$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e83c737-95e8-357f-a3fa-c9ae68f8f1d6.roa File: 3e83c737-95e8-357f-a3fa-c9ae68f8f1d6.roa (raw, json) Hash identifier: Ac1zNj8o+7493A80WPaC59/9iiZ2NZ8NxKZCYq4C2/I= Subject key identifier: C6:18:F7:AB:82:5E:B8:06:41:0D:A4:1B:57:77:4A:A0:4A:1D:54:2E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CF9901427ECF11169300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e83c737-95e8-357f-a3fa-c9ae68f8f1d6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cf:99:01:42:7e:cf:11:16:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d652307b-49a9-47d6-b41c-664620e55b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:3d:af:3e:c0:c6:1e:c3:ac:ab:b9:eb:db: 38:c3:63:38:03:7f:8d:3b:95:0d:f8:9e:df:64:2f: d9:99:e1:c9:b7:fc:8e:7b:9c:c5:a3:94:91:4f:0e: 54:48:50:3e:3c:63:c2:14:30:fd:9e:0c:97:9c:75: 8a:07:ee:23:0f:6c:95:5f:16:22:ae:86:11:60:22: 7d:be:bb:b4:8e:cc:fb:ad:03:fb:96:00:47:a6:88: 92:91:6b:65:95:1e:fd:c3:fb:9f:49:5a:32:59:70: e6:e8:61:94:52:97:ad:3d:2a:88:0a:6f:af:01:d2: 48:b7:58:9d:10:86:0d:ff:72:e3:5d:83:2a:3f:21: 89:9f:da:ed:a5:3e:25:ca:4c:9d:27:11:9c:a3:87: 99:c7:ad:95:6b:7b:59:06:68:e7:f4:3e:64:9d:35: e0:aa:d5:9b:17:2c:3e:33:21:71:7b:e7:f2:16:83: 89:8d:76:9c:63:f9:d3:fe:34:15:7a:44:08:4e:56: 00:d8:c6:65:82:7b:8f:7e:8f:f7:f8:ff:b7:66:04: 1d:76:72:06:2e:24:fe:86:f7:96:1c:cb:79:42:f9: c5:ef:94:ce:53:7d:d0:22:bb:62:54:0e:ca:4f:2c: 26:3d:28:26:b0:02:02:fc:d4:71:ce:0c:1f:d1:ff: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:18:F7:AB:82:5E:B8:06:41:0D:A4:1B:57:77:4A:A0:4A:1D:54:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e83c737-95e8-357f-a3fa-c9ae68f8f1d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ae:c4:07:db:20:82:20:62:c0:fa:50:27:87:6d:54:57:de: 88:9a:a5:42:92:cf:23:81:78:6f:f0:77:91:96:d3:64:1d:87: 70:2c:7f:8f:bf:ad:c0:9a:12:d2:7c:34:fd:58:d6:36:5f:60: 2c:45:85:98:5c:10:43:33:e2:ee:11:53:12:33:d9:47:6c:4f: 7e:ed:62:0b:b0:23:b7:e2:39:31:90:49:ad:57:2e:6c:9d:46: b4:59:d9:46:5e:28:f6:26:4a:df:55:3b:d8:11:54:fa:0b:68: 8b:e1:27:66:61:25:4c:51:5e:ee:45:e8:3b:bf:74:44:0a:14: 3f:66:71:64:56:be:04:b3:51:16:1d:3b:1f:f1:9d:15:ce:aa: e6:a6:3d:ca:cf:22:b2:2e:9a:fa:69:9e:78:e2:db:73:fe:d7: eb:da:7c:93:1b:84:e4:4c:1c:8a:6b:80:d3:db:e7:2a:8d:94: a4:5c:34:2c:22:f3:48:84:ac:ac:63:08:36:d6:4b:74:ed:95: 45:e4:d3:5d:c2:eb:4b:34:a6:ae:80:41:4d:13:90:6b:4c:3c: 5f:c4:cb:4f:02:c2:0e:81:fc:73:76:d5:dc:b5:95:12:e4:78: 9d:1c:05:1e:6b:38:58:dc:d7:cc:89:b5:67:27:8e:c0:03:3a: 91:d1:2a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc+ZAUJ+zxEWkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY1MjMwN2ItNDlhOS00N2Q2LWI0MWMtNjY0NjIwZTU1YjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDA9rz7Axh7DrKu569s4w2M4A3+NO5UN+J7f ZC/ZmeHJt/yOe5zFo5SRTw5USFA+PGPCFDD9ngyXnHWKB+4jD2yVXxYiroYRYCJ9 vru0jsz7rQP7lgBHpoiSkWtllR79w/ufSVoyWXDm6GGUUpetPSqICm+vAdJIt1id EIYN/3LjXYMqPyGJn9rtpT4lykydJxGco4eZx62Va3tZBmjn9D5knTXgqtWbFyw+ MyFxe+fyFoOJjXacY/nT/jQVekQITlYA2MZlgnuPfo/3+P+3ZgQddnIGLiT+hveW HMt5QvnF75TOU33QIrtiVA7KTywmPSgmsAIC/NRxzgwf0f+pkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYY96uCXrgGQQ2kG1d3SqBKHVQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2U4M2M3MzctOTVlOC0z NTdmLWEzZmEtYzlhZTY4ZjhmMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeuxAfbIIIgYsD6UCeHbVRX3oiapUKSzyOBeG/wd5GW02Qdh3Asf4+/ rcCaEtJ8NP1Y1jZfYCxFhZhcEEMz4u4RUxIz2UdsT37tYguwI7fiOTGQSa1XLmyd RrRZ2UZeKPYmSt9VO9gRVPoLaIvhJ2ZhJUxRXu5F6Du/dEQKFD9mcWRWvgSzURYd Ox/xnRXOquamPcrPIrIumvppnnji23P+1+vafJMbhORMHIprgNPb5yqNlKRcNCwi 80iErKxjCDbWS3TtlUXk013C60s0pq6AQU0TkGtMPF/Ey08Cwg6B/HN21dy1lRLk eJ0cBR5rOFjc18yJtWcnjsADOpHRKok= -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:49 2025 by rpki-client