$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fff87f68-9573-3200-ab5e-ec76f0b20812.roa File: fff87f68-9573-3200-ab5e-ec76f0b20812.roa (raw, json) Hash identifier: 2qc397QEQblW0xysajOrYHADsslM2MEOYpDQ/E+0A2Y= Subject key identifier: 15:E0:66:68:96:E4:7D:55:BB:99:F8:81:9D:2B:42:BB:C2:F0:30:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D0281B3156AF0BEA2C36 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fff87f68-9573-3200-ab5e-ec76f0b20812.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 162.72.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d0:28:1b:31:56:af:0b:ea:2c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=25bc2793-b996-4550-b9e7-e4848d4f6a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:b4:02:77:29:ab:4e:9e:91:3f:45:68:1f: 53:41:55:89:66:61:f8:ac:e9:5a:34:64:87:ff:10: 6e:08:f5:e5:e5:bd:9b:df:b5:8b:70:be:d1:5a:56: 37:0c:5a:1a:83:7c:03:70:1f:23:70:d9:1e:6d:d1: db:3c:3a:80:99:dc:34:cc:21:9a:af:61:ba:7e:5d: c8:37:ba:b4:cc:2e:77:0b:d7:94:25:36:fc:32:00: 3e:95:b9:c0:26:b8:f6:5a:9b:f7:36:7f:e4:27:ca: c4:46:dc:f4:16:38:22:84:69:96:67:2e:0c:d9:56: 49:b5:4d:cb:af:cc:56:17:ef:4f:25:04:14:2c:83: 4a:45:16:4e:f6:43:e4:e7:61:f7:37:e8:4d:32:61: 26:24:98:dd:77:d3:50:1c:ae:29:a8:55:b6:4c:88: ab:16:d2:8d:61:6a:71:75:42:40:22:7a:1f:7d:e7: a3:2d:df:08:ef:8a:33:04:21:ef:a3:8e:69:77:f9: 30:33:68:d5:33:4f:83:ec:50:29:07:a8:7f:95:77: d5:d3:3b:cf:4e:8e:2f:f3:8b:40:ac:62:44:db:bc: 14:c0:5a:98:1c:65:ba:7b:39:e3:d3:d5:ab:02:5c: 24:6b:a8:fb:ce:ef:3c:ff:fe:97:1a:22:d4:c2:e9: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:66:68:96:E4:7D:55:BB:99:F8:81:9D:2B:42:BB:C2:F0:30:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fff87f68-9573-3200-ab5e-ec76f0b20812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:7d:80:66:7e:67:a3:e0:aa:64:cd:29:fc:55:f3:76:1e:f5: 42:39:d4:a1:03:76:e1:10:d8:79:b5:fa:90:29:b9:a7:c5:ab: 21:51:e3:47:50:5d:8f:c5:3a:b8:55:e6:74:f2:ce:89:a0:f3: ab:20:76:41:d2:d4:a8:2a:9c:e5:d8:d0:b1:32:15:b3:e7:cd: 60:3c:d8:55:a8:f5:ec:91:bc:8c:9d:c0:d6:f1:8c:2d:05:fd: 16:0c:60:c6:31:48:bb:b6:6c:8b:d3:71:9a:73:7a:17:66:00: 6c:a0:06:ae:d4:09:e7:7a:ac:3c:7f:d6:95:46:df:c2:36:97: f7:f0:dc:83:a9:6f:cd:96:74:27:f8:3d:68:b7:5f:ef:79:a5: 9c:74:c7:de:dc:ae:51:c3:01:dd:98:b1:b3:3b:03:19:f7:57: 6e:bb:dd:61:a9:03:f1:9c:ed:ad:2d:f7:0c:83:d5:67:16:c3: 4f:7f:28:30:c4:03:d7:48:7b:1d:d5:52:29:4a:23:79:19:06: 85:cd:c4:ca:cf:4e:17:eb:38:9a:da:f4:a4:0e:a1:5f:6b:18: 3f:ca:8c:55:a3:ca:6b:1b:e9:92:0a:44:69:08:e5:26:27:f6: 28:bd:ab:de:90:2e:18:96:75:76:9e:8b:e7:fb:f7:d8:89:60: 03:36:b7:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdAoGzFWrwvqLDYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjViYzI3OTMtYjk5Ni00NTUwLWI5ZTctZTQ4NDhkNGY2YTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlre0Ancpq06ekT9FaB9TQVWJZmH4rOlaNGSH /xBuCPXl5b2b37WLcL7RWlY3DFoag3wDcB8jcNkebdHbPDqAmdw0zCGar2G6fl3I N7q0zC53C9eUJTb8MgA+lbnAJrj2Wpv3Nn/kJ8rERtz0FjgihGmWZy4M2VZJtU3L r8xWF+9PJQQULINKRRZO9kPk52H3N+hNMmEmJJjdd9NQHK4pqFW2TIirFtKNYWpx dUJAInoffeejLd8I74ozBCHvo45pd/kwM2jVM0+D7FApB6h/lXfV0zvPTo4v84tA rGJE27wUwFqYHGW6eznj09WrAlwka6j7zu88//6XGiLUwukqUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXgZmiW5H1Vu5n4gZ0rQrvC8DD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZmODdmNjgtOTU3My0z MjAwLWFiNWUtZWM3NmYwYjIwODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMB9gGZ+Z6PgqmTNKfxV83Ye9UI51KEDduEQ2Hm1+pApuafFqyFR40dQ XY/FOrhV5nTyzomg86sgdkHS1KgqnOXY0LEyFbPnzWA82FWo9eyRvIydwNbxjC0F /RYMYMYxSLu2bIvTcZpzehdmAGygBq7UCed6rDx/1pVG38I2l/fw3IOpb82WdCf4 PWi3X+95pZx0x97crlHDAd2YsbM7Axn3V2673WGpA/Gc7a0t9wyD1WcWw09/KDDE A9dIex3VUilKI3kZBoXNxMrPThfrOJra9KQOoV9rGD/KjFWjymsb6ZIKRGkI5SYn 9ii9q96QLhiWdXaei+f799iJYAM2t/s= -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:07 2025 by rpki-client