$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa File: 9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa (raw, json) Hash identifier: p7CHkXnEDYcj1je9p1Zlqz/yk6PV41qQrFWvqWBMYrE= Subject key identifier: 35:90:1C:FA:9D:02:1E:74:BA:1F:AB:52:BF:9D:E6:EC:60:45:FB:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D450D4C6E5B8C6B97780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d4:50:d4:c6:e5:b8:c6:b9:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3ae0b169-a44f-4d41-8cc8-e8d90ce27b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:b6:e4:8b:be:3a:1e:5e:b8:b8:e0:51:8d: 16:bc:bd:ae:27:1b:f0:ca:9a:99:9d:b5:98:93:c1: 61:b6:06:39:41:80:c8:6d:91:95:d5:16:54:c0:bc: 5e:d7:e5:9b:d9:eb:27:52:74:21:cc:c5:f6:ea:86: 7c:ba:f1:85:f5:f4:cb:e8:ad:06:96:83:b7:0d:1f: da:82:c3:1e:5a:99:b6:d8:1b:95:eb:b7:ca:1b:41: fb:2d:03:d3:9c:48:b0:67:50:70:18:f6:74:eb:33: c6:29:b5:b1:87:e1:a7:10:e7:ba:e2:c3:f8:e4:fc: 30:ac:93:04:d8:09:27:4a:91:91:50:4e:fc:f9:82: 54:51:a2:b2:dd:b9:92:f3:99:99:6c:be:6d:de:24: 87:32:81:e2:aa:dc:a0:67:e7:81:b6:0b:c2:01:b4: aa:28:11:b3:67:80:83:8a:3f:01:f8:cb:e8:e8:2c: 2f:fe:c2:7a:d9:2f:25:93:3c:d4:ec:a4:c1:0f:4f: 0f:79:0e:65:08:86:90:31:1f:fc:87:5c:d1:c7:d7: 0a:10:b8:50:f2:bf:c9:ec:1b:80:47:d1:e1:5a:20: 01:d7:55:22:f8:79:1c:9c:8d:43:12:ce:69:37:ad: 71:25:e8:00:b7:61:a3:d4:cb:78:f3:33:47:fa:cf: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:90:1C:FA:9D:02:1E:74:BA:1F:AB:52:BF:9D:E6:EC:60:45:FB:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b3:16:40:3b:aa:d7:87:7c:ef:29:99:29:32:7a:c4:aa:f3: 66:e7:6c:33:40:ad:69:49:2a:bd:07:b1:42:45:e1:03:ce:2b: 02:00:7b:d5:0e:2c:1d:bf:18:8c:1c:c8:3a:a0:27:50:74:e1: be:4e:8f:d8:a0:cc:50:7a:6f:14:10:b9:d8:5f:d4:92:59:2c: 1f:46:2d:82:9f:50:1e:b6:69:0f:b1:52:d4:54:8b:b8:e7:de: 95:59:47:4e:d3:bd:4d:fa:f1:cc:5f:c3:87:88:93:b7:42:58: 55:f3:1d:2e:f9:75:46:83:ed:2e:d7:8a:14:3e:ab:0b:e3:1a: 1b:0b:c5:b2:ca:e8:86:0a:5c:b4:9a:c4:93:93:0f:a1:68:03: c3:71:a8:27:95:b9:98:13:2a:55:19:16:0e:91:f9:73:89:0c: 6d:bf:90:91:c4:78:62:77:79:a5:77:70:d2:82:c9:e2:a4:8a: 5c:85:d1:ec:98:c6:12:e7:2f:d3:22:e9:fe:ff:39:c8:48:9b: 6d:76:af:06:ae:0c:73:60:70:f5:2e:c6:d7:f0:37:aa:2a:d0: 59:07:40:ed:9e:8a:e8:3b:b2:ba:85:bd:50:97:89:23:5a:3d: 01:97:31:a0:2c:6c:24:90:42:1f:65:65:49:b6:85:82:72:a6: 99:16:8a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdRQ1MbluMa5d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FlMGIxNjktYTQ0Zi00ZDQxLThjYzgtZThkOTBjZTI3Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAule25Iu+Oh5euLjgUY0WvL2uJxvwypqZnbWY k8FhtgY5QYDIbZGV1RZUwLxe1+Wb2esnUnQhzMX26oZ8uvGF9fTL6K0GloO3DR/a gsMeWpm22BuV67fKG0H7LQPTnEiwZ1BwGPZ06zPGKbWxh+GnEOe64sP45PwwrJME 2AknSpGRUE78+YJUUaKy3bmS85mZbL5t3iSHMoHiqtygZ+eBtgvCAbSqKBGzZ4CD ij8B+Mvo6Cwv/sJ62S8lkzzU7KTBD08PeQ5lCIaQMR/8h1zRx9cKELhQ8r/J7BuA R9HhWiAB11Ui+HkcnI1DEs5pN61xJegAt2Gj1Mt48zNH+s84IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWQHPqdAh50uh+rUr+d5uxgRfsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWFmYjY1YTQtMGNlMy0z YWIzLWI5NGItZDllNWQ0ZTE2MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2zFkA7qteHfO8pmSkyesSq82bnbDNArWlJKr0HsUJF4QPOKwIAe9UO LB2/GIwcyDqgJ1B04b5Oj9igzFB6bxQQudhf1JJZLB9GLYKfUB62aQ+xUtRUi7jn 3pVZR07TvU368cxfw4eIk7dCWFXzHS75dUaD7S7XihQ+qwvjGhsLxbLK6IYKXLSa xJOTD6FoA8NxqCeVuZgTKlUZFg6R+XOJDG2/kJHEeGJ3eaV3cNKCyeKkilyF0eyY xhLnL9Mi6f7/OchIm212rwauDHNgcPUuxtfwN6oq0FkHQO2eiug7srqFvVCXiSNa PQGXMaAsbCSQQh9lZUm2hYJyppkWirI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:27 2025 by rpki-client