$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/582562ee-13ee-38ab-982d-7adaf31d6558.roa File: 582562ee-13ee-38ab-982d-7adaf31d6558.roa (raw, json) Hash identifier: SMGImgvLmocYCBgSLKq2JOC+7h1vd/FQFHsYrBYFq2k= Subject key identifier: D9:B7:D2:ED:9B:B7:D1:F6:44:E9:F1:13:1F:F3:49:62:7E:C7:44:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D4D748CF43B25829A800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/582562ee-13ee-38ab-982d-7adaf31d6558.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d4:d7:48:cf:43:b2:58:29:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f5e43f91-da9b-4afc-b53c-7e348eb4c469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:d9:9e:ca:0a:6f:98:e5:d8:9e:07:5d:c1: 0b:61:28:fd:50:c9:6a:93:85:66:d1:c5:0d:b7:b1: eb:46:05:38:aa:62:56:a9:ee:b3:48:98:75:0a:70: ab:01:d3:25:45:b1:35:be:75:12:b6:3e:c3:a4:72: 83:5e:1c:e8:66:32:91:ae:6c:0f:2e:e2:e1:7c:cc: fa:65:b3:58:e4:56:9a:fa:0d:73:ea:99:8c:ba:2b: 06:e9:cd:34:f8:55:cd:74:47:ae:0a:38:1d:1d:87: 9b:56:a2:72:44:3f:92:8e:3c:df:a3:98:5a:72:9d: f6:54:78:fb:2b:28:da:13:23:b8:99:4a:92:28:99: 80:e0:e8:55:e5:f7:df:4b:54:fa:5b:7d:4f:b7:b0: 9a:06:2a:b4:69:71:f4:d7:47:45:7c:9f:35:d5:1b: 4f:0d:3c:43:45:79:c6:3e:de:91:35:4a:1b:aa:0e: 55:76:d9:01:20:00:2e:55:d0:3d:a0:e5:2a:4a:53: dd:bd:84:56:f5:d0:d4:13:d1:b1:53:90:34:2c:be: 11:77:cb:29:ba:8d:53:55:f4:ba:a7:89:ef:8a:48: 78:f4:94:6b:07:ac:07:c4:cf:6c:2b:08:49:e6:84: be:40:d0:1b:74:6a:87:b0:58:de:a2:2d:e7:ef:8c: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:D2:ED:9B:B7:D1:F6:44:E9:F1:13:1F:F3:49:62:7E:C7:44:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/582562ee-13ee-38ab-982d-7adaf31d6558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:04:ea:32:f0:ca:47:53:94:3a:b2:f1:5d:3c:ee:e7:fa:61: 1d:f6:81:13:04:d3:0f:b8:f5:ad:a0:4e:c0:15:1b:cf:a1:3b: 0c:7d:50:74:e1:7b:b9:7c:76:87:67:cd:f3:9d:cc:45:36:03: fc:cd:d1:1e:44:5f:4c:7c:28:69:4d:32:8f:6e:ae:f1:d0:87: 66:26:e1:3d:68:26:d5:98:7f:73:a1:07:d9:a8:24:a8:78:37: 15:5f:3c:31:67:f9:be:1a:0a:93:3f:83:be:bf:a8:19:fb:69: 5f:bb:c0:1c:72:c9:36:51:81:e0:b1:fc:a0:46:a4:31:03:72: 04:23:78:d0:05:94:c3:19:f9:f1:9f:83:69:e1:09:78:44:c7: fa:ee:99:f8:68:e3:3c:e4:c3:43:93:d3:28:43:b9:83:ab:04: a3:ec:30:7e:e2:7e:f8:f6:8f:c7:d1:3b:36:d8:0b:54:ba:f9: 72:2b:08:31:2f:21:98:73:21:83:5f:ec:a9:1c:94:06:f8:07: fb:90:c2:ec:ec:29:56:d9:34:90:68:35:9a:1b:62:ee:00:c9: c2:77:c8:12:b1:b2:02:69:36:23:46:44:71:77:f6:22:1e:b8: a0:81:86:26:bf:1c:12:73:4d:99:3c:13:41:ed:6b:a4:ec:36: 58:b3:30:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdTXSM9DslgpqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjVlNDNmOTEtZGE5Yi00YWZjLWI1M2MtN2UzNDhlYjRjNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVDZnsoKb5jl2J4HXcELYSj9UMlqk4Vm0cUN t7HrRgU4qmJWqe6zSJh1CnCrAdMlRbE1vnUStj7DpHKDXhzoZjKRrmwPLuLhfMz6 ZbNY5Faa+g1z6pmMuisG6c00+FXNdEeuCjgdHYebVqJyRD+Sjjzfo5hacp32VHj7 KyjaEyO4mUqSKJmA4OhV5fffS1T6W31Pt7CaBiq0aXH010dFfJ811RtPDTxDRXnG Pt6RNUobqg5VdtkBIAAuVdA9oOUqSlPdvYRW9dDUE9GxU5A0LL4Rd8spuo1TVfS6 p4nvikh49JRrB6wHxM9sKwhJ5oS+QNAbdGqHsFjeoi3n74yR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm30u2bt9H2ROnxEx/zSWJ+x0SSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTgyNTYyZWUtMTNlZS0z OGFiLTk4MmQtN2FkYWYzMWQ2NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokj5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAE6jLwykdTlDqy8V087uf6YR32gRME0w+49a2gTsAVG8+hOwx9UHTh e7l8dodnzfOdzEU2A/zN0R5EX0x8KGlNMo9urvHQh2Ym4T1oJtWYf3OhB9moJKh4 NxVfPDFn+b4aCpM/g76/qBn7aV+7wBxyyTZRgeCx/KBGpDEDcgQjeNAFlMMZ+fGf g2nhCXhEx/rumfho4zzkw0OT0yhDuYOrBKPsMH7ifvj2j8fROzbYC1S6+XIrCDEv IZhzIYNf7KkclAb4B/uQwuzsKVbZNJBoNZobYu4AycJ3yBKxsgJpNiNGRHF39iIe uKCBhia/HBJzTZk8E0Hta6TsNlizMLk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:29 2025 by rpki-client