$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json) Hash identifier: 5Zu/6yLMmw13BZq0Kxe1sZjAqcuBkk0QS0EwSjqWv4s= Subject key identifier: 84:CF:13:7B:31:34:B4:36:39:40:81:8F:56:7B:3B:5E:AC:11:A4:52 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584913AC1DFC7A0BEF877032A040 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 15123 IP address blocks: 72.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1d:fc:7a:0b:ef:87:70:32:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=a715aa5f-2719-4507-971e-3d50b6940fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:cf:d8:27:41:25:cb:97:16:bb:d1:14:ad: 33:99:bc:fd:7e:94:a0:c7:27:db:e8:ef:d8:33:bd: b6:2e:20:f9:e2:07:27:df:93:e4:31:f3:98:21:08: 28:60:f9:0f:68:76:f4:b3:a9:41:aa:de:45:7a:3e: ec:8d:77:a8:99:17:8c:52:b8:c7:8e:f1:02:13:b4: ba:a9:c8:c5:b6:7b:82:58:37:71:0c:dd:40:a7:89: 9f:52:58:3f:c4:25:ac:e1:9f:4a:11:98:88:6b:b9: 1b:f8:94:c8:ac:3d:85:16:45:db:dc:ac:55:c0:65: c8:b5:62:2c:fa:17:b4:0b:4e:53:70:bf:68:68:10: 98:ed:c4:f9:ea:48:45:9a:a7:88:b6:8d:34:5f:e1: 6b:ee:be:02:0c:ff:5d:43:25:32:40:a9:7c:1a:5f: 12:14:9f:d3:dd:b8:06:41:aa:6a:50:5a:7c:9e:83: 6f:18:44:b4:e8:79:ed:2e:d2:b6:78:6d:dc:de:3c: f2:e6:09:17:e1:cf:5d:43:15:22:15:9d:d2:b7:76: 13:fa:6c:12:10:fc:f7:04:53:d4:2f:e5:b7:97:6b: 00:a1:b1:9c:1f:11:29:1a:95:79:9d:25:2b:30:f9: 22:50:c5:e6:12:b6:48:a6:a1:28:e6:a4:40:9e:20: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CF:13:7B:31:34:B4:36:39:40:81:8F:56:7B:3B:5E:AC:11:A4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6e:30:34:21:66:e5:1b:9c:e0:4f:22:70:b1:ee:f1:c8:96: 93:e4:f3:dd:5f:b3:6f:7b:c7:f2:fe:55:a9:de:00:18:71:ff: c8:70:a6:ae:f3:82:6f:79:ce:cf:bf:fb:af:7a:8d:8d:b3:c3: ee:22:40:df:66:f1:95:30:67:6f:c4:85:f4:92:20:51:f3:25: 9a:ff:d9:93:e2:0a:dc:71:e5:cb:b0:56:51:7e:9f:e7:e6:f9: 14:9a:96:ea:62:1f:96:b6:66:f5:d5:d8:9c:2a:e0:61:32:44: 2d:16:1a:5c:78:95:ac:9e:5f:a8:89:29:29:d0:00:07:2c:47: 79:7b:96:d8:b7:30:01:7d:96:10:45:f5:ce:a8:18:16:0f:35: 71:d8:84:bb:04:cd:91:77:d3:af:cc:f6:f5:6d:75:d9:44:54: c1:c8:e2:66:fa:bf:6d:f6:91:38:50:7a:c9:a1:14:8b:d6:28: ca:d8:38:02:7d:10:5e:f1:2c:02:38:b7:87:27:44:e2:9f:99: 79:4f:de:2c:1a:d4:2f:63:8d:11:68:45:08:37:a9:f9:0e:ca: 59:8f:62:b8:98:f8:d8:0b:e3:9f:d5:12:eb:36:2b:18:fd:75: d4:31:a5:03:1a:04:e9:7d:0f:41:90:0c:8c:4f:ec:cd:0c:ea: f1:d5:f0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB38egvvh3AyoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YTcxNWFhNWYtMjcxOS00NTA3LTk3MWUtM2Q1MGI2OTQwZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5HP2CdBJcuXFrvRFK0zmbz9fpSgxyfb6O/Y M722LiD54gcn35PkMfOYIQgoYPkPaHb0s6lBqt5Fej7sjXeomReMUrjHjvECE7S6 qcjFtnuCWDdxDN1Ap4mfUlg/xCWs4Z9KEZiIa7kb+JTIrD2FFkXb3KxVwGXItWIs +he0C05TcL9oaBCY7cT56khFmqeIto00X+Fr7r4CDP9dQyUyQKl8Gl8SFJ/T3bgG QapqUFp8noNvGES06HntLtK2eG3c3jzy5gkX4c9dQxUiFZ3St3YT+mwSEPz3BFPU L+W3l2sAobGcHxEpGpV5nSUrMPkiUMXmErZIpqEo5qRAniB31wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITPE3sxNLQ2OUCBj1Z7O16sEaRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5uMDQhZuUbnOBPInCx7vHIlpPk891fs297x/L+VaneABhx/8hwpq7z gm95zs+/+696jY2zw+4iQN9m8ZUwZ2/EhfSSIFHzJZr/2ZPiCtxx5cuwVlF+n+fm +RSalupiH5a2ZvXV2Jwq4GEyRC0WGlx4layeX6iJKSnQAAcsR3l7lti3MAF9lhBF 9c6oGBYPNXHYhLsEzZF306/M9vVtddlEVMHI4mb6v232kThQesmhFIvWKMrYOAJ9 EF7xLAI4t4cnROKfmXlP3iwa1C9jjRFoRQg3qfkOylmPYriY+NgL45/VEus2Kxj9 ddQxpQMaBOl9D0GQDIxP7M0M6vHV8Hg= -----END CERTIFICATE-----Generated at Wed Apr 16 16:50:02 2025 by rpki-client