$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa File: bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa (raw, json) Hash identifier: cvOU4plFZ2hm9/47nGyv/vo27jDCnSrCXqGrOWo3xoA= Subject key identifier: D1:1B:34:15:50:D0:7B:AE:A5:70:4A:4C:B3:76:CD:5C:FE:0C:26:D4 Certificate issuer: /CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Certificate serial: 010D0C9F432858499AF4794CB6AA044295D7F000 Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 26157 IP address blocks: 207.174.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:79:4c:b6:aa:04:42:95:d7:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=84afe96e-e06c-4381-b9eb-ad43a72a15f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:9a:33:a3:24:05:9e:1c:21:e7:4f:ec:a9: 99:df:af:d8:85:af:24:7a:aa:4c:7b:1b:dd:a1:c0: 8b:f4:27:6a:17:b4:e0:28:72:44:0e:66:c0:e8:1d: 5f:3a:1d:80:32:30:78:d8:1f:09:5c:dd:01:ee:c6: 94:9e:03:52:22:d4:73:5e:37:99:5b:bd:f1:22:47: 05:4d:5c:24:a7:26:c7:23:60:3f:77:e5:15:61:c1: fd:f7:2f:5d:5b:7f:d3:ae:e0:15:8c:fe:1e:7c:87: ea:64:89:a5:03:33:48:e1:02:ce:f4:ed:44:ba:85: f7:bf:59:ad:79:16:8a:be:6a:c7:1b:6c:e5:1a:64: 49:c4:48:34:6c:13:a7:5f:54:a6:a5:34:75:d6:50: 32:04:ca:e0:26:b9:db:6f:7f:8e:6a:0b:e0:2b:68: bb:7d:d6:b4:e5:f6:f6:c8:15:45:85:aa:d7:74:c6: b2:d3:72:ee:32:75:fb:cf:44:42:2f:9d:9a:50:2e: f0:fd:5a:94:7a:a3:f3:07:c9:6e:29:5d:1c:91:20: 75:09:8a:2f:35:bc:f3:b0:bc:e0:9a:fd:9b:c4:f5: 4e:99:99:0a:f4:5d:0d:77:d7:fa:fe:00:38:72:21: 82:a6:8a:6c:ff:98:fa:ed:d2:4e:88:15:ae:49:58: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:34:15:50:D0:7B:AE:A5:70:4A:4C:B3:76:CD:5C:FE:0C:26:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl X509v3 Authority Key Identifier: keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer sbgp-ipAddrBlock: critical IPv4: 207.174.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:56:2c:e7:97:cc:c9:25:ce:04:c0:3f:f7:46:b3:73:31:1d: ea:b2:f3:b0:89:78:fa:2c:f2:1c:38:fb:28:76:1a:10:52:64: 05:74:fd:89:72:e7:cb:2e:5a:4d:43:1d:80:40:0b:b2:f4:20: 4d:d1:82:9a:f1:9a:a0:32:24:b9:45:35:f3:b4:2a:f6:29:82: 28:26:35:6c:e1:4f:01:14:1f:95:4e:eb:ed:f7:2e:28:f9:aa: 47:57:df:da:20:05:f9:2b:fa:0f:bc:58:7e:d7:20:72:97:8d: b2:5d:fa:c9:79:0d:7b:3e:8f:6a:d9:b4:dc:fa:11:fb:db:9e: a5:d6:28:16:7e:8f:6f:73:f2:a2:e9:a8:6e:ae:0f:fd:b6:0c: f2:f4:6a:25:61:5c:c7:8e:eb:64:ab:a8:a5:a4:39:4d:d7:35: 53:8c:b1:c8:09:1b:20:5c:04:6a:6f:66:8e:73:d1:74:e1:45: ab:4d:5e:96:97:d3:6b:3e:15:ed:0d:cc:7f:0c:34:b4:c6:97: 5d:a0:31:e0:d5:37:58:bf:e9:f1:c8:21:55:4c:15:6c:97:bc: b5:f5:d3:3d:66:54:98:e2:ba:82:8e:2f:60:6d:3c:09:d6:f9: a3:f0:40:b5:f4:ce:a6:27:3d:62:b7:22:70:48:9c:01:d4:5f: e9:55:7f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HlMtqoEQpXX8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0MmNkMWUtMTM1MC00MWQ1LWExNGUtNTFiZGRiNTJj MzM2MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODRhZmU5NmUtZTA2Yy00MzgxLWI5ZWItYWQ0M2E3MmExNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOyaM6MkBZ4cIedP7KmZ36/Yha8keqpMexvd ocCL9CdqF7TgKHJEDmbA6B1fOh2AMjB42B8JXN0B7saUngNSItRzXjeZW73xIkcF TVwkpybHI2A/d+UVYcH99y9dW3/TruAVjP4efIfqZImlAzNI4QLO9O1EuoX3v1mt eRaKvmrHG2zlGmRJxEg0bBOnX1SmpTR11lAyBMrgJrnbb3+OagvgK2i7fda05fb2 yBVFharXdMay03LuMnX7z0RCL52aUC7w/VqUeqPzB8luKV0ckSB1CYovNbzzsLzg mv2bxPVOmZkK9F0Nd9f6/gA4ciGCpops/5j67dJOiBWuSVinWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEbNBVQ0HuupXBKTLN2zVz+DCbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wOTQy Y2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJkZGI1MmMzMzYvYmNhNWFhMjAtMGFiOS0z MzE1LThkOTctZjJlZDUwMzM2OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDk0MmNkMWUtMTM1MC00MWQ1LWEx NGUtNTFiZGRiNTJjMzM2LzA5NDJjZDFlLTEzNTAtNDFkNS1hMTRlLTUxYmRkYjUy YzMzNi5jcmwwHwYDVR0jBBgwFoAUWsdYmsqiyRvuds1T1i6jaRsQMkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wOTQyY2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJk ZGI1MmMzMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlWLOeXzMklzgTAP/dGs3MxHeqy87CJePos8hw4+yh2GhBSZAV0/Yly 58suWk1DHYBAC7L0IE3RgprxmqAyJLlFNfO0KvYpgigmNWzhTwEUH5VO6+33Lij5 qkdX39ogBfkr+g+8WH7XIHKXjbJd+sl5DXs+j2rZtNz6EfvbnqXWKBZ+j29z8qLp qG6uD/22DPL0aiVhXMeO62SrqKWkOU3XNVOMscgJGyBcBGpvZo5z0XThRatNXpaX 02s+Fe0NzH8MNLTGl12gMeDVN1i/6fHIIVVMFWyXvLX10z1mVJjiuoKOL2BtPAnW +aPwQLX0zqYnPWK3InBInAHUX+lVfz0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:48:25 2025 by rpki-client