$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98798328-000a-3f1f-853f-273f9323b632.roa File: 98798328-000a-3f1f-853f-273f9323b632.roa (raw, json) Hash identifier: OSE02sdViMIxhkoU0zlXVtJ6bQyV1MD69gQJTOhrIsk= Subject key identifier: 95:47:E5:99:96:E5:04:8F:18:B2:12:6C:8E:76:41:5A:0A:AC:54:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CDD22F29178582999EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98798328-000a-3f1f-853f-273f9323b632.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cd:d2:2f:29:17:85:82:99:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=88473e6d-398b-486f-83e9-6dae0d9a8202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:c5:5a:73:d6:b7:51:b8:37:73:3b:1c:e5: fa:ca:c9:2f:07:97:54:22:76:58:76:3a:92:a4:24: 93:d0:4a:7b:75:0a:54:a4:62:9f:42:13:ca:68:ab: 22:4c:aa:cc:4c:8c:9b:49:7c:24:37:6b:61:25:f6: bf:6a:c6:be:b4:4f:cb:45:16:54:4e:f3:1d:0f:1e: e7:24:86:e1:b2:6f:98:18:41:cd:d6:20:ed:c3:dd: e6:fa:89:9c:6e:75:9d:07:35:df:e2:70:a8:5d:55: 9a:d1:60:ba:48:5d:94:67:40:e0:de:10:b7:6e:9c: fe:23:d8:ff:95:07:65:6d:b5:c2:47:75:7f:7d:60: bd:d2:05:a8:f5:de:df:51:4e:4c:37:27:6c:91:4d: 1b:87:9b:7b:b5:e2:d4:5a:97:5b:f0:a6:5b:47:ed: 2a:60:ee:03:61:7e:d1:ba:eb:93:ef:60:58:fb:02: 40:c4:e7:67:42:b4:69:8c:d6:d2:fe:c3:92:67:d1: a0:21:6e:c0:dd:57:54:34:84:26:0a:7f:1d:57:0f: f3:a6:25:de:5e:3d:67:80:4c:73:28:b3:2e:c1:7e: 25:f2:bc:4e:95:8c:42:19:5b:65:1b:94:34:90:28: f8:27:98:d1:c3:95:b4:d0:12:35:4d:28:52:34:41: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:47:E5:99:96:E5:04:8F:18:B2:12:6C:8E:76:41:5A:0A:AC:54:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98798328-000a-3f1f-853f-273f9323b632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:68:63:7a:03:18:c9:ec:b9:ac:da:e9:55:1f:3a:80:6c:52: fe:0f:0f:b5:8d:e7:94:0f:c8:02:c2:9c:29:51:72:3a:67:50: 32:93:b0:67:cd:83:70:77:b2:8c:26:02:ce:91:b1:7b:5e:46: 67:91:8a:29:aa:9f:21:8c:d8:dc:72:38:19:e7:a3:19:99:2f: d0:f5:07:57:d9:06:97:82:07:b9:6f:e3:f8:6e:b9:47:cc:55: 06:24:30:9b:05:3d:6f:c3:6a:01:9c:fd:92:2d:d3:10:f3:9f: 0d:e2:28:fb:3b:bf:90:4b:53:be:61:b1:d3:49:9c:bc:8a:75: b7:02:e4:a3:6d:f4:c9:9f:32:d4:80:f2:e6:bd:64:67:84:39: 24:24:22:87:37:b9:11:48:c8:a2:56:74:75:90:f4:a6:80:f2: ee:79:a6:fa:15:88:1b:7b:79:e1:0b:a9:1e:ca:63:47:be:d7: fa:06:5b:3e:dc:a7:1f:07:90:3a:c5:23:48:a3:9b:ed:3e:01: 25:39:0e:56:b5:4d:a4:ef:19:68:15:88:f1:cb:89:10:51:95: 5b:14:9a:a9:b8:42:33:25:9d:91:94:89:d7:e3:46:f9:c2:ae: fa:7c:6b:5c:25:1a:33:3d:76:0a:a8:ab:96:e2:fa:c9:fc:26: a9:95:1d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc3SLykXhYKZnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODg0NzNlNmQtMzk4Yi00ODZmLTgzZTktNmRhZTBkOWE4MjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu3FWnPWt1G4N3M7HOX6yskvB5dUInZYdjqS pCST0Ep7dQpUpGKfQhPKaKsiTKrMTIybSXwkN2thJfa/asa+tE/LRRZUTvMdDx7n JIbhsm+YGEHN1iDtw93m+omcbnWdBzXf4nCoXVWa0WC6SF2UZ0Dg3hC3bpz+I9j/ lQdlbbXCR3V/fWC90gWo9d7fUU5MNydskU0bh5t7teLUWpdb8KZbR+0qYO4DYX7R uuuT72BY+wJAxOdnQrRpjNbS/sOSZ9GgIW7A3VdUNIQmCn8dVw/zpiXeXj1ngExz KLMuwX4l8rxOlYxCGVtlG5Q0kCj4J5jRw5W00BI1TShSNEEAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVH5ZmW5QSPGLISbI52QVoKrFSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTg3OTgzMjgtMDAwYS0z ZjFmLTg1M2YtMjczZjkzMjNiNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdoY3oDGMnsuaza6VUfOoBsUv4PD7WN55QPyALCnClRcjpnUDKTsGfN g3B3sowmAs6RsXteRmeRiimqnyGM2NxyOBnnoxmZL9D1B1fZBpeCB7lv4/huuUfM VQYkMJsFPW/DagGc/ZIt0xDznw3iKPs7v5BLU75hsdNJnLyKdbcC5KNt9MmfMtSA 8ua9ZGeEOSQkIoc3uRFIyKJWdHWQ9KaA8u55pvoViBt7eeELqR7KY0e+1/oGWz7c px8HkDrFI0ijm+0+ASU5Dla1TaTvGWgViPHLiRBRlVsUmqm4QjMlnZGUidfjRvnC rvp8a1wlGjM9dgqoq5bi+sn8JqmVHfQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:54 2025 by rpki-client