$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa File: 7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa (raw, json) Hash identifier: 8QAl4KPE4QxTDp06KSKFM5Fq5/AS/D3L1ooy3ToSoNo= Subject key identifier: B8:58:93:0C:F9:4C:6E:C3:62:C8:9E:CB:F3:60:7E:75:F0:F4:81:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB1580663F542ABCD84D880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396580 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:58:06:63:f5:42:ab:cd:84:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=de8e2462-b3d4-4bef-8ca4-83e8f2ae5e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:14:60:0a:7b:48:41:c5:6a:40:a1:8b:0f: c8:55:17:6b:54:e1:7e:16:81:0a:3b:88:f9:5a:14: 91:e9:d9:95:a1:ba:c9:a7:3c:33:28:e3:8f:d1:b0: df:92:a6:e3:82:03:a7:a1:1c:a1:d9:62:9d:8f:f7: d3:f0:5f:1e:56:8f:39:30:6b:48:67:53:de:b9:d8: eb:5e:3b:da:62:d8:6b:fc:a5:13:f9:24:ce:9d:1f: ea:2f:8f:fd:fb:a3:ad:ec:14:45:7d:18:5f:4c:44: fa:68:59:f9:74:28:df:35:80:b0:23:eb:0d:9b:7d: b5:fe:1f:7f:30:75:51:02:85:54:ff:ed:9b:d5:c4: 9a:24:44:d4:11:87:97:12:22:df:1e:ac:34:c1:e4: f6:6e:d2:2e:92:ae:f9:2e:78:6e:1b:08:16:57:84: bd:a7:b7:a8:e5:46:44:82:2c:65:91:02:49:1f:86: dd:53:e1:44:47:58:47:56:44:a2:03:e6:07:75:e9: 87:9c:a3:43:ec:fe:5e:c8:2c:0d:1a:d4:11:d5:92: 11:dc:74:b2:fb:40:f7:0d:1a:f3:4b:99:1f:86:9a: e1:90:90:8b:37:9d:95:47:90:23:8e:78:1d:94:db: 8b:9e:bc:61:58:5a:44:84:f9:50:0b:b2:70:1f:01: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:58:93:0C:F9:4C:6E:C3:62:C8:9E:CB:F3:60:7E:75:F0:F4:81:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c8:05:b6:90:b1:ec:a1:e2:14:ba:6e:72:64:be:3b:54:4f: 92:50:4e:bc:37:e6:5d:62:29:d0:33:47:80:13:57:5e:a0:b5: 60:d9:49:c6:d2:9b:02:49:ff:59:3a:b1:bf:98:c9:9a:25:52: 5f:94:22:b3:6c:f4:15:13:bb:cb:d9:52:d8:7c:e9:a2:57:38: 73:72:cf:b2:25:1a:60:fc:6c:bc:25:a3:6a:ce:19:2b:a4:f5: 3c:8b:e4:96:35:cf:64:2d:15:28:80:f3:d3:cb:bb:e3:e6:bc: 7d:67:42:dc:55:05:01:4a:1a:f0:1f:42:32:b4:0e:e7:8e:20: 77:6a:5f:eb:cf:e0:23:f3:12:66:d2:a6:dd:97:da:6b:25:0c: 2f:28:b3:cb:7a:32:02:d1:e3:41:7f:6d:b6:7f:ba:de:53:83: 62:b0:ad:a6:5b:0d:8b:0e:94:02:cb:fd:76:c9:b9:4b:c6:e4: d2:06:84:a2:d4:83:70:f3:76:af:04:d3:13:a4:5a:0d:89:4b: b7:2f:ce:ee:aa:f8:02:51:c7:2f:47:fb:b1:e5:ec:a0:eb:65: 40:2d:dc:7d:b5:1d:39:d0:42:ab:53:ca:b4:3f:30:57:86:b6: 77:06:e6:8b:e7:40:fc:7d:5b:6b:54:bd:8b:d4:69:d7:ec:ed: e5:cd:a7:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsVgGY/VCq82E2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZGU4ZTI0NjItYjNkNC00YmVmLThjYTQtODNlOGYyYWU1ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY8UYAp7SEHFakChiw/IVRdrVOF+FoEKO4j5 WhSR6dmVobrJpzwzKOOP0bDfkqbjggOnoRyh2WKdj/fT8F8eVo85MGtIZ1Peudjr XjvaYthr/KUT+STOnR/qL4/9+6Ot7BRFfRhfTET6aFn5dCjfNYCwI+sNm321/h9/ MHVRAoVU/+2b1cSaJETUEYeXEiLfHqw0weT2btIukq75LnhuGwgWV4S9p7eo5UZE gixlkQJJH4bdU+FER1hHVkSiA+YHdemHnKND7P5eyCwNGtQR1ZIR3HSy+0D3DRrz S5kfhprhkJCLN52VR5AjjngdlNuLnrxhWFpEhPlQC7JwHwEsDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLhYkwz5TG7DYsiey/NgfnXw9IEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzU1M2E5YzktZTBlMC0z M2Y3LWFhNjItYTY1YTE5MWYzNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+yAW2kLHsoeIUum5yZL47VE+SUE68N+ZdYinQM0eAE1deoLVg2UnG 0psCSf9ZOrG/mMmaJVJflCKzbPQVE7vL2VLYfOmiVzhzcs+yJRpg/Gy8JaNqzhkr pPU8i+SWNc9kLRUogPPTy7vj5rx9Z0LcVQUBShrwH0IytA7njiB3al/rz+Aj8xJm 0qbdl9prJQwvKLPLejIC0eNBf222f7reU4NisK2mWw2LDpQCy/12yblLxuTSBoSi 1INw83avBNMTpFoNiUu3L87uqvgCUccvR/ux5eyg62VALdx9tR050EKrU8q0PzBX hrZ3BuaL50D8fVtrVL2L1GnX7O3lzadW -----END CERTIFICATE-----Generated at Sun Apr 27 15:54:10 2025 by rpki-client