$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa File: 27c00e98-a122-30ab-aab2-3e653d16930e.roa (raw, json) Hash identifier: q/iHA0MxaBEY7F2sXkOes+ph2eCzpbrUYL4TFGCZx2w= Subject key identifier: 1C:D1:2E:FA:58:CB:0C:4A:C3:51:79:4C:6A:00:D4:84:49:CC:0E:A9 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F43285849F2E533DAAB68AAA6AF3A4A80 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 27446 IP address blocks: 64.147.208.0/20 maxlen: 21 64.147.208.0/24 maxlen: 24 72.27.224.0/19 maxlen: 20 72.250.224.0/19 maxlen: 20 72.250.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:33:da:ab:68:aa:a6:af:3a:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=eb9689b4-d666-4c39-bead-76b9ba0742ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:6b:25:91:87:70:0e:dc:aa:29:47:48:60: 48:5a:23:72:d2:0d:a5:c7:39:11:74:02:bc:18:57: a0:8b:a4:c9:17:65:13:79:7b:a1:6d:06:7f:ec:a7: 53:02:9d:9e:33:a6:f3:a1:53:48:69:e7:c7:d8:ef: c8:ac:f0:9b:09:24:4d:1d:b0:fe:e3:1d:51:7a:35: 2e:8d:7e:8a:94:12:a9:1d:d4:16:9b:42:90:7b:da: 39:63:b5:44:09:11:a3:ed:f2:7b:2a:31:84:34:1b: 7a:f9:3a:dc:5d:fe:21:a5:69:c5:f7:a7:71:d9:2b: 30:47:aa:7a:20:ba:9f:b8:02:74:fa:e6:52:d8:54: 38:f1:1d:b9:fa:6f:39:e3:c6:e1:0e:a1:0b:02:67: fe:8f:79:a9:70:ab:3a:cb:49:71:c0:3e:75:7b:6d: 34:e0:90:34:41:64:81:50:18:44:79:12:a2:28:69: dd:56:fa:1b:85:ef:51:05:1d:e7:d5:e6:af:60:d4: d2:f6:52:1e:28:bd:39:2c:7c:9e:82:ab:81:cb:a1: 65:f2:de:a0:7f:60:ca:04:b7:cf:63:68:d3:db:76: ed:ef:ec:66:e1:74:78:62:f0:5e:31:60:ca:1f:d2: ed:be:73:d1:12:7c:ee:5d:86:f3:16:a6:0a:b4:e9: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D1:2E:FA:58:CB:0C:4A:C3:51:79:4C:6A:00:D4:84:49:CC:0E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 64.147.208.0/20 72.27.224.0/19 72.250.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d0:34:36:68:7e:29:e0:92:fd:e2:a5:fe:cd:5f:3e:32:b9: 68:ed:b7:cb:93:7a:f4:39:b4:41:fe:77:6e:15:b0:a3:0f:89: e3:96:da:a4:cc:97:ee:13:a4:af:e1:72:1d:87:db:0b:9e:fa: f7:9d:bb:cb:dc:85:f9:74:2f:70:46:75:38:99:d3:9c:72:48: ae:a4:21:d2:b1:57:42:d7:cb:3f:34:e1:88:ab:a6:05:fe:41: cf:3c:1f:bd:f1:d2:e2:61:99:a0:dc:15:81:9c:3d:a9:78:7e: 4c:37:09:6b:cd:de:ee:11:84:5b:bc:4d:5e:b1:56:4f:b1:65: df:1d:7a:31:0e:86:3b:ac:68:1b:36:af:cd:b2:28:b0:69:02: b3:c3:8c:ca:a6:f5:3e:aa:e2:66:d3:e8:9b:0a:66:eb:f5:17: f6:cd:9b:d0:58:3f:46:8e:4f:4e:a5:6f:46:5b:9d:d0:ef:88: 49:90:4c:e8:2f:b1:59:c1:39:19:2d:ec:eb:bd:1c:56:35:32: bd:1d:7c:d8:30:dd:b3:05:f1:6a:5a:f4:03:e3:6f:b7:2c:33: cf:c3:d8:7f:8e:75:a3:ca:07:da:68:4d:bf:ce:b0:52:b2:0a: 03:53:44:c2:6d:7e:54:a0:31:31:5e:1e:29:a5:72:6d:f0:11: e5:3d:d0:94 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEny5TPaq2iqpq86SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZWI5Njg5YjQtZDY2Ni00YzM5LWJlYWQtNzZiOWJhMDc0MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRrJZGHcA7cqilHSGBIWiNy0g2lxzkRdAK8 GFegi6TJF2UTeXuhbQZ/7KdTAp2eM6bzoVNIaefH2O/IrPCbCSRNHbD+4x1RejUu jX6KlBKpHdQWm0KQe9o5Y7VECRGj7fJ7KjGENBt6+TrcXf4hpWnF96dx2SswR6p6 ILqfuAJ0+uZS2FQ48R25+m8548bhDqELAmf+j3mpcKs6y0lxwD51e2004JA0QWSB UBhEeRKiKGndVvobhe9RBR3n1eavYNTS9lIeKL05LHyegquBy6Fl8t6gf2DKBLfP Y2jT23bt7+xm4XR4YvBeMWDKH9LtvnPREnzuXYbzFqYKtOk/pwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBzRLvpYywxKw1F5TGoA1IRJzA6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMjdjMDBlOTgtYTEyMi0z MGFiLWFhYjItM2U2NTNkMTY5MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQJPQAwQF SBvgAwQFSPrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAD7QNDZofingkv3ipf7NXz4yuWjtt8uTevQ5tEH+ d24VsKMPieOW2qTMl+4TpK/hch2H2wue+vedu8vchfl0L3BGdTiZ05xySK6kIdKx V0LXyz804YirpgX+Qc88H73x0uJhmaDcFYGcPal4fkw3CWvN3u4RhFu8TV6xVk+x Zd8dejEOhjusaBs2r82yKLBpArPDjMqm9T6q4mbT6JsKZuv1F/bNm9BYP0aOT06l b0ZbndDviEmQTOgvsVnBORkt7Ou9HFY1Mr0dfNgw3bMF8Wpa9APjb7csM8/D2H+O daPKB9poTb/OsFKyCgNTRMJtflSgMTFeHimlcm3wEeU90JQ= -----END CERTIFICATE-----Generated at Tue Jun 17 11:12:57 2025 by rpki-client