$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa File: d97f986e-cea3-3138-8288-1c3a31bda324.roa (raw, json) Hash identifier: M2eIvzCC+PZebYHt3Ua0k2T99Lk7OYMtxSJnpJhN/V0= Subject key identifier: EF:0E:97:33:4B:D3:6D:AB:BC:44:E5:B4:B6:86:3C:64:3A:DB:0D:C7 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F432858495ABEC3447746A5DC16DEF180 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 800 IP address blocks: 162.120.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c3:44:77:46:a5:dc:16:de:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=5a7bf726-f530-4210-84c7-4a6e743aba91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:89:57:8b:d9:2c:ec:2f:58:65:cf:8f:90:f1: 30:66:6e:e7:80:4c:b6:37:d8:f2:21:77:6a:da:0e: 5a:a8:63:3d:6f:77:af:60:ad:88:74:ca:f3:ba:50: b6:4d:a2:fd:0c:24:50:f8:a7:f9:2b:78:05:75:1c: cc:93:57:75:fa:e7:7c:2c:7f:3b:da:dd:27:b8:88: aa:4e:3c:4a:4a:0b:e4:2f:eb:2b:b9:29:75:6d:4c: 0d:45:56:5d:d4:00:5b:a7:59:16:b9:06:ea:b6:4f: 1f:38:9c:30:a9:be:b9:ac:df:2e:da:8d:27:d1:7a: a5:30:72:63:0d:90:6c:0d:bb:1a:1e:3f:b8:d9:aa: 62:cd:63:48:4d:d8:24:4f:df:98:27:54:b8:a1:e0: 02:4c:2a:5c:c2:57:7d:b3:01:03:b6:5b:6e:20:3d: 40:22:67:1d:51:6c:15:ef:05:bd:61:5e:88:a2:3a: 02:fd:7c:a0:e5:c5:70:df:9a:9b:35:dd:a4:2c:42: 9f:75:3f:a9:84:e6:01:23:7e:80:19:52:d4:6b:f6: bb:5f:99:86:f3:26:03:ce:dd:67:7c:45:73:ad:06: a9:1f:67:b3:df:0d:0c:ec:5e:44:e4:b8:c7:da:30: 2c:13:fc:e4:60:1b:50:ee:e6:b6:fb:3a:9f:25:4e: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:97:33:4B:D3:6D:AB:BC:44:E5:B4:B6:86:3C:64:3A:DB:0D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 162.120.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:72:1c:fb:00:9a:43:77:a1:63:70:1f:52:e0:7a:04:c8:79: 02:75:a4:63:9e:56:12:e7:da:40:02:8b:7c:51:9c:1f:a9:8f: 15:f2:a3:41:b6:bf:ac:c3:a2:1c:40:07:dd:51:4f:26:21:61: b0:61:40:e1:89:e5:cc:f4:56:94:fa:2c:21:a4:58:c1:e9:5c: f5:e5:8a:b6:b9:e2:d2:16:be:fd:b5:5b:f5:c5:de:f9:1a:52: 02:3c:90:24:43:26:10:80:3b:67:f9:cb:b6:e7:15:54:ee:40: 8a:a1:7f:ed:60:cb:d1:5f:8a:c1:2f:24:bb:9c:1a:64:e3:98: 8e:88:98:98:5b:f3:42:7d:31:9b:02:8f:98:70:b5:63:4b:e1: a1:7a:35:bc:f6:71:de:af:d3:7c:26:3c:a2:b9:2d:b9:d0:7a: 6a:74:f6:17:68:60:c9:4b:e0:13:1d:32:e1:0d:92:ea:ef:07: 7d:73:65:8b:25:c4:fa:4d:bc:22:56:07:0d:f5:22:ca:55:7d: 83:84:20:63:2b:a1:76:c7:53:2d:5a:d0:27:82:86:79:86:c9: 74:7d:4d:f5:03:8c:f3:df:06:5e:ee:45:d6:6e:f3:ff:d8:b0: 50:4b:f7:a4:b4:f0:df:24:91:4a:e6:87:99:51:a5:92:6b:29: f6:01:41:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsNEd0al3Bbe8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NWE3YmY3MjYtZjUzMC00MjEwLTg0YzctNGE2ZTc0M2FiYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYlXi9ks7C9YZc+PkPEwZm7ngEy2N9jyIXdq 2g5aqGM9b3evYK2IdMrzulC2TaL9DCRQ+Kf5K3gFdRzMk1d1+ud8LH872t0nuIiq TjxKSgvkL+sruSl1bUwNRVZd1ABbp1kWuQbqtk8fOJwwqb65rN8u2o0n0XqlMHJj DZBsDbsaHj+42apizWNITdgkT9+YJ1S4oeACTCpcwld9swEDtltuID1AImcdUWwV 7wW9YV6IojoC/Xyg5cVw35qbNd2kLEKfdT+phOYBI36AGVLUa/a7X5mG8yYDzt1n fEVzrQapH2ez3w0M7F5E5LjH2jAsE/zkYBtQ7ua2+zqfJU7MwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8OlzNL022rvETltLaGPGQ62w3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvZDk3Zjk4NmUtY2VhMy0z MTM4LTgyODgtMWMzYTMxYmRhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBonhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxyHPsAmkN3oWNwH1LgegTIeQJ1pGOeVhLn2kACi3xRnB+pjxXyo0G2 v6zDohxAB91RTyYhYbBhQOGJ5cz0VpT6LCGkWMHpXPXlira54tIWvv21W/XF3vka UgI8kCRDJhCAO2f5y7bnFVTuQIqhf+1gy9FfisEvJLucGmTjmI6ImJhb80J9MZsC j5hwtWNL4aF6Nbz2cd6v03wmPKK5LbnQemp09hdoYMlL4BMdMuENkurvB31zZYsl xPpNvCJWBw31IspVfYOEIGMroXbHUy1a0CeChnmGyXR9TfUDjPPfBl7uRdZu8//Y sFBL96S08N8kkUrmh5lRpZJrKfYBQQo= -----END CERTIFICATE-----Generated at Sun Apr 6 07:15:30 2025 by rpki-client