$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a91455d8-76ef-3145-99b9-5c2707e19147.roa File: a91455d8-76ef-3145-99b9-5c2707e19147.roa (raw, json) Hash identifier: 3yNoGFneumGvhQIkcq8tRFzDMjbd8wlq0cP1MwMwpOw= Subject key identifier: 2B:B2:50:77:3B:D0:DA:5F:B2:F6:3C:09:31:86:B7:13:B0:99:08:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D2D672A554F4A597C480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a91455d8-76ef-3145-99b9-5c2707e19147.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d2:d6:72:a5:54:f4:a5:97:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cf8a12bb-b26a-4248-b697-251b5294128c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:89:02:03:9f:1b:ef:f3:d2:cc:8d:ed:10: b9:f6:70:9c:bd:3e:49:1c:a6:ef:87:b6:66:0f:0b: 70:15:e9:7c:8a:56:26:67:c4:1a:f8:e5:1b:b5:d2: 73:cb:b1:bf:55:66:eb:20:03:9b:f2:47:0c:81:bb: b3:a7:52:e1:ef:7f:c8:9c:d5:b8:c9:7f:50:06:a7: 1f:e4:9f:6a:1f:67:bc:d0:5b:0d:d0:71:cf:90:18: c8:82:2d:fb:d3:18:10:cd:19:14:46:94:24:54:b0: c7:6f:50:63:2a:c4:af:53:d4:be:56:d5:4a:cc:95: a5:f9:67:74:5d:a1:90:6a:87:aa:03:36:22:14:e2: 01:00:0c:79:f8:1e:d3:01:76:c5:5a:08:32:82:b7: 7d:de:7f:88:6d:cb:a2:9e:89:46:53:01:d0:cc:03: 11:74:f2:4b:f8:d7:27:3d:14:10:b0:c8:28:d2:7c: 9a:d1:ea:5b:a9:a7:54:5a:59:2a:2c:8d:9e:c0:2a: c6:0e:6f:03:9f:45:bd:f8:d0:36:0e:cd:39:5b:34: d9:9e:d5:01:58:32:ec:17:7f:9b:a8:f5:19:de:a8: 3f:cf:08:25:fd:ad:04:f5:b1:de:b0:52:59:f8:63: f0:9e:70:8d:6a:ab:6c:2f:4c:36:e0:15:62:5f:d6: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B2:50:77:3B:D0:DA:5F:B2:F6:3C:09:31:86:B7:13:B0:99:08:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a91455d8-76ef-3145-99b9-5c2707e19147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:81:be:7e:7e:60:bc:80:85:60:81:e7:3f:be:9a:51:00:54: 35:d3:73:f0:a3:e5:e9:ce:e7:74:43:d9:f1:da:b6:84:eb:24: 10:86:65:af:84:65:89:42:25:bb:40:bc:17:3e:f1:58:9b:1b: 9c:01:46:77:b6:b5:cd:d3:89:fd:fd:76:98:c0:c5:0b:c3:a1: 59:22:0c:62:63:53:50:df:54:6e:c0:36:22:ce:75:a0:01:11: 23:5a:ce:71:9e:68:5a:eb:4d:fa:16:7b:3b:d1:0c:8e:52:bb: f6:eb:d8:cb:3b:08:4f:57:79:10:b0:9e:de:a0:74:9b:de:79: 1b:ed:45:12:c1:4a:d0:46:73:95:2a:9a:51:23:02:83:0c:d1: f9:ee:5d:9d:4a:2b:37:6e:5f:1f:51:34:a4:bc:80:7c:89:50: b7:0a:c8:b0:4b:d0:25:27:2d:52:73:d4:c6:8c:4f:37:9b:10: 53:87:fb:eb:c2:80:3d:ef:4c:8f:39:7f:b9:ac:a7:86:ea:05: c9:ea:6c:3e:7f:cd:53:ce:9c:dd:d3:ab:8a:67:60:6c:8d:4a: ff:17:df:89:0a:84:c4:b0:a1:24:1c:22:41:25:bd:58:8e:b8: 6d:45:84:d0:ae:63:6c:81:09:15:dd:64:ed:19:f1:b0:14:fe: 9a:a4:c9:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdLWcqVU9KWXxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2Y4YTEyYmItYjI2YS00MjQ4LWI2OTctMjUxYjUyOTQxMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KJAgOfG+/z0syN7RC59nCcvT5JHKbvh7Zm DwtwFel8ilYmZ8Qa+OUbtdJzy7G/VWbrIAOb8kcMgbuzp1Lh73/InNW4yX9QBqcf 5J9qH2e80FsN0HHPkBjIgi370xgQzRkURpQkVLDHb1BjKsSvU9S+VtVKzJWl+Wd0 XaGQaoeqAzYiFOIBAAx5+B7TAXbFWggygrd93n+IbcuinolGUwHQzAMRdPJL+Ncn PRQQsMgo0nya0epbqadUWlkqLI2ewCrGDm8Dn0W9+NA2Ds05WzTZntUBWDLsF3+b qPUZ3qg/zwgl/a0E9bHesFJZ+GPwnnCNaqtsL0w24BViX9aE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuyUHc70NpfsvY8CTGGtxOwmQhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTkxNDU1ZDgtNzZlZi0z MTQ1LTk5YjktNWMyNzA3ZTE5MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmBvn5+YLyAhWCB5z++mlEAVDXTc/Cj5enO53RD2fHatoTrJBCGZa+E ZYlCJbtAvBc+8VibG5wBRne2tc3Tif39dpjAxQvDoVkiDGJjU1DfVG7ANiLOdaAB ESNaznGeaFrrTfoWezvRDI5Su/br2Ms7CE9XeRCwnt6gdJveeRvtRRLBStBGc5Uq mlEjAoMM0fnuXZ1KKzduXx9RNKS8gHyJULcKyLBL0CUnLVJz1MaMTzebEFOH++vC gD3vTI85f7msp4bqBcnqbD5/zVPOnN3Tq4pnYGyNSv8X34kKhMSwoSQcIkElvViO uG1FhNCuY2yBCRXdZO0Z8bAU/pqkySU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:09 2025 by rpki-client