$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa File: ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa (raw, json) Hash identifier: 65kJxxaK12gKDosZ7DGgSEWPQnWO0ZTAQ2yFk9ai3fg= Subject key identifier: 69:53:4A:F0:2C:6B:AA:8A:29:0C:64:E3:35:3B:5C:AD:44:7A:0E:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CE92A3A5436769FFFC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ce:92:a3:a5:43:67:69:ff:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c182b5fb-bea3-4000-a036-7f0f62dcdace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:6f:61:31:08:4d:87:43:fa:0d:99:8a:41: b6:66:ab:ca:b3:a7:3f:c5:72:29:67:3a:b8:77:05: 17:24:48:50:7b:91:29:04:49:3d:b9:d6:25:71:54: f7:73:e7:91:a3:15:14:47:8b:f5:f0:86:27:98:27: 1d:38:e2:c0:a4:4e:d4:1e:c9:a2:4a:85:4a:45:c7: 41:4c:30:d9:dc:ac:4f:d3:5f:61:ee:11:77:6a:4c: 39:33:29:ed:21:ff:76:bd:95:ae:be:42:ea:57:31: e7:80:3f:be:14:f4:82:8a:05:b2:57:be:da:d0:5f: ea:7a:d3:65:fa:dc:7a:53:f9:28:09:1b:7c:b2:7b: 0a:46:be:79:a3:d0:0b:29:64:ff:c4:42:cc:c0:d8: b5:72:3b:2d:d5:86:cf:3d:e6:21:cf:36:a6:53:2f: 2e:f0:2f:b3:7d:53:d7:e9:01:32:0d:68:c4:c9:d5: b6:b6:6b:78:40:b4:50:a0:46:57:7d:58:6a:78:3a: d0:fc:0c:bf:8e:73:af:14:18:4d:cd:ac:3d:b7:31: 52:0e:d6:5f:ca:20:ab:56:da:fc:72:dd:2d:f0:ce: 51:34:0c:45:a0:87:24:1d:5f:0a:a1:e9:8b:41:4d: 08:84:81:9f:52:39:81:b1:52:ce:13:ec:36:a1:b1: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:53:4A:F0:2C:6B:AA:8A:29:0C:64:E3:35:3B:5C:AD:44:7A:0E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7b:11:90:14:d8:26:87:f1:31:7c:3d:71:ea:e0:8c:a4:c0: bb:46:2b:83:79:aa:c8:9a:e7:fe:04:68:3e:20:49:4c:f2:ca: db:8c:03:38:98:1a:72:e1:c7:a4:5d:58:74:94:48:62:fe:0b: aa:08:1b:6c:03:e7:d3:28:cf:59:d1:2f:97:a9:47:80:4a:71: 32:14:31:b3:52:83:59:ca:f4:2b:9c:86:ae:f5:99:5d:e7:07: 5a:52:b5:19:7c:45:f4:08:c8:ac:fb:68:1d:59:38:d1:87:cd: 91:dd:9f:7f:18:b5:45:4e:cf:6a:91:48:cb:8e:6f:5d:e3:79: f3:0f:ff:fb:6a:98:be:e5:71:e7:1d:d9:7d:31:aa:7b:31:c6: 67:05:81:48:7f:09:4c:85:c4:49:df:f4:b0:70:e4:bc:ca:d8: bc:6a:b0:c0:71:0e:79:54:0e:5b:d5:17:ba:a5:5b:74:40:04: 66:e1:b1:e7:08:e7:c7:75:cf:14:a7:39:aa:2c:37:db:31:11: d1:ed:a3:80:75:3e:e7:b2:8f:82:cc:37:7f:db:3e:ad:a6:7f: 8b:90:00:09:2b:14:66:cd:71:cc:72:b1:6c:f4:ce:ed:3d:1c: 30:0a:c4:03:7f:c0:d5:b4:bd:c1:59:54:5f:b8:7c:6d:60:af: 52:20:21:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc6So6VDZ2n//AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzE4MmI1ZmItYmVhMy00MDAwLWEwMzYtN2YwZjYyZGNkYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiVvYTEITYdD+g2ZikG2ZqvKs6c/xXIpZzq4 dwUXJEhQe5EpBEk9udYlcVT3c+eRoxUUR4v18IYnmCcdOOLApE7UHsmiSoVKRcdB TDDZ3KxP019h7hF3akw5MyntIf92vZWuvkLqVzHngD++FPSCigWyV77a0F/qetNl +tx6U/koCRt8snsKRr55o9ALKWT/xELMwNi1cjst1YbPPeYhzzamUy8u8C+zfVPX 6QEyDWjEydW2tmt4QLRQoEZXfVhqeDrQ/Ay/jnOvFBhNzaw9tzFSDtZfyiCrVtr8 ct0t8M5RNAxFoIckHV8KoemLQU0IhIGfUjmBsVLOE+w2obFp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlTSvAsa6qKKQxk4zU7XK1Eeg6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU1ZjFkMWQtM2I4Ny0z MzQ5LTk1MWEtZjBiNmY1ZjAyNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD57EZAU2CaH8TF8PXHq4IykwLtGK4N5qsia5/4EaD4gSUzyytuMAziY GnLhx6RdWHSUSGL+C6oIG2wD59Moz1nRL5epR4BKcTIUMbNSg1nK9Cuchq71mV3n B1pStRl8RfQIyKz7aB1ZONGHzZHdn38YtUVOz2qRSMuOb13jefMP//tqmL7lcecd 2X0xqnsxxmcFgUh/CUyFxEnf9LBw5LzK2LxqsMBxDnlUDlvVF7qlW3RABGbhsecI 58d1zxSnOaosN9sxEdHto4B1Pueyj4LMN3/bPq2mf4uQAAkrFGbNccxysWz0zu09 HDAKxAN/wNW0vcFZVF+4fG1gr1IgIbY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:18 2025 by rpki-client