$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa File: 95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa (raw, json) Hash identifier: cvGtV3V2Cf8KEh7ufFKYVxVpsCO2w5ZB1ZpcUNIHKUU= Subject key identifier: 43:77:E9:F2:6A:81:8E:6D:FA:DB:CA:B3:3F:92:8B:CB:B8:26:65:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CF19111E8301C6FE5020 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cf:19:11:1e:83:01:c6:fe:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=275878ac-7daf-4d2b-9c81-f74c188044e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:ce:1b:16:6c:97:2d:5d:98:24:78:0f:da: d7:0d:27:10:78:f5:22:47:72:27:1b:3c:09:12:46: bb:e1:67:6e:7f:58:8b:c5:59:ce:4e:94:8e:72:a3: 93:ef:a2:ac:6e:99:e2:d1:5d:ee:f8:52:87:c0:f8: 30:92:9f:05:77:8d:89:4b:66:ca:5f:e6:da:9d:17: f3:d5:4d:4f:f8:6b:53:71:86:dd:21:80:6d:56:16: 53:e0:cb:ec:a3:6b:0b:81:a4:09:7d:24:ae:92:f6: d3:5a:60:ee:50:9c:45:c3:9e:6b:0b:21:d8:33:5c: d3:af:e9:dc:a9:c9:30:0a:ae:5d:96:aa:f9:3e:09: 19:35:68:96:fc:46:5f:86:ff:2d:12:53:5c:ff:81: c5:f1:63:44:eb:95:f0:9d:26:ee:e4:3e:4c:01:1d: e1:1d:15:83:d0:0b:35:4a:15:e0:50:ce:24:31:25: 8c:d9:f7:7b:fd:0a:ea:f6:ca:8a:44:a6:ba:67:c2: d9:be:da:4b:70:29:fd:fe:c6:7d:4a:64:9c:fd:06: be:19:94:e3:8e:80:d5:16:81:0e:95:6b:e9:1b:5b: c7:29:58:c8:b1:16:e9:ef:e0:e9:de:8d:ed:59:75: db:79:80:87:24:53:20:9e:6d:ea:b4:ae:45:9a:34: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:77:E9:F2:6A:81:8E:6D:FA:DB:CA:B3:3F:92:8B:CB:B8:26:65:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:96:64:83:16:bc:f6:a7:28:f3:17:46:6b:96:75:9b:4f:a9: de:7b:8e:e6:7f:f0:b5:51:db:a4:36:ab:e0:52:76:52:5f:de: d3:b8:45:00:97:12:2d:d1:9d:3b:98:b6:db:98:66:b3:56:8c: ea:ed:30:b6:49:38:9c:d8:d7:8d:71:6c:24:1f:e9:98:76:1c: e1:2e:b0:5a:40:dc:9a:22:f8:31:74:13:b4:07:96:1f:85:03: 5b:0e:1a:86:a3:08:6e:da:61:4b:cc:c7:5f:9b:de:fc:d7:27: 35:de:ae:b5:27:d9:10:92:b1:c9:05:5b:d4:4d:ee:f9:2f:92: 8d:29:64:e3:57:0a:cc:7a:a5:5b:4f:5e:5b:a1:8f:f3:fe:27: 09:2c:48:76:5d:82:33:69:61:cc:6a:ea:97:a7:25:2c:a6:b0: 46:8e:4f:be:f0:00:34:9f:03:12:86:39:24:7d:d6:38:23:a9: f3:eb:6c:27:6f:2f:23:54:95:c8:3a:45:c5:ce:b2:e1:7b:ab: ca:ee:81:88:4a:5b:36:cd:8e:46:88:52:1f:93:2b:d5:e6:9b: 44:ad:d1:52:e0:1f:0e:0e:92:bf:2a:2c:17:03:65:40:10:0b: 45:d9:42:5e:ca:10:fc:56:8a:1c:56:b6:cf:30:32:58:fa:75: 6f:ff:15:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc8ZER6DAcb+UCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc1ODc4YWMtN2RhZi00ZDJiLTljODEtZjc0YzE4ODA0NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/HOGxZsly1dmCR4D9rXDScQePUiR3InGzwJ Eka74Wduf1iLxVnOTpSOcqOT76Ksbpni0V3u+FKHwPgwkp8Fd42JS2bKX+banRfz 1U1P+GtTcYbdIYBtVhZT4Mvso2sLgaQJfSSukvbTWmDuUJxFw55rCyHYM1zTr+nc qckwCq5dlqr5PgkZNWiW/EZfhv8tElNc/4HF8WNE65XwnSbu5D5MAR3hHRWD0As1 ShXgUM4kMSWM2fd7/Qrq9sqKRKa6Z8LZvtpLcCn9/sZ9SmSc/Qa+GZTjjoDVFoEO lWvpG1vHKVjIsRbp7+Dp3o3tWXXbeYCHJFMgnm3qtK5FmjTsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN36fJqgY5t+tvKsz+Si8u4JmXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTVkNTE5ZjItOWU3Zi0z NjJlLWFjYjQtNjYyN2MyZjFlZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokg2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaWZIMWvPanKPMXRmuWdZtPqd57juZ/8LVR26Q2q+BSdlJf3tO4RQCX Ei3RnTuYttuYZrNWjOrtMLZJOJzY141xbCQf6Zh2HOEusFpA3Joi+DF0E7QHlh+F A1sOGoajCG7aYUvMx1+b3vzXJzXerrUn2RCSsckFW9RN7vkvko0pZONXCsx6pVtP Xluhj/P+JwksSHZdgjNpYcxq6penJSymsEaOT77wADSfAxKGOSR91jgjqfPrbCdv LyNUlcg6RcXOsuF7q8rugYhKWzbNjkaIUh+TK9Xmm0St0VLgHw4Okr8qLBcDZUAQ C0XZQl7KEPxWihxWts8wMlj6dW//FSs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:22 2025 by rpki-client