$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa File: da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa (raw, json) Hash identifier: zTqNLLvmQqQYo+B/+jed08Ak01i06i42+XAR4Nw+hEg= Subject key identifier: C8:8B:43:FA:CA:75:E0:4E:42:23:B0:8B:21:70:C5:E8:01:BE:CE:19 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F43285848DA70F8C8785CA0D61D6CD020 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 27446 IP address blocks: 72.250.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f8:c8:78:5c:a0:d6:1d:6c:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=034882c8-f42f-4fa6-811a-ab5ff312649d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:92:fd:f0:ec:c8:fb:9b:36:5b:0e:bb:3f: 2f:9c:20:8c:9a:c1:d2:49:72:e4:21:74:eb:30:16: 9b:7f:3e:67:89:da:d5:54:e9:59:81:e3:ce:09:a0: 17:35:5e:c6:1d:0a:58:d3:aa:95:69:d4:e0:b7:a8: 25:2f:54:59:d7:45:f8:af:71:90:79:4a:79:b5:c5: d1:37:09:e7:12:7a:26:37:2a:fb:39:16:f3:f6:37: 11:39:60:1f:e5:03:cf:ed:56:c0:25:b3:63:ed:b2: 44:50:c7:5c:49:b5:84:6c:5c:37:30:d8:d9:92:f4: c9:c8:f8:a2:6f:92:67:7a:07:91:d5:fa:ce:4d:87: 83:3a:1a:c3:cf:6f:28:d2:ce:6a:31:e0:5d:8d:91: fc:ed:8f:ed:1d:b5:20:4e:68:d6:eb:6d:ef:ca:02: 21:3c:ae:38:4f:a3:ef:44:21:53:ee:2f:91:9c:54: ef:2d:25:66:8a:10:1a:61:3b:72:91:53:fa:8e:a0: c2:f8:c8:61:0f:c8:26:b5:08:62:32:25:9a:1e:00: c0:e1:89:74:c4:e3:a5:fd:59:b7:ab:9a:1a:88:67: 59:6f:30:69:d9:77:1b:9d:01:cb:99:ec:cc:fa:9a: ad:1b:44:d2:d0:cf:e5:d2:76:bb:ca:8f:65:58:f6: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8B:43:FA:CA:75:E0:4E:42:23:B0:8B:21:70:C5:E8:01:BE:CE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:24:8a:eb:ed:19:62:a3:97:cb:76:73:4d:f5:07:0c:9d:c7: 57:d0:7f:3f:e8:88:df:76:d0:59:32:23:79:0c:70:61:25:30: e7:99:83:ff:9f:5d:2b:1b:55:04:08:13:76:5d:7c:a7:13:a1: e2:4d:83:d4:74:c8:bf:35:13:0e:d6:7a:41:f7:c9:ed:cc:b5: 90:aa:8d:3a:3d:d3:40:fc:c2:e8:23:27:2b:26:47:8a:59:af: cd:84:05:a9:bc:4c:3e:6c:f8:e7:14:4c:06:a2:f1:6d:c6:27: 5b:a3:34:5b:eb:02:7a:c7:45:f3:30:69:a8:7b:99:df:53:2f: d2:b9:54:ea:7f:02:23:5a:dc:a4:ed:7c:b1:65:70:88:e0:48: 8d:57:b3:95:38:51:ae:7e:81:8f:a1:5a:f0:55:9f:0d:e7:27: 74:2b:02:f2:c4:61:87:c0:9d:8f:43:85:64:4b:24:20:cc:aa: 84:ef:0b:f0:de:83:97:d6:a8:ce:6a:73:f8:c5:5a:e4:d7:a7: 76:2f:ad:7b:94:5a:96:61:20:1b:28:06:29:cb:92:61:ac:0b: 97:3e:ef:44:e8:f5:6f:d9:ad:67:cb:f7:cd:c4:92:de:7f:d3: 4b:b1:a2:96:12:87:c4:ed:0b:a4:4d:5c:4b:0c:06:74:1a:27: 66:47:51:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPjIeFyg1h1s0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MDM0ODgyYzgtZjQyZi00ZmE2LTgxMWEtYWI1ZmYzMTI2NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSaS/fDsyPubNlsOuz8vnCCMmsHSSXLkIXTr MBabfz5nidrVVOlZgePOCaAXNV7GHQpY06qVadTgt6glL1RZ10X4r3GQeUp5tcXR NwnnEnomNyr7ORbz9jcROWAf5QPP7VbAJbNj7bJEUMdcSbWEbFw3MNjZkvTJyPii b5JnegeR1frOTYeDOhrDz28o0s5qMeBdjZH87Y/tHbUgTmjW623vygIhPK44T6Pv RCFT7i+RnFTvLSVmihAaYTtykVP6jqDC+MhhD8gmtQhiMiWaHgDA4Yl0xOOl/Vm3 q5oaiGdZbzBp2XcbnQHLmezM+pqtG0TS0M/l0na7yo9lWPYY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiLQ/rKdeBOQiOwiyFwxegBvs4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZGEzOWNmYmEtYjFhMy0z OWNmLThlN2YtNGJkMWY3MzE1NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwkiuvtGWKjl8t2c031Bwydx1fQfz/oiN920FkyI3kMcGElMOeZg/+f XSsbVQQIE3ZdfKcToeJNg9R0yL81Ew7WekH3ye3MtZCqjTo900D8wugjJysmR4pZ r82EBam8TD5s+OcUTAai8W3GJ1ujNFvrAnrHRfMwaah7md9TL9K5VOp/AiNa3KTt fLFlcIjgSI1Xs5U4Ua5+gY+hWvBVnw3nJ3QrAvLEYYfAnY9DhWRLJCDMqoTvC/De g5fWqM5qc/jFWuTXp3YvrXuUWpZhIBsoBinLkmGsC5c+70To9W/ZrWfL983Ekt5/ 00uxopYSh8TtC6RNXEsMBnQaJ2ZHUdM= -----END CERTIFICATE-----Generated at Wed Apr 16 16:54:33 2025 by rpki-client