$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa File: afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa (raw, json) Hash identifier: lHQfz/JeTsdJv+t4HnVbrVvorr5cZRREwxuAomV9qyA= Subject key identifier: 17:DB:E1:D8:BD:96:E8:95:AD:C5:C0:92:AD:64:1A:3E:F0:F4:B8:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA7A55F293348F2C045380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 396544 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:7a:55:f2:93:34:8f:2c:04:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=a7b80319-1a66-4edd-b8b4-2f2ca932b187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:78:cc:2c:56:ac:a7:31:44:8c:85:82:c3: 1b:8d:80:04:4a:75:70:09:64:c7:db:88:d8:e7:e2: 2a:4a:0b:75:1d:d1:47:ac:86:12:29:e3:af:6d:a2: db:0b:f7:d1:91:6a:7f:72:a0:f4:1e:a6:df:b9:85: 78:62:77:23:15:1a:54:5c:38:35:31:53:8c:6d:9a: e3:01:d0:21:0d:8d:16:48:8b:92:4e:7a:57:4a:be: 3d:ad:e4:ff:95:a2:5a:34:a1:ae:93:97:2b:ab:b9: 0e:e9:55:6e:68:75:e9:0e:6a:a8:08:bb:ce:57:a2: ad:da:d2:9d:94:77:ad:7c:b4:31:70:61:34:5c:38: a2:66:4b:92:b1:50:ad:3a:9d:31:5e:26:0d:ad:bb: d7:ab:fe:61:54:45:da:ff:ee:f9:b3:2d:62:82:8b: c4:ba:1c:99:0a:59:14:d4:e8:d1:6d:53:aa:49:48: d1:ce:08:cd:9a:c0:6e:eb:f9:56:3a:1a:fa:45:2c: 29:8d:74:6f:a6:2b:c4:7d:9f:55:96:34:f5:e3:f3: 59:f2:01:8e:25:ea:68:cd:4e:75:e7:3f:ae:8b:c5: fb:ff:0b:74:ad:60:ef:bb:9c:ea:5c:72:19:ac:9f: 97:1c:65:f7:2d:52:0f:36:20:66:42:2e:41:f0:e1: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DB:E1:D8:BD:96:E8:95:AD:C5:C0:92:AD:64:1A:3E:F0:F4:B8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:66:c0:d7:d3:2c:76:d3:40:c1:b6:89:d9:1c:9d:f9:04:b3: 74:f4:c2:c3:ad:90:19:3b:8c:c1:cc:cb:e5:c3:65:d9:98:bb: b0:f1:f8:d4:13:15:ba:c6:58:80:95:81:2f:23:a2:78:0c:40: 25:18:5e:31:3e:59:2a:2f:e2:62:4c:2b:d5:6a:bf:77:6f:df: 5e:3b:5d:d2:b1:81:f4:be:4b:57:e7:f2:3a:de:6a:58:8b:66: d4:8b:a6:fa:29:52:e8:e9:30:42:b5:b0:7a:47:b6:9c:4d:83: 42:51:45:2b:54:29:80:1c:16:72:b5:86:2f:f8:cf:17:a7:c2: e0:df:64:c5:43:f9:20:fe:46:45:c6:0c:12:41:03:5d:7a:dc: 07:d8:f6:57:08:9e:c1:7b:17:f9:a2:7f:5b:1a:9a:f8:9f:0e: 7b:94:1f:0f:ca:b9:15:1c:ae:46:72:21:df:94:31:22:e8:ed: 09:3b:54:ff:4a:44:19:70:0a:89:57:8c:81:34:86:bc:56:ef: 37:b6:28:21:37:77:e7:c6:fa:8e:0b:ad:51:c4:c5:d2:8a:78: 78:1c:b1:5b:fc:3d:fa:f8:c9:bf:2e:ec:28:ff:de:19:f9:c3: 59:0c:36:b8:10:42:5c:cb:b1:71:ea:49:f3:3d:89:a6:5e:5f: a6:f7:be:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6npV8pM0jywEU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk YTdiODAzMTktMWE2Ni00ZWRkLWI4YjQtMmYyY2E5MzJiMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzol4zCxWrKcxRIyFgsMbjYAESnVwCWTH24jY 5+IqSgt1HdFHrIYSKeOvbaLbC/fRkWp/cqD0HqbfuYV4YncjFRpUXDg1MVOMbZrj AdAhDY0WSIuSTnpXSr49reT/laJaNKGuk5crq7kO6VVuaHXpDmqoCLvOV6Kt2tKd lHetfLQxcGE0XDiiZkuSsVCtOp0xXiYNrbvXq/5hVEXa/+75sy1igovEuhyZClkU 1OjRbVOqSUjRzgjNmsBu6/lWOhr6RSwpjXRvpivEfZ9VljT14/NZ8gGOJepozU51 5z+ui8X7/wt0rWDvu5zqXHIZrJ+XHGX3LVIPNiBmQi5B8OFjFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfb4di9luiVrcXAkq1kGj7w9LjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZkNGYyYTQtY2I4OC0z NTcxLTlkYjUtMDgzN2FjMzI0YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdmwNfTLHbTQMG2idkcnfkEs3T0wsOtkBk7jMHMy+XDZdmYu7Dx+NQT FbrGWICVgS8jongMQCUYXjE+WSov4mJMK9Vqv3dv3147XdKxgfS+S1fn8jrealiL ZtSLpvopUujpMEK1sHpHtpxNg0JRRStUKYAcFnK1hi/4zxenwuDfZMVD+SD+RkXG DBJBA1163AfY9lcInsF7F/mif1samvifDnuUHw/KuRUcrkZyId+UMSLo7Qk7VP9K RBlwColXjIE0hrxW7ze2KCE3d+fG+o4LrVHExdKKeHgcsVv8Pfr4yb8u7Cj/3hn5 w1kMNrgQQlzLsXHqSfM9iaZeX6b3vkE= -----END CERTIFICATE-----Generated at Wed Jun 18 02:27:58 2025 by rpki-client