$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa File: 682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json) Hash identifier: H1FGDedOCguriptI69yckKixIwWYN8Ld4Mi79iPU1Pg= Subject key identifier: 55:FF:FD:8A:33:EB:70:35:FD:C2:57:32:38:5F:2C:CA:5E:88:78:B4 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F43285849F2E534ED7E2FC46456EABBE0 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 27446 IP address blocks: 72.250.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:34:ed:7e:2f:c4:64:56:ea:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=9f1c4059-216f-4d9b-8adc-0f40cebcc1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:81:81:70:26:36:b1:67:cc:a8:8e:b8:62:8e: 8d:fb:86:a1:86:d1:2e:24:5d:8e:d5:f0:60:f7:22: 16:76:9f:d1:55:87:86:8e:ae:e9:5e:9c:38:5f:f2: 69:1f:a8:c5:59:42:ee:ca:1a:0f:d5:9e:8a:94:8a: d4:c4:f3:c2:1b:a4:97:e9:0f:27:07:50:8b:0d:d2: 9e:1c:fc:f0:95:cb:30:18:51:fc:a9:33:d7:25:f9: 28:f7:25:8e:cc:bd:1b:7a:a0:ca:56:dd:77:7d:d9: c0:c5:bb:79:cf:37:f4:50:69:58:70:a7:86:40:d3: 5c:99:d3:21:21:d2:b5:fe:e6:0b:23:1a:08:c2:73: c7:3c:ea:b9:83:65:92:58:c5:67:58:2d:0e:35:27: 3f:a9:5a:c4:f0:cf:97:ef:c2:e7:1c:47:39:e8:6c: 2b:22:94:6b:05:06:d7:48:59:69:85:03:ba:b0:44: 2b:0d:3e:1a:cb:6d:ce:88:25:3f:96:17:9e:70:ad: 74:d6:78:4d:4a:a6:0b:bc:16:9b:15:b7:a8:ec:cd: b5:c6:81:79:58:c8:aa:3f:38:d0:7d:c1:c7:a8:6e: e2:9e:e5:68:d8:e4:56:d6:e4:b1:dc:48:d7:30:03: a3:c3:36:14:3d:17:fc:54:29:fc:e6:8e:48:40:86: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FF:FD:8A:33:EB:70:35:FD:C2:57:32:38:5F:2C:CA:5E:88:78:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:39:0d:9d:ef:32:c1:44:f8:a6:89:a2:84:12:b7:86:af:dc: 85:30:68:04:dd:2a:4e:8f:85:d3:fd:cc:c7:83:3e:8b:a5:c0: ec:e1:b4:0c:23:cb:81:6a:d1:b9:86:d1:84:2b:9b:f0:0f:54: 55:2c:3a:3b:0c:25:58:89:57:62:6b:99:b6:92:81:c4:b4:06: eb:ba:77:9d:32:b4:49:c3:a3:c7:c3:ba:64:1c:01:e6:bf:58: fa:2d:d2:0a:f5:6a:39:d0:34:65:01:a6:41:09:43:1c:d9:6e: 1a:64:86:53:98:88:39:a0:4a:2f:07:ce:36:b8:a1:03:a5:2a: 18:4f:a0:1e:da:67:36:4d:61:ef:c5:c9:bd:33:de:1c:ac:cb: fb:c1:ce:b0:f7:1c:a5:70:0b:c4:d0:d9:bb:cf:4b:6b:7d:1a: 47:46:31:fd:c8:3a:cd:4e:08:0e:4b:06:b8:53:2f:bf:a4:dd: f3:32:c2:d3:ec:00:65:55:37:11:3b:17:55:80:5b:95:75:f0: 97:f8:37:1e:c8:fb:cf:af:0d:11:f1:2e:46:65:7c:fd:50:53: b3:a8:a0:d6:03:b7:cc:bb:bf:df:3f:b2:d0:29:20:06:1a:3a: 48:83:76:48:3a:c1:1a:ac:17:25:8b:24:d1:7c:c0:6d:60:11: 00:2f:c8:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TTtfi/EZFbqu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWYxYzQwNTktMjE2Zi00ZDliLThhZGMtMGY0MGNlYmNjMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYGBcCY2sWfMqI64Yo6N+4ahhtEuJF2O1fBg 9yIWdp/RVYeGjq7pXpw4X/JpH6jFWULuyhoP1Z6KlIrUxPPCG6SX6Q8nB1CLDdKe HPzwlcswGFH8qTPXJfko9yWOzL0beqDKVt13fdnAxbt5zzf0UGlYcKeGQNNcmdMh IdK1/uYLIxoIwnPHPOq5g2WSWMVnWC0ONSc/qVrE8M+X78LnHEc56GwrIpRrBQbX SFlphQO6sEQrDT4ay23OiCU/lheecK101nhNSqYLvBabFbeo7M21xoF5WMiqPzjQ fcHHqG7inuVo2ORW1uSx3EjXMAOjwzYUPRf8VCn85o5IQIZ9WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX//Yoz63A1/cJXMjhfLMpeiHi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNjgyYTNmNWEtZjg5NC0z ZWQ2LTk4MTItMDczM2VhM2YwNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAME5DZ3vMsFE+KaJooQSt4av3IUwaATdKk6PhdP9zMeDPoulwOzhtAwj y4Fq0bmG0YQrm/APVFUsOjsMJViJV2JrmbaSgcS0Buu6d50ytEnDo8fDumQcAea/ WPot0gr1ajnQNGUBpkEJQxzZbhpkhlOYiDmgSi8Hzja4oQOlKhhPoB7aZzZNYe/F yb0z3hysy/vBzrD3HKVwC8TQ2bvPS2t9GkdGMf3IOs1OCA5LBrhTL7+k3fMywtPs AGVVNxE7F1WAW5V18Jf4Nx7I+8+vDRHxLkZlfP1QU7OooNYDt8y7v98/stApIAYa OkiDdkg6wRqsFyWLJNF8wG1gEQAvyFw= -----END CERTIFICATE-----Generated at Mon Jun 16 23:39:35 2025 by rpki-client