$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json) Hash identifier: aGM36IzleKvWOjrLTPLWZbZpvdOqFDlk0z9DCkLXEbY= Subject key identifier: 4B:C9:FF:32:35:FD:08:E9:94:A0:B6:7D:A1:DA:95:E4:B3:AD:AA:00 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F43285849F2E53253C8BCD5C95F0171EE Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 15123 IP address blocks: 72.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:32:53:c8:bc:d5:c9:5f:01:71:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3d340acb-e191-4caf-85bb-856134df6f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:90:03:a5:06:73:d5:21:c2:ce:ee:96:48: c3:e2:c8:97:89:23:5b:0c:8c:4a:9b:4e:91:88:85: 7e:3a:45:31:67:5a:1d:25:5c:be:71:4e:9e:d9:d1: c7:20:0c:9a:e7:49:4d:fd:cc:96:b9:65:b6:37:9e: 15:9d:f1:07:94:2d:95:71:c3:b8:28:fd:e0:01:05: 5d:0f:b8:f5:24:c6:bb:d3:67:d8:2c:9a:e9:ee:e0: bb:74:b6:fd:7a:54:3e:44:b1:e3:3c:a8:c7:b3:96: b0:86:25:bb:8e:c7:f4:ef:70:b9:62:c1:26:a6:07: e2:26:f0:f4:b9:69:58:3f:4c:83:63:e9:c6:16:63: eb:20:3a:c8:6c:9c:10:ad:21:f4:20:6b:36:55:8e: 5b:13:c7:1c:49:65:e7:14:a7:40:a3:32:1a:f2:8d: 60:e1:67:12:9b:08:7d:0b:8d:d0:14:82:ee:8c:86: 3c:3d:74:68:25:83:ba:7a:c9:49:fd:27:84:3e:ed: 40:e4:ad:e6:7e:9c:50:d9:5d:89:de:cf:fd:33:5e: 03:ef:43:32:c0:a9:5a:cc:01:b2:ea:58:b3:d6:89: d5:b4:19:c7:f8:6c:e7:15:85:c6:2b:28:fc:63:af: ea:24:1e:22:6c:be:07:88:2a:20:33:1a:c6:70:4d: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C9:FF:32:35:FD:08:E9:94:A0:B6:7D:A1:DA:95:E4:B3:AD:AA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:97:09:59:79:ee:18:45:20:f0:60:25:c8:95:43:75:67:aa: eb:63:9b:e9:24:d4:b2:d8:49:6a:dc:da:c7:0a:d4:56:c7:9d: 94:77:39:3f:fa:e7:92:38:eb:e1:bb:23:2d:6e:2c:72:9f:dc: 89:93:04:97:5c:8a:72:25:1c:eb:bd:aa:de:7d:b0:fa:4c:9d: 09:b1:22:36:b5:88:a8:15:fa:a4:ab:19:11:59:24:80:3b:34: 49:83:d2:29:fd:4e:b1:80:d0:63:1c:bf:55:11:27:9e:16:bd: c3:b9:35:80:f4:14:15:91:50:72:ff:64:2e:cc:8c:cb:ce:08: 5b:70:62:fd:b4:6e:1f:0c:11:64:1a:8f:f6:ac:2a:81:79:4c: 44:b4:36:26:ad:a6:32:ce:20:0e:77:f0:ef:af:e4:49:66:5a: fa:b7:6e:a4:d7:87:c7:49:92:90:3b:da:72:8c:b9:ca:cc:e4: 59:cc:c0:47:b1:a5:e5:03:f7:70:c4:cc:88:2e:1b:0f:12:44: 63:b5:bb:d4:f4:23:26:50:85:1d:f2:46:7a:7e:83:bb:05:73: 38:57:ed:14:84:dc:b0:14:8d:7d:a5:51:ab:8b:2f:d5:64:0d: aa:0a:73:f5:20:95:e8:c8:31:5a:6f:46:e2:6e:2b:24:eb:70: 0f:8f:50:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TJTyLzVyV8Bce4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2QzNDBhY2ItZTE5MS00Y2FmLTg1YmItODU2MTM0ZGY2ZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuWQA6UGc9Uhws7ulkjD4siXiSNbDIxKm06R iIV+OkUxZ1odJVy+cU6e2dHHIAya50lN/cyWuWW2N54VnfEHlC2VccO4KP3gAQVd D7j1JMa702fYLJrp7uC7dLb9elQ+RLHjPKjHs5awhiW7jsf073C5YsEmpgfiJvD0 uWlYP0yDY+nGFmPrIDrIbJwQrSH0IGs2VY5bE8ccSWXnFKdAozIa8o1g4WcSmwh9 C43QFILujIY8PXRoJYO6eslJ/SeEPu1A5K3mfpxQ2V2J3s/9M14D70MywKlazAGy 6liz1onVtBnH+GznFYXGKyj8Y6/qJB4ibL4HiCogMxrGcE2dfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvJ/zI1/QjplKC2faHaleSzraoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOXCVl57hhFIPBgJciVQ3Vnqutjm+kk1LLYSWrc2scK1FbHnZR3OT/6 55I46+G7Iy1uLHKf3ImTBJdcinIlHOu9qt59sPpMnQmxIja1iKgV+qSrGRFZJIA7 NEmD0in9TrGA0GMcv1URJ54WvcO5NYD0FBWRUHL/ZC7MjMvOCFtwYv20bh8MEWQa j/asKoF5TES0NiatpjLOIA538O+v5ElmWvq3bqTXh8dJkpA72nKMucrM5FnMwEex peUD93DEzIguGw8SRGO1u9T0IyZQhR3yRnp+g7sFczhX7RSE3LAUjX2lUauLL9Vk DaoKc/UglejIMVpvRuJuKyTrcA+PUOY= -----END CERTIFICATE-----Generated at Tue Jun 17 20:56:38 2025 by rpki-client