$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa File: bfb2273f-712e-3f5f-b862-366e898e589d.roa (raw, json) Hash identifier: ZO2KAIRDS/OlugIrF9sW6h4qP6huKL9pD22g41865NE= Subject key identifier: 51:9F:C8:B1:DE:B4:FE:0E:39:B4:92:22:75:3F:30:D0:98:50:29:5E Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584A268ABC99D7488A8D4A3D2CE4 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 36601 IP address blocks: 172.83.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:bc:99:d7:48:8a:8d:4a:3d:2c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=bbef7731-c5bb-4639-861c-09beaf29f6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:e5:39:14:a7:8f:5a:9e:c7:f2:c5:69:82: 22:d6:ff:59:22:62:d5:54:d2:24:42:d8:a7:29:24: 59:c1:8e:84:46:e2:1f:62:f3:58:0f:43:6b:7c:c0: bb:6e:09:75:91:a6:a1:f3:a8:08:35:a4:a7:d1:3b: a4:74:7e:96:f8:b0:aa:ee:cc:4f:42:27:b1:f6:02: c3:54:21:ad:f8:9e:c8:05:57:6b:fe:0b:1c:08:8f: 05:dd:db:1f:07:1f:b3:f1:76:ca:70:1e:fe:f1:01: d8:56:6c:76:f6:56:25:6f:af:a6:13:4d:3b:e7:39: 15:63:c1:97:90:a8:2a:2e:ad:42:ea:d8:95:df:32: 85:4a:e9:8a:c5:c3:47:77:8f:7f:a9:0a:17:05:2c: 14:c4:9e:03:51:3e:79:b9:a5:78:8c:61:a8:12:31: 0e:c5:ad:61:6f:51:ed:c0:32:23:f0:96:4c:fe:4a: 7b:07:9d:fd:99:9b:6d:3a:77:99:7b:6e:a9:c7:ec: 72:f9:8a:8c:7f:28:ec:5d:e0:a0:e7:5c:7d:98:3c: 4f:db:cc:63:a9:aa:bf:36:78:fb:b5:1d:5b:5f:8b: 20:a4:58:e9:69:0e:ac:0f:62:07:44:82:f8:d3:99: bc:f8:c0:80:54:1c:3e:da:11:dd:ed:ce:4c:ef:da: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9F:C8:B1:DE:B4:FE:0E:39:B4:92:22:75:3F:30:D0:98:50:29:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 172.83.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:09:47:71:84:56:8b:9e:92:53:28:64:92:8c:8a:5f:81:93: b6:7c:0c:5c:7b:bf:36:ec:50:30:4f:c6:15:b2:fa:70:ef:56: ec:55:7c:d3:eb:8a:8b:f5:7f:cb:7c:e9:c7:e0:59:46:d2:0c: fd:d6:22:c3:2c:50:6b:92:02:1e:c3:b3:fd:27:02:1c:67:20: d1:9e:a9:7e:dc:f5:b5:55:bb:d1:c0:e3:3b:16:7e:8c:19:43: ab:1b:ca:75:4a:f5:0d:a2:c1:ec:c4:70:d7:34:f0:ce:a4:e6: ea:d4:ee:f8:87:bf:6d:54:7a:a0:03:05:18:ea:a4:02:00:ce: 94:ba:dc:f5:d6:38:bd:17:96:05:00:ba:d3:85:a3:7f:d9:ad: 23:19:4b:c2:be:39:c1:72:eb:e7:62:a5:47:69:6a:cd:fe:65: 60:3b:cc:68:01:e8:39:ea:52:e4:d5:85:d2:0f:6e:3f:8a:13: 6b:03:f0:a7:cf:c8:75:8e:4a:47:7c:ab:0a:86:66:c4:f3:05: d2:57:b8:95:11:d3:6f:5e:5c:69:00:21:5a:ae:71:86:c5:12: bb:82:25:ea:6a:75:57:07:23:16:47:dd:14:ca:2d:9d:4b:c0: 03:7e:19:4c:b4:c8:4b:b0:59:35:5c:7b:98:67:37:36:c2:55: d2:a6:1f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiryZ10iKjUo9LOQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk YmJlZjc3MzEtYzViYi00NjM5LTg2MWMtMDliZWFmMjlmNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgXlORSnj1qex/LFaYIi1v9ZImLVVNIkQtin KSRZwY6ERuIfYvNYD0NrfMC7bgl1kaah86gINaSn0TukdH6W+LCq7sxPQiex9gLD VCGt+J7IBVdr/gscCI8F3dsfBx+z8XbKcB7+8QHYVmx29lYlb6+mE0075zkVY8GX kKgqLq1C6tiV3zKFSumKxcNHd49/qQoXBSwUxJ4DUT55uaV4jGGoEjEOxa1hb1Ht wDIj8JZM/kp7B539mZttOneZe26px+xy+YqMfyjsXeCg51x9mDxP28xjqaq/Nnj7 tR1bX4sgpFjpaQ6sD2IHRIL405m8+MCAVBw+2hHd7c5M79o34QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGfyLHetP4OObSSInU/MNCYUCleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvYmZiMjI3M2YtNzEyZS0z ZjVmLWI4NjItMzY2ZTg5OGU1ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsJR3GEVoueklMoZJKMil+Bk7Z8DFx7vzbsUDBPxhWy+nDvVuxVfNPr iov1f8t86cfgWUbSDP3WIsMsUGuSAh7Ds/0nAhxnINGeqX7c9bVVu9HA4zsWfowZ Q6sbynVK9Q2iwezEcNc08M6k5urU7viHv21UeqADBRjqpAIAzpS63PXWOL0XlgUA utOFo3/ZrSMZS8K+OcFy6+dipUdpas3+ZWA7zGgB6DnqUuTVhdIPbj+KE2sD8KfP yHWOSkd8qwqGZsTzBdJXuJUR029eXGkAIVqucYbFEruCJepqdVcHIxZH3RTKLZ1L wAN+GUy0yEuwWTVce5hnNzbCVdKmH6c= -----END CERTIFICATE-----Generated at Mon Jun 30 19:53:31 2025 by rpki-client