$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa File: c5240384-7952-33e0-8cbc-af1e1a640993.roa (raw, json) Hash identifier: X7aFRw3Pk3aJAf9TtDiP9rOq6QyExhp3pNMXlQDzTgE= Subject key identifier: C5:8B:FC:17:17:65:40:6B:3D:E9:E3:E8:D1:40:4D:EB:B8:14:14:0A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB15D6041493D16C37E1F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396564 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:5d:60:41:49:3d:16:c3:7e:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=b923cc4d-d07d-4407-bb83-f5b1f580d7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3f:33:f4:75:47:ee:dd:69:5a:22:c9:9e:b9: 51:fd:2f:50:48:90:c4:6c:70:aa:b2:03:65:60:b3: b0:cd:7c:24:d3:fe:88:78:a8:f0:4c:2d:af:46:90: b4:82:5d:71:22:b6:38:17:6e:20:e9:b0:28:9b:53: 16:82:d4:57:a4:a3:a1:35:82:9f:a1:86:08:8d:7c: 63:40:e4:ec:25:7c:88:e7:45:e1:49:ec:4e:ae:1d: 77:58:2c:b0:99:df:87:44:3a:43:0e:0a:50:ac:38: c3:6e:63:fd:2a:27:6e:9c:05:44:0e:2c:9f:04:63: e6:11:05:83:01:19:ff:cb:89:a6:64:19:f3:c4:a5: a2:eb:01:3b:85:9c:9e:36:04:25:4a:c0:52:f1:6c: a8:1a:3b:71:b8:6b:35:77:5f:25:a6:89:57:b8:97: 61:da:7e:c1:d0:ba:62:85:b2:5d:32:1b:e0:21:b1: b1:5d:28:36:f0:fa:60:36:ee:6e:b8:32:16:e5:c3: e1:00:a0:5d:34:cc:e7:0c:bf:89:db:c1:26:0d:a3: 6d:d7:ba:d7:19:31:34:97:c5:c6:3d:07:bc:70:e3: ff:d1:f0:87:ca:73:45:65:fe:07:80:81:f9:45:6e: 66:17:54:ed:83:ea:85:5b:59:57:8e:0c:7c:14:5a: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:FC:17:17:65:40:6B:3D:E9:E3:E8:D1:40:4D:EB:B8:14:14:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:86:a7:4d:23:43:36:f1:e0:27:6f:79:ae:3c:04:0e:57:1a: 34:49:2a:9b:6a:bd:6a:44:a8:9c:11:4e:dd:c2:d4:35:2f:9e: 75:cf:ed:f7:07:a6:ca:91:0b:9e:ff:d2:c5:ab:8c:29:75:df: d8:34:e1:24:0f:ff:9f:7e:0c:77:c1:65:59:d1:18:8e:87:70: 32:57:d4:dc:3c:99:a7:c5:32:5c:db:4f:c9:93:e8:15:c9:95: 8b:3d:10:0b:77:1c:f8:ad:5a:f6:31:12:33:2b:dd:a7:05:e7: 01:57:0c:f4:de:8d:40:8b:89:7a:48:81:31:df:d4:81:0d:e1: 0d:b6:8a:d4:6c:51:ed:d1:03:b8:c7:1f:75:10:68:56:23:ba: dc:e9:7c:fa:93:1e:58:42:48:33:f5:c6:19:2d:6d:74:b3:4a: c5:98:f2:89:60:93:26:f8:4f:8b:b7:9b:bc:56:5a:f8:35:5d: 31:4b:8c:d4:f5:3f:28:f7:04:e4:81:99:b5:db:99:fe:ce:34: bd:49:02:2d:b8:bc:e0:8f:21:e5:69:26:72:25:c6:3e:fb:a2: df:cf:a2:c6:5f:4c:83:25:16:dd:3c:46:0a:d8:8f:f1:1c:c8: c7:35:83:c1:96:4a:64:38:3d:ae:c7:68:f0:55:d0:92:ea:22: d2:eb:19:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsV1gQUk9FsN+H0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YjkyM2NjNGQtZDA3ZC00NDA3LWJiODMtZjViMWY1ODBkN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT8z9HVH7t1pWiLJnrlR/S9QSJDEbHCqsgNl YLOwzXwk0/6IeKjwTC2vRpC0gl1xIrY4F24g6bAom1MWgtRXpKOhNYKfoYYIjXxj QOTsJXyI50XhSexOrh13WCywmd+HRDpDDgpQrDjDbmP9KidunAVEDiyfBGPmEQWD ARn/y4mmZBnzxKWi6wE7hZyeNgQlSsBS8WyoGjtxuGs1d18lpolXuJdh2n7B0Lpi hbJdMhvgIbGxXSg28PpgNu5uuDIW5cPhAKBdNMznDL+J28EmDaNt17rXGTE0l8XG PQe8cOP/0fCHynNFZf4HgIH5RW5mF1Ttg+qFW1lXjgx8FFrKfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWL/BcXZUBrPenj6NFATeu4FBQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzUyNDAzODQtNzk1Mi0z M2UwLThjYmMtYWYxZTFhNjQwOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyGp00jQzbx4Cdvea48BA5XGjRJKptqvWpEqJwRTt3C1DUvnnXP7fcH psqRC57/0sWrjCl139g04SQP/59+DHfBZVnRGI6HcDJX1Nw8mafFMlzbT8mT6BXJ lYs9EAt3HPitWvYxEjMr3acF5wFXDPTejUCLiXpIgTHf1IEN4Q22itRsUe3RA7jH H3UQaFYjutzpfPqTHlhCSDP1xhktbXSzSsWY8olgkyb4T4u3m7xWWvg1XTFLjNT1 Pyj3BOSBmbXbmf7ONL1JAi24vOCPIeVpJnIlxj77ot/PosZfTIMlFt08RgrYj/Ec yMc1g8GWSmQ4Pa7HaPBV0JLqItLrGd8= -----END CERTIFICATE-----Generated at Thu May 1 05:05:08 2025 by rpki-client