$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa File: f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa (raw, json) Hash identifier: 0WCfqY2VfaNKnTiqKDoKQBPVae8HxbPWDmC7WwFLPc0= Subject key identifier: B9:EE:B5:E8:24:0E:3D:49:94:1A:A5:AC:C4:A6:A1:40:64:B4:9D:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D3F7585F37559EBB5B2F Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d3:f7:58:5f:37:55:9e:bb:5b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=247ff9b0-7f2c-4a42-81b3-04867742ccab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:2c:62:be:be:d9:2e:54:0c:06:af:08:6e: c6:c4:e8:1b:ab:b3:c2:23:91:40:29:85:a4:03:0b: e0:0a:91:7c:75:26:39:7b:06:9e:99:9b:77:25:5d: 4e:66:79:e8:e2:7d:a9:9d:e3:68:af:6c:b0:45:ef: 2c:f8:76:c0:7b:c6:11:7a:20:fd:a9:31:a7:06:09: af:37:53:45:c8:90:2c:e5:ec:0c:4c:13:0e:48:cc: 0b:23:3d:97:3e:eb:bf:1b:a0:80:96:e3:94:bb:d3: 52:89:8c:a3:53:ad:ab:c1:e1:6d:03:80:27:f1:ad: 62:40:73:d8:c9:55:a2:a5:0a:8f:ce:a6:f0:d3:d1: 5e:6c:14:76:5d:7c:d4:2e:43:cc:a8:6f:ce:c4:99: 3a:e5:f9:03:9c:04:ec:34:53:c9:d6:7b:48:ee:c6: 87:67:3a:ff:97:38:98:f9:93:be:3b:c1:97:02:30: c5:3d:6c:cf:a5:f4:ee:9c:80:18:d2:fd:3b:08:fb: 28:ee:d1:b6:b7:30:d8:0b:a1:c2:64:82:97:24:2f: 5b:a3:cb:fc:b0:88:f6:dc:9a:ea:d4:e6:fd:26:0f: 17:f0:01:8a:e5:76:11:b1:ff:e8:4a:e0:6d:53:45: 93:22:a3:bc:01:34:e0:d9:c2:b9:a6:3e:08:44:50: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EE:B5:E8:24:0E:3D:49:94:1A:A5:AC:C4:A6:A1:40:64:B4:9D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:cb:f0:5c:8f:28:cc:6a:af:c0:09:bd:0e:95:73:e0:c7:89: f3:7a:d4:49:bd:87:c7:72:df:1e:69:f0:01:48:ce:da:e1:02: 84:ed:52:6f:f3:cd:5d:dc:a6:a3:b0:bf:7e:b0:d2:bb:30:25: 78:17:9b:9c:ca:8a:47:f4:c9:5e:a2:1f:98:87:76:ca:e0:ae: da:f4:51:94:42:82:f6:4a:7f:18:24:2e:03:b1:c6:41:27:78: c2:24:ce:a6:8e:bb:23:a8:bb:c6:35:99:f6:8d:19:85:0b:07: 33:12:22:a6:c8:a6:ad:87:02:e9:9d:d6:4e:15:e4:39:b2:b3: a7:c5:05:57:c4:a2:e9:aa:6c:3f:e9:45:a0:30:14:05:ed:fc: 26:ac:d1:e9:81:e5:20:78:a3:be:02:bf:41:3e:e5:ac:00:99: b9:5a:ff:2a:c6:9a:a9:16:c1:60:43:90:90:32:0a:16:24:f6: 3d:71:7a:f5:8d:d5:71:88:aa:82:fa:fa:bb:6a:9e:b3:e5:fd: 06:f6:28:73:5f:46:e3:e3:76:cf:f9:11:7b:bf:9b:0e:41:ff: cf:7c:25:da:d1:92:b8:8e:45:79:83:65:62:2d:7b:04:fc:9c: cc:e1:4b:d0:fd:b7:b4:9d:1a:c4:ac:9d:84:0d:5f:d4:c0:e6: 74:4b:b1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdP3WF83VZ67Wy8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjQ3ZmY5YjAtN2YyYy00YTQyLTgxYjMtMDQ4Njc3NDJjY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0sYr6+2S5UDAavCG7GxOgbq7PCI5FAKYWk AwvgCpF8dSY5ewaemZt3JV1OZnno4n2pneNor2ywRe8s+HbAe8YReiD9qTGnBgmv N1NFyJAs5ewMTBMOSMwLIz2XPuu/G6CAluOUu9NSiYyjU62rweFtA4An8a1iQHPY yVWipQqPzqbw09FebBR2XXzULkPMqG/OxJk65fkDnATsNFPJ1ntI7saHZzr/lziY +ZO+O8GXAjDFPWzPpfTunIAY0v07CPso7tG2tzDYC6HCZIKXJC9bo8v8sIj23Jrq 1Ob9Jg8X8AGK5XYRsf/oSuBtU0WTIqO8ATTg2cK5pj4IRFCFrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnutegkDj1JlBqlrMSmoUBktJ3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjY3YWE3MWYtNzgwMi0z ZWQ0LWJlZDEtNmNlZmFhMDBkOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXL8FyPKMxqr8AJvQ6Vc+DHifN61Em9h8dy3x5p8AFIztrhAoTtUm/z zV3cpqOwv36w0rswJXgXm5zKikf0yV6iH5iHdsrgrtr0UZRCgvZKfxgkLgOxxkEn eMIkzqaOuyOou8Y1mfaNGYULBzMSIqbIpq2HAumd1k4V5Dmys6fFBVfEoumqbD/p RaAwFAXt/Cas0emB5SB4o74Cv0E+5awAmbla/yrGmqkWwWBDkJAyChYk9j1xevWN 1XGIqoL6+rtqnrPl/Qb2KHNfRuPjds/5EXu/mw5B/898JdrRkriORXmDZWItewT8 nMzhS9D9t7SdGsSsnYQNX9TA5nRLsa0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:53 2025 by rpki-client