$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa File: 1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa (raw, json) Hash identifier: wrckSlJ2A1AH7tsL98LllhSMW1hr6vmaZO8DqpJAWTk= Subject key identifier: F5:80:73:E5:BC:FF:49:A2:49:92:D3:FF:FF:AD:C5:4D:30:3C:62:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D46A5308D79002EB5B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d4:6a:53:08:d7:90:02:eb:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f7e53b1e-dda6-44f7-a60b-d8f94218db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:22:5b:ba:01:5d:47:34:6b:46:15:3c:83: 19:28:ef:f8:dd:0c:fc:8b:58:f2:4a:3a:a5:84:71: 02:3b:72:0b:9e:e1:69:f0:13:0a:a1:c9:fb:b7:99: 61:88:03:2b:ca:a9:59:af:1a:57:69:37:d5:97:ca: 09:af:b7:73:33:1b:52:ce:a6:df:39:f7:76:82:a1: 3e:d1:23:e8:e2:61:62:fd:06:c7:d6:52:ec:f6:2f: 57:c5:90:31:85:25:7b:17:68:f0:de:bf:30:07:f3: d7:d8:be:3f:a9:e2:54:a8:2e:73:64:62:a3:73:d9: ad:92:68:70:b7:8d:c1:6b:f7:ae:41:7e:df:e8:11: d5:67:c9:54:fa:44:6b:55:2f:86:d6:e0:97:c7:c1: f6:db:4a:89:6a:bd:1f:e2:26:46:1a:45:e5:63:ec: 84:5a:6c:fc:ad:5d:59:90:ac:88:7e:57:2d:76:6b: 9f:38:2a:e2:fd:f7:6c:2c:53:ff:3c:12:f7:14:58: 61:62:0d:3f:83:e8:b7:b8:f1:d4:96:61:18:f5:92: 3e:69:c1:68:33:59:18:41:bb:f6:d9:d7:1d:72:b2: 29:fb:69:cb:a3:af:f8:5b:20:69:3e:2b:31:60:0d: 52:f5:96:e1:eb:f3:51:5e:9f:7d:0c:32:f7:a5:db: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:80:73:E5:BC:FF:49:A2:49:92:D3:FF:FF:AD:C5:4D:30:3C:62:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:9c:78:84:5b:94:f4:76:a5:6e:ba:4d:fe:c7:8a:bc:06:0d: 88:9e:46:94:1c:7c:9b:c8:91:f0:3f:b8:a3:85:cd:11:f7:6a: e8:21:ee:97:ce:b6:d8:1d:9a:05:40:39:95:40:a8:b7:70:0d: a4:a5:42:5a:4c:04:ac:69:b9:01:f5:09:06:4e:ea:6c:3e:32: fa:1b:55:c5:cc:fa:13:7d:93:5a:3d:ee:96:2a:21:3d:6f:c3: 23:a2:0c:72:5a:0c:24:dc:55:d7:b5:4b:08:5a:5b:36:08:57: 32:53:ed:6f:a0:c8:0e:a6:ca:81:b9:3a:a3:d7:d8:4b:d5:2b: 5f:fd:f6:91:52:0b:f2:c9:c7:01:a5:9d:ab:38:11:46:8b:9d: 1e:91:ac:c6:76:09:8f:24:d8:2c:15:6e:81:79:da:92:df:b6: c5:8e:58:35:4e:26:e8:97:19:8a:6b:1e:03:33:b9:59:37:0c: 93:d9:40:64:ea:bf:e6:3b:ce:b9:73:5c:3e:b4:69:99:cf:4b: c2:84:be:fa:b4:3e:ca:9a:2c:df:16:ba:92:c7:f0:42:a5:9b: 35:53:5c:d0:e1:7c:68:16:76:55:f3:3b:2e:e9:4a:59:48:bb: 91:20:ec:67:39:3e:fe:97:86:a1:4a:8a:49:5f:9b:93:26:32: c6:27:61:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdRqUwjXkALrW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjdlNTNiMWUtZGRhNi00NGY3LWE2MGItZDhmOTQyMThkYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI0iW7oBXUc0a0YVPIMZKO/43Qz8i1jySjql hHECO3ILnuFp8BMKocn7t5lhiAMryqlZrxpXaTfVl8oJr7dzMxtSzqbfOfd2gqE+ 0SPo4mFi/QbH1lLs9i9XxZAxhSV7F2jw3r8wB/PX2L4/qeJUqC5zZGKjc9mtkmhw t43Ba/euQX7f6BHVZ8lU+kRrVS+G1uCXx8H220qJar0f4iZGGkXlY+yEWmz8rV1Z kKyIflctdmufOCri/fdsLFP/PBL3FFhhYg0/g+i3uPHUlmEY9ZI+acFoM1kYQbv2 2dcdcrIp+2nLo6/4WyBpPisxYA1S9Zbh6/NRXp99DDL3pdteFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWAc+W8/0miSZLT//+txU0wPGLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWZhYThkNTQtN2Y5ZS0z N2E0LThmYzUtYjVkZTZmZWNhZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeceIRblPR2pW66Tf7HirwGDYieRpQcfJvIkfA/uKOFzRH3augh7pfO ttgdmgVAOZVAqLdwDaSlQlpMBKxpuQH1CQZO6mw+MvobVcXM+hN9k1o97pYqIT1v wyOiDHJaDCTcVde1SwhaWzYIVzJT7W+gyA6myoG5OqPX2EvVK1/99pFSC/LJxwGl nas4EUaLnR6RrMZ2CY8k2CwVboF52pLftsWOWDVOJuiXGYprHgMzuVk3DJPZQGTq v+Y7zrlzXD60aZnPS8KEvvq0PsqaLN8WupLH8EKlmzVTXNDhfGgWdlXzOy7pSllI u5Eg7Gc5Pv6XhqFKiklfm5MmMsYnYaw= -----END CERTIFICATE-----Generated at Sat Apr 12 00:08:04 2025 by rpki-client