$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa File: 4050cd37-50dd-3734-94b9-05180dcca1b1.roa (raw, json) Hash identifier: 41AvMibhzifnFLJrs5WLvv3CkNrPWYQHrh584dqKLyI= Subject key identifier: D2:E4:AD:0F:54:26:F6:78:00:45:0E:95:CD:0A:97:34:C8:80:C5:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB148ED379803966D207D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396555 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:48:ed:37:98:03:96:6d:20:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=661d5c9d-0cef-4bea-a7ee-eb0d45515431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:9f:f2:c3:98:1b:ba:05:65:05:44:d2:ea: f6:e6:da:e2:73:94:47:c4:84:cc:65:ae:3b:d9:f1: 81:93:cc:fd:5e:6f:e0:cb:d5:f9:f9:0f:8f:41:d4: 06:75:07:ee:27:d8:ac:3d:c0:58:b7:81:dc:72:b0: f4:4e:02:4c:fb:eb:d6:1e:6d:3e:6d:9e:fc:f4:b0: b0:89:0a:2b:86:93:c2:26:1c:77:34:2a:7a:2d:2b: 93:3e:3f:82:ad:ad:da:ac:52:e3:f1:44:2c:8e:0f: d4:2e:b3:eb:ff:71:51:40:2e:35:ef:ad:47:40:ae: 8c:21:a9:93:24:c0:de:a9:51:2d:9f:13:14:e8:2c: 55:7c:ba:7c:ff:16:7d:99:dc:5e:d8:9f:96:76:d0: a6:99:08:31:4c:dd:50:1b:43:40:da:58:85:d2:05: 95:78:79:13:4b:74:12:9a:f2:5e:51:a2:22:d3:cb: a2:78:42:6d:d4:ce:b7:d6:65:3d:0a:cb:b4:82:fe: c7:94:fc:5a:c0:f1:95:9c:1a:29:ce:bc:8c:a2:3a: da:b0:ec:51:ad:57:15:76:8c:c7:71:98:9d:33:61: e3:9d:12:17:6c:da:33:b2:9e:e9:b3:97:9d:d8:19: a2:2f:5e:c6:0d:3d:26:be:5e:56:15:47:d4:60:5c: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E4:AD:0F:54:26:F6:78:00:45:0E:95:CD:0A:97:34:C8:80:C5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c2:d9:9c:85:ce:b4:e8:10:b5:16:97:0a:35:41:d1:00:7e: 03:6a:91:b4:a9:76:b9:2f:fa:7b:7d:93:83:58:2c:26:ac:59: f8:5c:68:2a:12:ae:a2:cd:8e:0b:cd:91:ef:93:f1:56:6a:68: 28:c1:ca:ca:2f:06:14:70:e8:3b:9e:f8:ab:7c:94:36:f7:f1: cb:df:a9:23:a1:48:90:61:fb:31:e3:c4:ab:a9:b5:db:23:48: 0d:de:0d:bd:66:b1:14:fa:60:77:64:0d:a7:2d:b8:72:6c:55: ec:32:f2:3e:23:22:5b:76:db:aa:7b:b3:bb:89:a4:4d:ab:b9: fe:6a:bf:ea:48:d2:9e:55:1a:0d:0b:4d:82:88:91:60:5c:cf: cb:33:cb:9c:f9:61:65:c5:77:b7:7a:b2:18:5e:a7:69:9f:3a: 28:e1:ab:ae:63:33:e5:09:6b:ad:c1:cf:5d:c2:81:f5:78:31: da:6d:7a:a1:a4:f9:46:d1:1c:1a:bc:68:cb:7f:e5:bb:10:f4: 0a:79:3d:ad:67:d0:dd:8e:43:8d:cb:7b:56:bc:84:7c:77:20: 2a:07:93:a6:ed:bc:2a:31:1d:d6:11:81:9a:e8:ab:05:86:f5: d4:71:a8:8f:3b:67:99:5c:8f:8b:b1:02:6b:cf:78:23:94:8f: 24:47:0b:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsUjtN5gDlm0gfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NjYxZDVjOWQtMGNlZi00YmVhLWE3ZWUtZWIwZDQ1NTE1NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoSf8sOYG7oFZQVE0ur25tric5RHxITMZa47 2fGBk8z9Xm/gy9X5+Q+PQdQGdQfuJ9isPcBYt4HccrD0TgJM++vWHm0+bZ789LCw iQorhpPCJhx3NCp6LSuTPj+Cra3arFLj8UQsjg/ULrPr/3FRQC41761HQK6MIamT JMDeqVEtnxMU6CxVfLp8/xZ9mdxe2J+WdtCmmQgxTN1QG0NA2liF0gWVeHkTS3QS mvJeUaIi08uieEJt1M631mU9Csu0gv7HlPxawPGVnBopzryMojrasOxRrVcVdozH cZidM2HjnRIXbNozsp7ps5ed2BmiL17GDT0mvl5WFUfUYFwLLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNLkrQ9UJvZ4AEUOlc0KlzTIgMWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA1MGNkMzctNTBkZC0z NzM0LTk0YjktMDUxODBkY2NhMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUwtmchc606BC1FpcKNUHRAH4DapG0qXa5L/p7fZODWCwmrFn4XGgq Eq6izY4LzZHvk/FWamgowcrKLwYUcOg7nvirfJQ29/HL36kjoUiQYfsx48SrqbXb I0gN3g29ZrEU+mB3ZA2nLbhybFXsMvI+IyJbdtuqe7O7iaRNq7n+ar/qSNKeVRoN C02CiJFgXM/LM8uc+WFlxXe3erIYXqdpnzoo4auuYzPlCWutwc9dwoH1eDHabXqh pPlG0RwavGjLf+W7EPQKeT2tZ9DdjkONy3tWvIR8dyAqB5Om7bwqMR3WEYGa6KsF hvXUcaiPO2eZXI+LsQJrz3gjlI8kRwvC -----END CERTIFICATE-----Generated at Sat Apr 26 22:59:47 2025 by rpki-client