$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa File: bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa (raw, json) Hash identifier: p1fJlaA7Q66t4XuWWeKWcHfi+UeWyXRcA1SyFCKmI4I= Subject key identifier: 0D:EF:56:68:C1:E9:97:87:A6:ED:92:5E:BD:C2:55:C7:61:B4:0A:90 Certificate issuer: /CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Certificate serial: 010D0C9F43285848BBBB78A802256B6D8B903440 Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 26157 IP address blocks: 207.174.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:78:a8:02:25:6b:6d:8b:90:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=86e0b765-8351-4ddd-9879-b7bd9a376912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:eb:d7:1a:4c:db:87:dc:9a:88:7f:c6:bb: ab:c3:a9:3c:d9:12:c2:c6:4a:41:a1:b3:a3:7c:bc: 0c:05:9e:c3:72:0b:a5:22:3e:cd:5b:48:70:d9:67: 60:ae:c4:be:00:ba:65:8a:38:1f:32:b1:c6:61:81: fa:0a:99:1b:39:53:ea:71:68:b9:b3:75:69:7a:59: 79:9c:a0:47:0a:13:8b:69:75:a1:16:d6:9d:7f:81: 4a:63:e5:db:4f:5b:4c:5b:8c:29:b8:46:8f:4f:70: 54:81:57:39:3b:e7:65:3b:2e:92:6c:da:44:63:11: 07:46:c9:3a:e6:f2:49:a5:85:b5:cc:b4:e6:97:c8: 0a:b7:73:a6:b4:32:c5:38:d7:b6:2e:d5:67:6d:d2: c8:50:ce:68:dc:66:53:7c:19:6a:64:0b:97:ac:95: dc:cf:3a:68:db:38:aa:05:53:0f:7c:23:e0:1d:85: 08:51:ca:6c:7f:b2:b7:cd:f7:64:ec:d4:bf:3a:31: 51:41:80:fd:b2:de:8f:eb:e9:ad:7a:81:4f:f3:54: 53:a5:88:3e:60:49:3c:31:78:4f:97:73:f5:e4:a2: 3b:e2:82:03:92:59:41:8d:30:a3:20:31:83:f9:a6: db:0e:2f:9d:ab:dc:77:a7:a3:66:8d:ca:e8:30:fd: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EF:56:68:C1:E9:97:87:A6:ED:92:5E:BD:C2:55:C7:61:B4:0A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl X509v3 Authority Key Identifier: keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer sbgp-ipAddrBlock: critical IPv4: 207.174.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f7:e1:1b:49:58:71:61:0b:57:dc:27:42:ab:bd:00:3c:e3: 9e:07:7c:7d:38:9a:d0:3a:bb:e8:78:8a:00:65:72:cb:80:7d: 28:80:be:e8:1a:de:ae:e7:16:b7:09:8c:36:95:cb:a2:34:8e: 20:2e:cf:03:3c:d8:cc:45:ee:30:6f:20:c8:97:e5:4d:51:d9: 0d:77:96:ab:7b:e0:fb:81:42:78:95:81:e6:96:37:72:1f:c9: 56:c8:92:8a:f1:06:f6:bb:1d:7a:1d:86:be:f3:33:b1:81:c4: e9:38:45:e9:8a:72:1f:1b:48:e1:e5:0a:83:79:50:5b:0a:16: bb:01:2f:b5:b3:27:55:d2:82:df:f7:f0:5b:93:f3:32:54:63: d0:f8:b7:0d:73:28:1f:6c:89:8b:27:5e:75:c3:cd:c6:ac:5b: 60:c4:43:38:04:7d:58:17:48:35:13:1b:9d:dc:4d:71:ed:01: a1:60:fb:5d:63:32:af:07:56:f5:a8:85:82:be:c2:d4:02:1c: ae:12:bb:7b:ef:77:2d:55:a5:d0:51:56:ec:b8:22:f4:87:aa: 76:98:78:09:62:33:34:2c:b4:c4:96:72:9b:74:f1:24:5b:8b: 55:44:df:3a:9e:ab:0d:ba:fc:31:51:2a:06:d1:f7:9a:94:e4: 01:51:d5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3ioAiVrbYuQNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0MmNkMWUtMTM1MC00MWQ1LWExNGUtNTFiZGRiNTJj MzM2MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ODZlMGI3NjUtODM1MS00ZGRkLTk4NzktYjdiZDlhMzc2OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/r1xpM24fcmoh/xrurw6k82RLCxkpBobOj fLwMBZ7DcgulIj7NW0hw2WdgrsS+ALplijgfMrHGYYH6CpkbOVPqcWi5s3Vpell5 nKBHChOLaXWhFtadf4FKY+XbT1tMW4wpuEaPT3BUgVc5O+dlOy6SbNpEYxEHRsk6 5vJJpYW1zLTml8gKt3OmtDLFONe2LtVnbdLIUM5o3GZTfBlqZAuXrJXczzpo2ziq BVMPfCPgHYUIUcpsf7K3zfdk7NS/OjFRQYD9st6P6+mteoFP81RTpYg+YEk8MXhP l3P15KI74oIDkllBjTCjIDGD+abbDi+dq9x3p6NmjcroMP3TewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3vVmjB6ZeHpu2SXr3CVcdhtAqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wOTQy Y2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJkZGI1MmMzMzYvYmNhNWFhMjAtMGFiOS0z MzE1LThkOTctZjJlZDUwMzM2OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDk0MmNkMWUtMTM1MC00MWQ1LWEx NGUtNTFiZGRiNTJjMzM2LzA5NDJjZDFlLTEzNTAtNDFkNS1hMTRlLTUxYmRkYjUy YzMzNi5jcmwwHwYDVR0jBBgwFoAUWsdYmsqiyRvuds1T1i6jaRsQMkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wOTQyY2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJk ZGI1MmMzMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn34RtJWHFhC1fcJ0KrvQA8454HfH04mtA6u+h4igBlcsuAfSiAvuga 3q7nFrcJjDaVy6I0jiAuzwM82MxF7jBvIMiX5U1R2Q13lqt74PuBQniVgeaWN3If yVbIkorxBva7HXodhr7zM7GBxOk4RemKch8bSOHlCoN5UFsKFrsBL7WzJ1XSgt/3 8FuT8zJUY9D4tw1zKB9siYsnXnXDzcasW2DEQzgEfVgXSDUTG53cTXHtAaFg+11j Mq8HVvWohYK+wtQCHK4Su3vvdy1VpdBRVuy4IvSHqnaYeAliMzQstMSWcpt08SRb i1VE3zqeqw26/DFRKgbR95qU5AFR1UQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:27:33 2025 by rpki-client