$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa File: c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa (raw, json) Hash identifier: vGydZJjvxD/zJdni3Enwo1UYZ+M2BRjBtlGivQGrn0Y= Subject key identifier: 29:EE:53:D7:AE:46:A4:DD:B2:E4:94:F0:88:92:D3:D5:71:03:FC:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB152F7DD8B13A72E5CFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396575 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:52:f7:dd:8b:13:a7:2e:5c:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=ce0c4c1a-a3a6-44de-9c6d-4eae2a9515ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:ec:6c:75:3b:46:7a:0d:28:45:88:51:d5: 2d:4a:5b:0d:74:c2:95:a6:02:e2:79:0c:0a:c2:da: 29:66:99:84:2a:d4:88:e5:ae:1d:7b:25:f2:41:9a: 7e:59:a7:92:f3:2c:dd:90:b7:35:6f:79:a5:4f:be: 21:15:38:c6:02:0b:81:15:8c:87:2a:3e:5a:88:d4: 8a:fe:c2:4f:c4:cd:36:35:3e:74:bd:27:6a:b9:a6: 5a:27:06:b7:39:b6:06:3e:b3:12:36:3e:4e:4f:40: 89:b1:5e:90:5c:f3:4e:5e:b5:f3:cb:37:1a:fc:3e: 37:b9:87:4c:dd:b8:a4:85:ab:98:6e:9a:68:79:c1: e0:41:bb:a1:fc:ae:1b:62:b9:ef:74:77:d2:87:35: 4c:48:11:19:1d:35:8a:da:9a:68:9d:d3:9e:3c:29: 1e:84:04:6b:97:54:9b:29:6b:dd:a4:93:73:49:8c: 47:be:48:47:70:8b:92:49:b6:04:15:d8:14:27:69: cc:a7:8e:07:ff:0a:44:82:61:a8:7c:80:54:d2:b7: a3:ba:a6:86:fa:aa:b9:99:fa:17:54:44:0b:f9:c4: b6:7b:a8:4a:e4:52:8b:12:1b:9c:6e:4b:16:96:74: 6b:a4:ec:c0:12:f1:d1:23:d4:a6:4c:3b:3e:ed:9c: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EE:53:D7:AE:46:A4:DD:B2:E4:94:F0:88:92:D3:D5:71:03:FC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6e:1d:0d:b6:17:92:f9:c5:44:5a:c0:ac:62:f9:73:f7:f8: 01:f8:9c:db:fa:4d:3f:ba:ca:93:96:71:c8:69:09:56:8e:50: e8:14:37:1d:60:09:80:8b:bb:fa:d3:67:cd:63:b6:92:17:bf: e6:bc:f2:f2:26:73:49:85:1a:56:dd:ef:37:94:3c:24:95:50: c7:41:3a:39:2f:f6:2b:59:37:71:15:05:d4:18:09:3b:47:3a: 8e:af:de:8f:fd:c6:ac:e7:9f:de:49:1d:99:d8:2e:a9:be:10: 27:7d:6d:04:c7:13:ef:e5:52:39:64:17:0b:c9:8a:af:9a:9a: e4:ff:77:bd:bf:26:c5:a7:f1:fd:49:99:dc:01:30:3d:73:fd: bc:38:03:c8:3b:11:d7:cf:27:75:fc:9a:b2:8c:2e:4e:04:03: 3b:eb:2e:74:0a:0a:3c:14:5c:7e:8e:aa:5a:5b:44:49:86:1d: 37:0f:a1:bc:01:78:8f:71:03:47:78:34:e1:1e:8f:f4:96:3c: 85:dc:4a:ed:28:2f:5a:ed:96:67:7d:1c:7d:b7:f9:de:84:d1: b5:ba:4d:69:eb:03:ff:e0:a3:5e:bf:36:59:d2:b2:26:3f:6f: 16:b7:10:09:5f:ce:63:59:bc:f1:54:fc:fa:4c:f5:78:5f:f8: a5:23:80:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsVL33YsTpy5c/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk Y2UwYzRjMWEtYTNhNi00NGRlLTljNmQtNGVhZTJhOTUxNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoTsbHU7RnoNKEWIUdUtSlsNdMKVpgLieQwK wtopZpmEKtSI5a4deyXyQZp+WaeS8yzdkLc1b3mlT74hFTjGAguBFYyHKj5aiNSK /sJPxM02NT50vSdquaZaJwa3ObYGPrMSNj5OT0CJsV6QXPNOXrXzyzca/D43uYdM 3bikhauYbppoecHgQbuh/K4bYrnvdHfShzVMSBEZHTWK2ppondOePCkehARrl1Sb KWvdpJNzSYxHvkhHcIuSSbYEFdgUJ2nMp44H/wpEgmGofIBU0rejuqaG+qq5mfoX VEQL+cS2e6hK5FKLEhucbksWlnRrpOzAEvHRI9SmTDs+7ZwuVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCnuU9euRqTdsuSU8IiS09VxA/yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzBjY2YyYjktNDQyMy0z N2E5LTg5NzYtODQ3MWFhNTM1M2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANbh0NtheS+cVEWsCsYvlz9/gB+Jzb+k0/usqTlnHIaQlWjlDoFDcd YAmAi7v602fNY7aSF7/mvPLyJnNJhRpW3e83lDwklVDHQTo5L/YrWTdxFQXUGAk7 RzqOr96P/cas55/eSR2Z2C6pvhAnfW0ExxPv5VI5ZBcLyYqvmprk/3e9vybFp/H9 SZncATA9c/28OAPIOxHXzyd1/JqyjC5OBAM76y50Cgo8FFx+jqpaW0RJhh03D6G8 AXiPcQNHeDThHo/0ljyF3ErtKC9a7ZZnfRx9t/nehNG1uk1p6wP/4KNevzZZ0rIm P28WtxAJX85jWbzxVPz6TPV4X/ilI4DG -----END CERTIFICATE-----Generated at Sun Apr 27 16:29:43 2025 by rpki-client