$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2bec9340-ce1a-377f-9441-391ebed2ec3b.roa File: 2bec9340-ce1a-377f-9441-391ebed2ec3b.roa (raw, json) Hash identifier: lqVwYbGG5Z2kFPmYsOY55sxknOMslKceePqc1u/djRY= Subject key identifier: E8:01:4B:60:0C:53:3C:8C:B7:C8:27:B1:4B:68:47:1B:F6:4B:4D:D0 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285849605411FD4938840817CF2E00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2bec9340-ce1a-377f-9441-391ebed2ec3b.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 173.231.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:11:fd:49:38:84:08:17:cf:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=a3bc2433-bfec-4a15-8673-ad8855369d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:83:a6:a4:a4:4a:f5:f1:a6:2c:d9:2a:23: 6d:87:69:26:bc:03:d9:d0:00:1b:5c:6d:55:8f:47: c6:be:d4:7c:a3:66:a7:7f:d4:8f:d5:56:66:6a:93: 3d:ba:2e:ea:13:40:5f:7a:14:0b:33:fc:a0:52:2e: df:65:48:d4:b5:be:2d:32:02:fa:96:75:e7:7f:bf: 9d:4b:f3:cc:3b:02:01:27:60:20:44:0e:ea:e8:95: 72:31:65:cb:93:92:82:65:25:1c:d8:29:f6:63:68: e4:63:16:28:0a:b9:d9:68:41:32:d9:d7:96:e6:6f: f2:c4:67:15:22:ed:5a:c9:18:f1:69:51:a3:c2:9a: bc:19:80:17:ab:6b:90:4b:04:7e:c4:99:8b:6d:6c: 92:a8:8c:40:e0:43:c0:f6:74:d5:36:bd:35:8d:e4: f6:61:a8:3c:55:de:6e:d1:c7:40:63:3d:6b:86:ed: 5b:be:ea:26:09:6d:40:d9:d0:e2:4e:2e:cd:26:16: c6:9e:34:d3:b3:0f:f9:b3:74:5b:6a:b4:fd:bc:38: 03:fb:b4:46:17:d7:e9:67:ef:38:42:ea:a8:89:19: 35:94:ab:59:18:92:42:03:06:68:00:ed:04:99:20: 1a:53:bd:e1:a3:e0:f3:23:c4:b2:56:dd:10:06:c5: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:01:4B:60:0C:53:3C:8C:B7:C8:27:B1:4B:68:47:1B:F6:4B:4D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2bec9340-ce1a-377f-9441-391ebed2ec3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:80:6e:a7:b7:ec:9d:65:1c:aa:d7:5c:5a:05:bb:ec:c3:46: dd:d9:7b:3f:22:b3:55:ec:30:d6:92:2c:82:89:86:4f:19:60: 7f:6b:65:c9:55:af:81:20:bd:3c:4c:9f:8d:1f:63:52:29:13: d2:a9:03:df:38:46:ac:30:f3:b2:44:c6:6a:04:1f:5f:10:5c: df:34:55:62:a8:c9:e4:05:e3:2a:05:08:4b:be:fb:d2:33:1c: d5:5e:7e:9b:2b:d8:16:c5:72:05:e6:29:2e:c7:6c:04:ca:8a: 8f:4b:89:32:8c:a0:ee:ea:06:7f:66:61:52:61:e2:d1:2a:df: cd:bc:05:33:5e:47:fe:4d:0b:43:ee:75:6d:67:5d:f5:4d:4f: ac:d1:81:a9:0e:d8:07:c0:57:14:3f:43:f5:a1:86:d7:09:7a: 99:95:13:be:bb:2c:2f:f5:cd:3d:e3:3d:94:fa:82:46:43:37: 07:87:0a:75:af:3e:00:1d:7c:30:f2:54:36:1b:78:c6:95:e7: 7b:d0:d0:2a:c0:dc:5f:6e:5e:7a:02:55:ec:61:43:04:f2:9b: 62:07:7e:e7:ae:b0:0f:25:2b:b5:06:02:d2:82:90:69:2c:66: 99:7d:61:af:31:d1:f2:e3:a4:1a:63:52:3f:f8:8b:ec:9c:7d: 8e:d5:d5:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBH9STiECBfPLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk YTNiYzI0MzMtYmZlYy00YTE1LTg2NzMtYWQ4ODU1MzY5ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqODpqSkSvXxpizZKiNth2kmvAPZ0AAbXG1V j0fGvtR8o2anf9SP1VZmapM9ui7qE0BfehQLM/ygUi7fZUjUtb4tMgL6lnXnf7+d S/PMOwIBJ2AgRA7q6JVyMWXLk5KCZSUc2Cn2Y2jkYxYoCrnZaEEy2deW5m/yxGcV Iu1ayRjxaVGjwpq8GYAXq2uQSwR+xJmLbWySqIxA4EPA9nTVNr01jeT2Yag8Vd5u 0cdAYz1rhu1bvuomCW1A2dDiTi7NJhbGnjTTsw/5s3RbarT9vDgD+7RGF9fpZ+84 QuqoiRk1lKtZGJJCAwZoAO0EmSAaU73ho+DzI8SyVt0QBsVF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgBS2AMUzyMt8gnsUtoRxv2S03QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMmJlYzkzNDAtY2UxYS0z NzdmLTk0NDEtMzkxZWJlZDJlYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAred8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKAbqe37J1lHKrXXFoFu+zDRt3Zez8is1XsMNaSLIKJhk8ZYH9rZclV r4EgvTxMn40fY1IpE9KpA984Rqww87JExmoEH18QXN80VWKoyeQF4yoFCEu++9Iz HNVefpsr2BbFcgXmKS7HbATKio9LiTKMoO7qBn9mYVJh4tEq3828BTNeR/5NC0Pu dW1nXfVNT6zRgakO2AfAVxQ/Q/WhhtcJepmVE767LC/1zT3jPZT6gkZDNweHCnWv PgAdfDDyVDYbeMaV53vQ0CrA3F9uXnoCVexhQwTym2IHfueusA8lK7UGAtKCkGks Zpl9Ya8x0fLjpBpjUj/4i+ycfY7V1Zg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:02 2025 by rpki-client