$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c1847f7-bbc8-3445-911a-e75b10ddf230.roa File: 0c1847f7-bbc8-3445-911a-e75b10ddf230.roa (raw, json) Hash identifier: 4VCNGCARwyDAQNS/2W0gAh/ggjbSjIlk8KE4jrJrybc= Subject key identifier: D7:14:A9:13:93:E7:92:FD:E5:DE:B9:41:81:16:13:C4:E2:5F:51:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D3D766D316764C92FB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c1847f7-bbc8-3445-911a-e75b10ddf230.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d3:d7:66:d3:16:76:4c:92:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f2477dd2-e776-42b7-bfd5-96d6a07bb0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:93:9b:3c:87:1c:36:08:dc:b6:71:ff:6e: 11:af:dd:9e:e5:d4:3b:fb:eb:88:34:e5:62:15:9d: 4d:b2:60:a8:20:d1:e8:e5:88:a6:2b:4f:8e:00:a0: 9a:b7:26:95:fa:8f:02:16:83:2a:72:f6:1f:24:d7: c2:57:0e:8a:b7:b8:9c:8a:50:87:d3:48:21:cc:7d: ef:cd:16:2f:13:e3:20:7c:b2:5a:02:13:f4:04:dd: 0d:5c:9d:20:2b:b8:6e:81:83:7a:09:ae:ef:6b:41: ee:3b:9f:e4:ff:d7:00:a6:af:53:81:4b:7c:8b:03: 4c:75:df:27:65:58:98:cd:7f:98:9f:e2:30:a0:d3: 52:52:58:b9:6b:21:05:67:9e:41:ca:f6:7c:e7:08: 9f:bc:c6:a2:80:3e:c6:0a:1c:55:87:0d:ee:a2:dd: 4c:36:a3:08:40:cf:f7:ab:39:0c:d2:39:57:53:4a: 58:d4:a4:90:e5:66:40:3e:77:d7:11:88:49:4c:e4: 73:8d:79:89:4f:41:84:e3:e6:03:4e:88:4a:55:60: d7:06:37:3e:1a:e6:a0:42:bb:6d:4c:cc:54:d0:14: 4f:50:b6:ac:07:77:87:be:b8:68:96:63:8a:e7:e7: 8b:2d:5e:22:b2:46:41:1a:ce:f5:15:ae:48:f0:15: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:14:A9:13:93:E7:92:FD:E5:DE:B9:41:81:16:13:C4:E2:5F:51:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c1847f7-bbc8-3445-911a-e75b10ddf230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b4:e8:b3:14:63:4c:73:98:9e:06:e3:86:f0:a2:26:24:44: 14:f1:32:01:fe:11:94:a2:ca:64:23:e9:8f:44:ae:9d:76:e3: db:95:3c:f4:39:39:6a:1e:48:65:5a:4b:a3:b1:ee:e6:32:0b: e4:4d:65:30:8e:19:e0:94:9c:5a:fd:a0:28:77:17:4f:8f:3b: 66:b4:4f:46:76:7d:50:3c:53:ee:56:39:fd:f6:71:61:29:62: fd:3f:80:bc:0e:9f:49:06:ee:31:f2:44:76:26:64:5b:b0:58: 1b:65:6a:f7:14:98:ba:32:c4:8b:09:c0:1b:01:ca:ab:a7:44: 0d:bf:b9:a3:47:77:5f:40:89:8a:69:ef:44:3b:30:b4:5a:d1: 82:31:05:1e:1e:96:0b:d0:18:27:8d:aa:2d:0c:13:d6:e3:f1: 79:88:a2:aa:f1:75:ad:4e:32:dd:d9:9f:e9:b3:de:de:aa:60: 80:64:99:1c:73:58:90:4d:e0:df:1e:5d:f9:12:9d:ac:a4:22: 6c:dc:56:89:0a:c0:63:5b:9e:d9:d8:87:6b:0f:19:88:3b:f0: d3:53:8a:d8:d8:2d:b2:77:08:d7:17:32:b4:07:74:c4:9a:84: 2e:e4:23:77:b6:05:be:23:f3:12:f5:61:d9:b9:08:3d:0f:5e: 53:10:0b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdPXZtMWdkyS+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjI0NzdkZDItZTc3Ni00MmI3LWJmZDUtOTZkNmEwN2JiMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cCTmzyHHDYI3LZx/24Rr92e5dQ7++uINOVi FZ1NsmCoINHo5YimK0+OAKCatyaV+o8CFoMqcvYfJNfCVw6Kt7icilCH00ghzH3v zRYvE+MgfLJaAhP0BN0NXJ0gK7hugYN6Ca7va0HuO5/k/9cApq9TgUt8iwNMdd8n ZViYzX+Yn+IwoNNSUli5ayEFZ55ByvZ85wifvMaigD7GChxVhw3uot1MNqMIQM/3 qzkM0jlXU0pY1KSQ5WZAPnfXEYhJTORzjXmJT0GE4+YDTohKVWDXBjc+GuagQrtt TMxU0BRPULasB3eHvrholmOK5+eLLV4iskZBGs71Fa5I8BWTHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcUqROT55L95d65QYEWE8TiX1FxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGMxODQ3ZjctYmJjOC0z NDQ1LTkxMWEtZTc1YjEwZGRmMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG06LMUY0xzmJ4G44bwoiYkRBTxMgH+EZSiymQj6Y9Erp1249uVPPQ5 OWoeSGVaS6Ox7uYyC+RNZTCOGeCUnFr9oCh3F0+PO2a0T0Z2fVA8U+5WOf32cWEp Yv0/gLwOn0kG7jHyRHYmZFuwWBtlavcUmLoyxIsJwBsByqunRA2/uaNHd19AiYpp 70Q7MLRa0YIxBR4elgvQGCeNqi0ME9bj8XmIoqrxda1OMt3Zn+mz3t6qYIBkmRxz WJBN4N8eXfkSnaykImzcVokKwGNbntnYh2sPGYg78NNTitjYLbJ3CNcXMrQHdMSa hC7kI3e2Bb4j8xL1Ydm5CD0PXlMQC64= -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:45 2025 by rpki-client