a0:b4:7f:91:4f: cf:00:c1:49:97:91:ea:82:a6:59:e3:98:e7:e1:08: aa:ad:70:4f:cc:16:6f:6f:d2:cf:30:d6:71:68:be: ee:79:16:c1:ab:b0:67:0d:b1:5a:cc:53:30:04:c4: 44:b4:25:2a:ad:be:b9:a7:07:d2:5d:22:8a:da:98: 2a:86:fc:e5:70:fe:13:ab:23:63:73:26:07:e4:55: ea:81:c5:92:c7:a0:db:da:12:22:0c:09:e0:ed:82: 23:25:37:78:1d:b5:12:8c:71:30:95:32:73:60:7e: 6e:bc:65:86:fe:f2:b9:03:d9:ef:80:ff:b7:6f:4b: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E4:BC:60:1F:37:AB:67:F4:92:50:27:4F:DD:C1:45:46:39:77:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64e67900-69fc-3e59-ad02-7dacc9d2e915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:49:92:8e:16:67:f4:26:8c:c1:92:fe:b8:02:71:3e:ee:4a: 9c:58:c1:55:40:91:34:e4:e3:be:f7:4c:9b:6f:6c:88:3a:41: 94:7c:e7:44:5c:c0:2d:42:ea:cd:23:65:90:4c:bc:f7:11:8d: 8a:e9:e6:b1:0c:69:e0:80:35:15:4d:0e:cc:f6:e8:dd:9f:c2: e1:ae:aa:bc:4f:b1:b4:e9:04:fa:81:d0:a5:8e:a7:a1:cd:e9: 5d:34:42:6f:f3:4e:26:e7:2b:08:53:a3:a3:dd:1e:e4:19:dd: cf:66:a8:15:24:6d:05:03:33:48:b8:dc:3d:1d:a5:80:f0:40: fb:7f:7d:38:b0:53:cd:d5:35:48:e9:75:75:e9:99:94:8c:17: 5f:0d:45:6e:21:b7:85:de:70:4a:01:dd:c4:e6:1c:36:4d:cd: d7:95:25:b2:47:de:e7:ae:29:e9:9e:73:e7:4f:5f:6e:de:9e: 98:fe:94:11:5d:41:29:06:c3:5c:cb:52:90:1a:bc:1a:49:83: c0:a6:8c:70:00:21:8c:89:7f:3d:86:ec:3f:9c:40:71:d4:31: 0d:42:d2:da:44:47:df:a3:04:d6:b4:ef:72:76:2c:d4:85:9f: cc:6a:6e:76:f4:de:91:10:73:90:e2:23:1c:93:56:75:36:c4: dd:91:e6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6nIYDms4G57Y55wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MDM0ZThkMTktNTRkMS00MmQwLWIwY2ItYzVmNmVjOGI1MjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUB6U5mHjBdcS6f2ETo1jes6zihWm772Bvrg FSoiLogZhmtTpsxWt1aGYjT8tWa1aT8Y+mUVo09AqOSFWFbg2gGd4yJSS/NzwTQ8 walkpEAFlFODVExLstF7pb0wLoc0toqeo9Sfu1jCOMHbE7pq3LbyFIvo2UWyTqTN Zq3NDG3xoLR/kU/PAMFJl5HqgqZZ45jn4QiqrXBPzBZvb9LPMNZxaL7ueRbBq7Bn DbFazFMwBMREtCUqrb65pwfSXSKK2pgqhvzlcP4TqyNjcyYH5FXqgcWSx6Db2hIi DAng7YIjJTd4HbUSjHEwlTJzYH5uvGWG/vK5A9nvgP+3b0tzxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTkvGAfN6tn9JJQJ0/dwUVGOXd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjRlNjc5MDAtNjlmYy0z ZTU5LWFkMDItN2RhY2M5ZDJlOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJJko4WZ/QmjMGS/rgCcT7uSpxYwVVAkTTk4773TJtvbIg6QZR850Rc wC1C6s0jZZBMvPcRjYrp5rEMaeCANRVNDsz26N2fwuGuqrxPsbTpBPqB0KWOp6HN 6V00Qm/zTibnKwhTo6PdHuQZ3c9mqBUkbQUDM0i43D0dpYDwQPt/fTiwU83VNUjp dXXpmZSMF18NRW4ht4XecEoB3cTmHDZNzdeVJbJH3ueuKemec+dPX27enpj+lBFd QSkGw1zLUpAavBpJg8CmjHAAIYyJfz2G7D+cQHHUMQ1C0tpER9+jBNa073J2LNSF n8xqbnb03pEQc5DiIxyTVnU2xN2R5ng= -----END CERTIFICATE-----Generated at Tue Jul 1 10:40:11 2025 by rpki-client