$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6d5b708-489b-3af1-aae5-1587d34464eb.roa File: f6d5b708-489b-3af1-aae5-1587d34464eb.roa (raw, json) Hash identifier: g+jfQPe1aUBmTDoCxTK3+s0EqdkY/Vzl+rtQefbEIN8= Subject key identifier: C0:5C:56:E6:3D:92:EC:79:2B:E9:0E:8D:22:E3:98:21:60:E7:74:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D4EF22421D3567995900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6d5b708-489b-3af1-aae5-1587d34464eb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d4:ef:22:42:1d:35:67:99:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=80b03691-bfaa-4513-84f3-f208845a00ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:0b:5a:42:f3:7b:4c:1e:8c:1d:a9:60:f8: e1:90:ca:32:f5:c7:89:35:ba:db:bd:18:57:05:cf: ae:e3:75:dc:3c:df:07:dc:cb:36:3c:be:48:9a:33: db:c4:84:d2:26:bd:20:9a:fa:aa:0c:56:5c:00:97: 5e:c9:2c:3d:c7:4e:85:44:cd:d4:d5:96:a6:7e:84: 6d:84:ba:dd:f1:17:00:c7:28:25:0e:d3:c6:28:79: 7e:fa:80:37:b6:68:0b:fc:27:0f:27:72:b8:9d:91: 1c:05:8f:51:60:7d:97:1d:b7:64:ce:a2:2e:68:7e: e0:6b:33:f6:cb:6c:13:ca:06:67:ab:ed:71:e8:f4: 49:22:a1:79:db:59:5f:cf:82:55:55:23:ce:05:2e: a2:ee:c3:38:3a:4a:a0:14:74:4b:9a:43:91:05:5b: 45:28:96:fa:67:a7:a2:e7:9d:37:23:f2:58:f3:1c: a0:b6:86:c2:63:81:a8:25:3e:41:3f:1d:74:3f:b4: c1:3d:a4:45:dc:56:f2:33:8c:ef:33:6d:1a:99:60: 3e:15:b6:23:ea:60:d9:d9:5b:8d:a4:4e:a3:e8:2f: a5:9b:4e:5e:2a:b7:21:17:9d:b8:9e:98:ab:39:c5: 9a:bb:5e:fb:76:d1:8c:fd:95:c0:8d:4b:5c:b2:6c: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5C:56:E6:3D:92:EC:79:2B:E9:0E:8D:22:E3:98:21:60:E7:74:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6d5b708-489b-3af1-aae5-1587d34464eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:55:fa:4f:21:f8:21:22:73:3a:04:6e:b3:f6:85:c6:74:5d: 35:e8:17:60:94:23:56:14:1f:a7:4b:04:35:fe:69:06:cd:0a: ad:71:ea:8a:a8:b5:7b:a5:2a:bd:9c:20:0c:f5:59:60:71:68: 04:6e:97:9a:99:69:a5:dc:85:63:6e:02:b2:57:ce:0c:95:d9: 4a:32:c2:0a:0e:e3:53:ac:32:8b:ff:78:47:cd:d8:a6:74:76: 1d:d1:57:af:51:a6:c1:d6:25:39:d4:d3:98:88:15:28:26:e2: ad:ac:f8:4e:ea:dc:1e:dc:2a:a6:6d:1f:40:1e:ce:36:40:37: 4e:05:1d:de:81:30:f3:98:54:fd:14:da:0e:b5:89:32:d5:9d: 38:4e:39:19:2e:46:cc:03:b9:f2:1b:cd:1b:a5:7f:ad:65:e1: 8c:1e:1b:e1:2a:b3:db:e3:50:b0:bc:a6:8e:a2:ee:0c:a9:76: fe:e3:d2:5c:f6:a8:57:d5:d9:5d:b0:43:1f:6b:84:7f:bc:13: 0d:2e:da:3a:bb:22:ed:9e:c1:91:72:c6:22:6e:70:96:9d:a9: 59:98:6d:1b:7c:63:f7:5f:2d:9f:84:81:3b:3e:08:5e:eb:9c: a6:69:d3:94:cb:67:20:b8:32:b3:79:53:37:12:84:d3:5d:ca: 6e:76:45:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdTvIkIdNWeZWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODBiMDM2OTEtYmZhYS00NTEzLTg0ZjMtZjIwODg0NWEwMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8QLWkLze0wejB2pYPjhkMoy9ceJNbrbvRhX Bc+u43XcPN8H3Ms2PL5ImjPbxITSJr0gmvqqDFZcAJdeySw9x06FRM3U1ZamfoRt hLrd8RcAxyglDtPGKHl++oA3tmgL/CcPJ3K4nZEcBY9RYH2XHbdkzqIuaH7gazP2 y2wTygZnq+1x6PRJIqF521lfz4JVVSPOBS6i7sM4OkqgFHRLmkORBVtFKJb6Z6ei 5503I/JY8xygtobCY4GoJT5BPx10P7TBPaRF3FbyM4zvM20amWA+FbYj6mDZ2VuN pE6j6C+lm05eKrchF524npirOcWau177dtGM/ZXAjUtcsmxLdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBcVuY9kux5K+kOjSLjmCFg53RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZkNWI3MDgtNDg5Yi0z YWYxLWFhZTUtMTU4N2QzNDQ2NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxV+k8h+CEiczoEbrP2hcZ0XTXoF2CUI1YUH6dLBDX+aQbNCq1x6oqo tXulKr2cIAz1WWBxaARul5qZaaXchWNuArJXzgyV2UoywgoO41OsMov/eEfN2KZ0 dh3RV69RpsHWJTnU05iIFSgm4q2s+E7q3B7cKqZtH0AezjZAN04FHd6BMPOYVP0U 2g61iTLVnThOORkuRswDufIbzRulf61l4YweG+Eqs9vjULC8po6i7gypdv7j0lz2 qFfV2V2wQx9rhH+8Ew0u2jq7Iu2ewZFyxiJucJadqVmYbRt8Y/dfLZ+EgTs+CF7r nKZp05TLZyC4MrN5UzcShNNdym52RTE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:50 2025 by rpki-client