$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2787c2ec-c3d3-30f4-8cf1-61e4af2aa3ae.roa File: 2787c2ec-c3d3-30f4-8cf1-61e4af2aa3ae.roa (raw, json) Hash identifier: CFZzl6HXEOVLdQ3/nZ7l9EwVtFGWVY32ac/rlVuNmnI= Subject key identifier: 1C:B8:DA:3F:0E:96:CA:3A:2A:CE:D2:B0:B2:20:C3:65:D5:67:65:30 Certificate issuer: /CN=6b0ae85a-8757-4947-940f-aa533d9ca479 Certificate serial: 010D0C9F43285848E9CBE58DCF85600002BFAEC0 Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2787c2ec-c3d3-30f4-8cf1-61e4af2aa3ae.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 155.72.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e5:8d:cf:85:60:00:02:bf:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=c7dad83a-351b-42bb-a78c-03826f67c83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:b4:72:99:f5:74:99:72:ee:64:c2:6b:ad: 02:4f:b8:bc:eb:03:a1:f3:ab:97:17:08:82:0c:b1: ea:50:3c:60:28:96:da:2d:50:d9:6a:62:f9:23:71: e0:74:79:14:26:a0:94:20:b1:d7:6a:86:57:72:06: 1e:c7:c2:0f:2e:1a:4e:bd:64:d2:66:e1:40:63:7a: 5d:84:af:df:95:dc:10:8a:a7:20:17:15:bc:62:6f: 69:7b:e1:61:e1:87:c0:8f:42:15:44:d0:d1:e2:47: ef:d3:67:c7:d0:60:84:f6:55:6e:06:c3:c4:d3:80: 46:a0:8c:f3:4c:3d:81:91:b0:bc:3e:b9:87:c3:6e: c6:db:52:e4:4d:98:0f:34:c7:27:4e:90:84:05:60: 1f:59:93:11:8a:4b:56:ea:87:31:1a:3c:b3:f4:08: 3c:aa:35:c1:14:29:2c:80:8a:c6:44:3b:eb:4f:93: 7d:21:b8:ee:1e:37:80:55:d3:66:64:d4:ad:af:14: eb:18:78:73:1d:f5:76:ed:52:6a:e8:0d:d3:f2:2c: 8e:7f:c5:0c:ab:c6:31:76:ce:e3:32:be:ac:6e:e9: c4:0a:ff:ba:1a:e2:e5:11:bd:7c:5c:9c:c1:60:5f: bf:fb:ad:88:5a:be:a4:56:d1:fa:0e:be:e3:eb:85: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B8:DA:3F:0E:96:CA:3A:2A:CE:D2:B0:B2:20:C3:65:D5:67:65:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2787c2ec-c3d3-30f4-8cf1-61e4af2aa3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl X509v3 Authority Key Identifier: keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer sbgp-ipAddrBlock: critical IPv4: 155.72.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:67:4d:91:8b:96:dc:46:52:a2:6c:60:19:1a:ce:c1:77:27: 4e:07:dd:fb:d6:ea:b0:6e:64:67:f5:c2:31:7c:51:21:59:78: 85:74:b4:36:a6:ab:dc:2b:71:3d:83:f3:22:9f:23:3b:4d:2d: 59:6e:b5:1e:36:e8:3a:fe:43:22:6f:a8:53:e8:33:75:af:45: ae:fc:79:fd:5d:33:9c:09:37:4c:73:10:d0:6f:df:ef:0f:9b: 1f:a4:65:3f:dd:74:f6:57:22:39:21:e5:5a:cd:7c:d5:1e:6e: 2f:d1:67:a1:f3:b6:25:72:e0:f7:8c:09:39:44:1a:64:ec:10: 06:d1:60:39:81:69:60:f6:f4:2c:a5:bb:dc:6d:d1:c8:02:7e: cc:f6:2a:ff:45:a3:54:b4:59:4f:8c:10:be:45:9b:87:3b:51: 1e:a1:dc:7c:63:76:ff:b2:a3:0b:0a:93:20:86:98:36:ff:c5: 20:8b:a1:0e:6e:f5:97:58:e9:83:80:3e:5c:8e:02:c9:65:66: ea:2f:6d:bc:5e:de:a8:9f:ca:9d:3f:02:8e:29:e1:45:4e:90: bf:8d:ae:9c:0c:f2:e8:3d:b8:35:b2:12:76:c7:26:a1:62:da: 7a:ba:4a:7b:48:9a:e6:9d:4b:16:c0:b1:5b:5c:34:c0:3e:83: 47:c8:c5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+WNz4VgAAK/rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIwYWU4NWEtODc1Ny00OTQ3LTk0MGYtYWE1MzNkOWNh NDc5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk YzdkYWQ4M2EtMzUxYi00MmJiLWE3OGMtMDM4MjZmNjdjODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/q0cpn1dJly7mTCa60CT7i86wOh86uXFwiC DLHqUDxgKJbaLVDZamL5I3HgdHkUJqCUILHXaoZXcgYex8IPLhpOvWTSZuFAY3pd hK/fldwQiqcgFxW8Ym9pe+Fh4YfAj0IVRNDR4kfv02fH0GCE9lVuBsPE04BGoIzz TD2BkbC8PrmHw27G21LkTZgPNMcnTpCEBWAfWZMRiktW6ocxGjyz9Ag8qjXBFCks gIrGRDvrT5N9IbjuHjeAVdNmZNStrxTrGHhzHfV27VJq6A3T8iyOf8UMq8Yxds7j Mr6sbunECv+6GuLlEb18XJzBYF+/+62IWr6kVtH6Dr7j64VJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy42j8Olso6Ks7SsLIgw2XVZ2UwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82YjBh ZTg1YS04NzU3LTQ5NDctOTQwZi1hYTUzM2Q5Y2E0NzkvMjc4N2MyZWMtYzNkMy0z MGY0LThjZjEtNjFlNGFmMmFhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmIwYWU4NWEtODc1Ny00OTQ3LTk0 MGYtYWE1MzNkOWNhNDc5LzZiMGFlODVhLTg3NTctNDk0Ny05NDBmLWFhNTMzZDlj YTQ3OS5jcmwwHwYDVR0jBBgwFoAUIs2P6IlaPXWVYfjC0NRq8bvYjWgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82YjBhZTg1YS04NzU3LTQ5NDctOTQwZi1hYTUz M2Q5Y2E0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDm0jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdnTZGLltxGUqJsYBkazsF3J04H3fvW6rBuZGf1wjF8USFZeIV0tDam q9wrcT2D8yKfIztNLVlutR426Dr+QyJvqFPoM3WvRa78ef1dM5wJN0xzENBv3+8P mx+kZT/ddPZXIjkh5VrNfNUebi/RZ6HztiVy4PeMCTlEGmTsEAbRYDmBaWD29Cyl u9xt0cgCfsz2Kv9Fo1S0WU+MEL5Fm4c7UR6h3Hxjdv+yowsKkyCGmDb/xSCLoQ5u 9ZdY6YOAPlyOAsllZuovbbxe3qifyp0/Ao4p4UVOkL+NrpwM8ug9uDWyEnbHJqFi 2nq6SntImuadSxbAsVtcNMA+g0fIxSI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:06:00 2025 by rpki-client