$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b32d1225-c0b1-3b1f-aad9-b2ec9f3da1d9.roa File: b32d1225-c0b1-3b1f-aad9-b2ec9f3da1d9.roa (raw, json) Hash identifier: 3O5bjLnr3dEJlyOQSm6C8S4rXCY2fr/lq5fnZ1TZI3E= Subject key identifier: 8C:82:C9:95:FB:9D:BB:C6:93:8E:9B:33:14:9B:E3:BD:0B:E0:17:5B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CFBB2B3E53A12C8CD000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b32d1225-c0b1-3b1f-aad9-b2ec9f3da1d9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cf:bb:2b:3e:53:a1:2c:8c:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4f3d6e16-42d0-4fed-9fc0-1dc49710ed91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:29:27:7a:2d:86:61:2a:bb:42:38:b0:ea: 58:ca:65:9e:eb:23:62:5a:26:00:4e:3d:b8:9a:75: a7:46:e0:87:06:50:a1:86:08:f2:e1:38:60:88:a6: 22:48:4b:d3:5a:bf:65:e6:33:20:54:00:dd:91:9f: bd:25:ba:00:8c:1f:5c:1b:67:2d:8c:d0:1e:89:d4: 59:d7:f8:df:4a:a2:ee:20:94:16:f0:82:b6:47:6a: a9:ed:d3:9e:1f:dd:c4:47:68:f1:ea:b6:62:83:bd: 90:f2:84:3b:38:8d:89:f1:38:2b:0f:74:9a:85:10: 34:f6:50:61:1d:72:06:e0:98:19:98:fc:4e:cf:fe: 91:91:47:e1:f0:86:ae:3d:d2:4d:18:72:fe:8e:d6: b5:13:a7:38:b8:39:3a:55:b7:32:b8:ba:7a:41:98: dc:c9:75:dc:00:c0:85:7c:e4:1b:f8:76:44:47:9d: 36:dc:cf:bb:61:4d:9d:df:58:fd:1b:df:c4:7f:7b: bb:32:1f:29:2e:e2:f7:94:8e:9f:e0:a5:76:cc:e0: 0e:73:cd:3f:8d:a6:53:8f:c5:78:05:fb:93:36:08: a7:11:a5:8b:87:6a:f3:f0:61:fb:f5:24:22:a8:2c: ae:52:ed:9a:fa:0a:70:0a:b7:a1:9e:f4:c7:1e:b0: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:82:C9:95:FB:9D:BB:C6:93:8E:9B:33:14:9B:E3:BD:0B:E0:17:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b32d1225-c0b1-3b1f-aad9-b2ec9f3da1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9e:eb:18:b0:46:c5:f6:ae:1f:34:19:d2:fb:18:9a:99:56: fd:e5:57:ac:35:9a:85:a0:2f:d5:0f:9c:bd:41:1c:65:00:45: c3:2e:5b:86:9f:02:22:79:88:16:6f:89:3f:61:09:36:f8:ee: 82:78:93:0d:80:c7:60:ad:2d:d1:18:a9:eb:37:18:00:3b:eb: 9f:7b:1b:1f:b4:90:44:9a:a0:ef:06:95:21:6c:0a:8b:5f:3d: d4:a6:bc:0b:2f:e7:af:8f:c4:88:cb:41:4f:47:20:1b:52:a4: 3a:d5:91:f5:2f:64:9c:10:b1:3a:84:db:24:93:cd:0e:5d:01: 7f:bd:69:ad:32:4a:e7:00:83:c8:cc:a6:a0:6c:7e:d0:4c:6c: f1:4c:12:0d:2b:e5:ce:35:b0:86:e3:aa:12:95:04:4a:24:24: 34:5b:5d:8c:c7:9a:df:3f:6f:ea:56:a5:22:a4:27:0d:f4:7a: 79:ae:97:da:05:a4:aa:18:39:65:cd:9f:86:10:1f:ab:c2:f5: 84:29:60:02:27:c8:43:3a:f0:9d:a9:16:cb:38:ef:3b:c9:3d: c5:89:e1:6d:80:01:3e:a0:78:0d:36:6b:bf:10:4c:48:1a:4f: cc:51:7c:18:8e:4c:c3:5c:e9:ae:4b:5f:0e:53:df:b3:f7:13: 72:a4:74:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc+7Kz5ToSyM0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGYzZDZlMTYtNDJkMC00ZmVkLTlmYzAtMWRjNDk3MTBlZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgpJ3othmEqu0I4sOpYymWe6yNiWiYATj24 mnWnRuCHBlChhgjy4ThgiKYiSEvTWr9l5jMgVADdkZ+9JboAjB9cG2ctjNAeidRZ 1/jfSqLuIJQW8IK2R2qp7dOeH93ER2jx6rZig72Q8oQ7OI2J8TgrD3SahRA09lBh HXIG4JgZmPxOz/6RkUfh8IauPdJNGHL+jta1E6c4uDk6VbcyuLp6QZjcyXXcAMCF fOQb+HZER5023M+7YU2d31j9G9/Ef3u7Mh8pLuL3lI6f4KV2zOAOc80/jaZTj8V4 BfuTNginEaWLh2rz8GH79SQiqCyuUu2a+gpwCrehnvTHHrA0eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyCyZX7nbvGk46bMxSb470L4BdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjMyZDEyMjUtYzBiMS0z YjFmLWFhZDktYjJlYzlmM2RhMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABme6xiwRsX2rh80GdL7GJqZVv3lV6w1moWgL9UPnL1BHGUARcMuW4af AiJ5iBZviT9hCTb47oJ4kw2Ax2CtLdEYqes3GAA76597Gx+0kESaoO8GlSFsCotf PdSmvAsv56+PxIjLQU9HIBtSpDrVkfUvZJwQsTqE2ySTzQ5dAX+9aa0ySucAg8jM pqBsftBMbPFMEg0r5c41sIbjqhKVBEokJDRbXYzHmt8/b+pWpSKkJw30enmul9oF pKoYOWXNn4YQH6vC9YQpYAInyEM68J2pFss47zvJPcWJ4W2AAT6geA02a78QTEga T8xRfBiOTMNc6a5LXw5T37P3E3KkdN8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:15 2025 by rpki-client