$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621f4149-05d2-3d54-b133-5ee3245b6dc0.roa File: 621f4149-05d2-3d54-b133-5ee3245b6dc0.roa (raw, json) Hash identifier: dg6EkKdIykRaC8Q8a71BfG0HB+pVd09yN8i1P3m1Jh8= Subject key identifier: 74:30:14:0A:85:12:FB:2A:86:56:F5:4C:27:C3:8F:57:06:67:E1:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CDF8B3361E1C6E223B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621f4149-05d2-3d54-b133-5ee3245b6dc0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cd:f8:b3:36:1e:1c:6e:22:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=373a3de3-57bb-46e4-9e9c-55d7c37ab549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:ba:51:b3:18:11:f4:22:8e:3f:d1:84:b7: d0:27:b2:21:17:5f:e3:c3:76:ab:95:6a:16:55:0e: 35:b1:a6:39:79:17:91:af:28:dd:ed:b4:df:d3:0e: 87:fa:ce:a1:f4:89:e7:91:20:97:ac:f6:e7:5d:dd: f8:b6:8b:f4:f4:3c:af:48:6b:9d:da:d8:93:ef:54: 59:3b:af:d8:4b:60:e8:f0:85:f2:85:3c:33:7e:a6: 0e:44:4d:17:6a:bc:9e:4d:bf:bc:c9:03:94:4b:d6: 6e:56:a8:9a:8f:cc:ee:69:0a:93:9e:1a:6a:a1:28: 24:8f:84:52:95:3b:24:a4:3d:a9:67:64:2e:b7:04: 0d:97:ff:1f:db:77:15:f3:00:50:5d:9d:a2:7a:5f: 83:e3:c1:3f:ed:b4:32:28:58:47:f8:d6:bd:67:37: 18:a0:0c:0a:cf:8f:c8:f1:db:de:dd:35:80:98:5d: b6:0f:ee:ed:90:13:89:ef:5f:9d:99:88:40:d1:75: 98:3d:9e:e8:88:85:17:2b:d3:0a:e1:d2:70:7c:bf: 7f:65:88:83:00:28:e6:7e:9c:07:f8:3b:f1:5e:66: 64:fa:39:0c:a9:4e:36:34:1a:2f:a0:01:f8:37:3b: fd:73:dc:3b:23:47:f3:df:db:56:d6:2e:7c:e6:99: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:14:0A:85:12:FB:2A:86:56:F5:4C:27:C3:8F:57:06:67:E1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621f4149-05d2-3d54-b133-5ee3245b6dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c8:fa:c2:63:0a:d2:22:d0:c2:17:76:b2:2f:59:2f:d1:d5: 87:c3:cf:0f:6e:f0:96:ea:22:76:ac:c6:d3:59:4f:a5:e6:26: 29:77:b6:5a:99:91:c7:cb:d4:5a:21:eb:bb:b9:c3:24:38:52: 89:ea:94:61:34:e1:eb:8a:49:c7:1d:c6:f6:0c:c5:43:d4:49: 90:f2:40:58:40:e3:e2:a0:e6:f9:c1:a4:4b:65:be:fd:66:af: 5d:e1:64:f5:8f:96:a6:8d:0b:f3:f9:60:c4:73:56:76:4e:ab: 91:a5:dd:be:69:32:45:8d:92:a7:a3:52:2d:5a:83:22:b7:35: 77:ec:49:2d:5c:27:c0:13:c5:2d:c9:51:e5:90:65:da:a7:ba: a6:ad:4c:df:62:4d:a2:0d:18:e6:12:35:c5:2a:dd:15:c7:28: c3:44:54:b7:f8:4b:70:c2:80:16:3e:c5:1d:f1:ba:01:cb:6b: 8e:ec:da:1d:1f:a1:93:ea:4b:f3:7c:7c:59:e8:86:c0:42:cd: e0:be:d6:6d:ed:c5:aa:ca:4f:a9:bc:3e:fb:35:40:34:93:80: ef:95:93:23:a6:f6:b9:16:1c:cf:ae:32:f0:b0:7d:5b:cb:4e: 32:3e:cf:ee:95:5a:f7:b9:16:1c:66:93:be:6b:a4:1b:8e:de: e2:38:e5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc34szYeHG4iOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzczYTNkZTMtNTdiYi00NmU0LTllOWMtNTVkN2MzN2FiNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFG6UbMYEfQijj/RhLfQJ7IhF1/jw3arlWoW VQ41saY5eReRryjd7bTf0w6H+s6h9InnkSCXrPbnXd34tov09DyvSGud2tiT71RZ O6/YS2Do8IXyhTwzfqYORE0XaryeTb+8yQOUS9ZuVqiaj8zuaQqTnhpqoSgkj4RS lTskpD2pZ2QutwQNl/8f23cV8wBQXZ2iel+D48E/7bQyKFhH+Na9ZzcYoAwKz4/I 8dve3TWAmF22D+7tkBOJ71+dmYhA0XWYPZ7oiIUXK9MK4dJwfL9/ZYiDACjmfpwH +DvxXmZk+jkMqU42NBovoAH4Nzv9c9w7I0fz39tW1i585pn/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQwFAqFEvsqhlb1TCfDj1cGZ+G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIxZjQxNDktMDVkMi0z ZDU0LWIxMzMtNWVlMzI0NWI2ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/I+sJjCtIi0MIXdrIvWS/R1YfDzw9u8JbqInasxtNZT6XmJil3tlqZ kcfL1Foh67u5wyQ4UonqlGE04euKSccdxvYMxUPUSZDyQFhA4+Kg5vnBpEtlvv1m r13hZPWPlqaNC/P5YMRzVnZOq5Gl3b5pMkWNkqejUi1agyK3NXfsSS1cJ8ATxS3J UeWQZdqnuqatTN9iTaINGOYSNcUq3RXHKMNEVLf4S3DCgBY+xR3xugHLa47s2h0f oZPqS/N8fFnohsBCzeC+1m3txarKT6m8Pvs1QDSTgO+VkyOm9rkWHM+uMvCwfVvL TjI+z+6VWve5Fhxmk75rpBuO3uI45f0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:00:06 2025 by rpki-client