$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa File: 682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json) Hash identifier: 5KVLzs4lMVre4YPB9HcK1sLDScksJw9SkQa+0PQnO0g= Subject key identifier: 74:D6:B8:0B:6A:73:5D:14:43:20:6D:DF:8E:8B:CF:CA:70:FD:30:EE Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584913AC2070C520086DC70367A0 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 27446 IP address blocks: 72.250.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:20:70:c5:20:08:6d:c7:03:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=27755e3d-a645-4f5f-81e7-7be6d6b9aefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fb:0c:b8:9a:40:30:1c:d3:39:25:61:ba:9a: a0:2f:f5:d5:b1:df:b4:dc:85:6c:cb:84:ce:7d:06: 59:98:ef:06:89:ae:51:ba:9c:31:b9:ef:47:cc:4e: 4b:50:60:8e:3c:2e:c6:45:c8:5a:7a:b3:89:d9:cf: f0:96:ba:56:73:d8:95:1b:60:31:e5:7b:e7:bf:d4: 3d:55:36:08:a4:80:bf:1b:a9:1e:3e:a8:7e:bd:b1: 83:3e:e9:9d:59:95:44:be:88:e7:49:1f:98:f4:ef: ca:1f:b2:8a:54:20:69:b7:42:20:f9:c9:af:a7:87: df:d0:61:17:0a:b8:85:c3:39:a8:5a:31:da:1e:79: d9:0a:7c:aa:96:ce:01:98:7d:4a:e9:85:dc:ec:c1: 4f:42:82:84:2e:b4:57:00:cf:7b:09:e0:2a:e1:b1: 9d:c8:48:e5:f8:f6:bc:c4:c7:9e:29:1a:f5:a9:3e: 2f:41:ea:ae:20:e7:93:a0:d4:84:bd:3d:c4:a2:03: 52:35:4b:93:52:bd:f8:11:6c:ac:ee:51:0a:c5:1b: e9:97:e4:11:c1:55:4a:07:0e:83:21:5e:38:cf:59: f9:5f:d4:a8:e2:d4:13:87:e6:2b:2f:9e:39:60:38: 3e:e7:b3:cf:f2:43:b5:87:bf:fd:71:a1:b8:9d:98: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:B8:0B:6A:73:5D:14:43:20:6D:DF:8E:8B:CF:CA:70:FD:30:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:39:d0:dd:de:68:a3:4e:27:3b:0c:b8:77:f1:a3:00:2e:38: 49:da:a9:52:65:2b:ed:9c:7f:f0:bc:99:2a:b7:36:67:89:08: d0:c2:87:9e:66:47:db:2a:61:91:ce:0d:ab:a1:0b:ee:2b:6d: fa:a3:04:03:a6:2a:53:e1:20:89:ce:f6:e4:8c:e0:80:70:5c: e1:4a:07:0e:e2:f6:96:b2:8d:f1:3a:92:6c:8e:5d:fe:22:fa: 34:4e:ba:cd:a9:91:86:37:4e:42:c5:5b:3f:1c:a8:a9:bf:ef: d9:71:6c:db:5c:cd:bc:f5:0e:da:b7:c3:3a:e9:42:98:84:f3: d3:95:01:f5:4a:8c:99:45:e7:39:e7:ed:e1:26:2b:59:f1:d9: c6:67:e6:82:63:40:69:46:cf:79:38:65:e5:d0:a6:fc:7a:5a: a9:75:14:c3:38:fa:cd:90:78:35:6d:14:5c:ca:6a:93:44:9c: a7:dd:48:22:41:99:52:06:61:90:23:91:a7:25:cf:94:31:a6: 08:3c:b8:7a:d5:a0:f4:46:e1:d6:38:b8:e5:ca:36:86:b0:43: 0e:3f:2e:20:87:a8:a4:92:5b:27:a6:6b:54:7d:8b:fd:ea:06: 06:c6:50:fe:fe:7c:25:d0:31:ff:6b:c7:1e:33:42:0e:5e:91: 43:ce:aa:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCBwxSAIbccDZ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk Mjc3NTVlM2QtYTY0NS00ZjVmLTgxZTctN2JlNmQ2YjlhZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vsMuJpAMBzTOSVhupqgL/XVsd+03IVsy4TO fQZZmO8Gia5Rupwxue9HzE5LUGCOPC7GRchaerOJ2c/wlrpWc9iVG2Ax5Xvnv9Q9 VTYIpIC/G6kePqh+vbGDPumdWZVEvojnSR+Y9O/KH7KKVCBpt0Ig+cmvp4ff0GEX CriFwzmoWjHaHnnZCnyqls4BmH1K6YXc7MFPQoKELrRXAM97CeAq4bGdyEjl+Pa8 xMeeKRr1qT4vQequIOeToNSEvT3EogNSNUuTUr34EWys7lEKxRvpl+QRwVVKBw6D IV44z1n5X9So4tQTh+YrL545YDg+57PP8kO1h7/9caG4nZhktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTWuAtqc10UQyBt346Lz8pw/TDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNjgyYTNmNWEtZjg5NC0z ZWQ2LTk4MTItMDczM2VhM2YwNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk50N3eaKNOJzsMuHfxowAuOEnaqVJlK+2cf/C8mSq3NmeJCNDCh55m R9sqYZHODauhC+4rbfqjBAOmKlPhIInO9uSM4IBwXOFKBw7i9payjfE6kmyOXf4i +jROus2pkYY3TkLFWz8cqKm/79lxbNtczbz1Dtq3wzrpQpiE89OVAfVKjJlF5znn 7eEmK1nx2cZn5oJjQGlGz3k4ZeXQpvx6Wql1FMM4+s2QeDVtFFzKapNEnKfdSCJB mVIGYZAjkaclz5Qxpgg8uHrVoPRG4dY4uOXKNoawQw4/LiCHqKSSWyema1R9i/3q BgbGUP7+fCXQMf9rxx4zQg5ekUPOqtc= -----END CERTIFICATE-----Generated at Wed Apr 16 16:58:26 2025 by rpki-client