$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1025c768-2888-3f02-ad6f-1c264c53ed60.roa File: 1025c768-2888-3f02-ad6f-1c264c53ed60.roa (raw, json) Hash identifier: djvZNeDYLp1Djoexrfer8rQ12TRH2HDOPXl7dZuZGn8= Subject key identifier: 05:27:01:1F:74:8B:22:54:8F:D1:0F:73:B9:95:B7:CD:1F:C1:D3:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8D84A2A696C7344749C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1025c768-2888-3f02-ad6f-1c264c53ed60.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8d:84:a2:a6:96:c7:34:47:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2de19838-680c-47eb-8409-8fa42a4572a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:e0:aa:26:1c:94:9f:6c:de:f4:d2:97:11: 33:fd:ce:9e:cf:31:d2:eb:3c:9b:75:e6:26:e5:eb: 63:ce:95:c4:96:99:a6:85:bd:b0:0a:e0:09:ee:0a: cc:b0:79:9c:41:23:06:c3:65:20:30:b5:69:0f:d1: d1:14:a8:71:dc:50:90:7b:9e:a7:d2:ab:2c:f7:b2: 30:a3:1c:64:80:00:4a:40:58:18:f6:4c:7c:1c:2a: 9c:61:d2:8a:61:64:16:88:c7:59:18:da:71:07:85: f9:a0:e2:dd:95:e4:db:1e:02:5d:8f:13:24:cc:34: 7b:d9:0a:82:dd:e1:43:a1:52:84:ba:fb:ec:b5:14: 4a:12:1c:fb:61:9b:dd:a9:bc:6d:e5:e1:c6:6e:c8: da:29:67:83:39:59:5c:92:8b:58:f6:d5:21:70:92: a4:b8:83:f7:47:a6:0e:8d:5f:f7:73:ef:a1:12:cc: bc:c9:c4:c2:a8:67:2c:c7:9b:8c:ca:15:1e:7b:ba: 3a:1f:07:64:1d:72:96:3d:ac:54:c2:f3:c3:b3:3d: 02:8f:a7:d3:12:8f:9e:c4:92:68:4b:71:9b:de:a8: 88:3a:ba:12:be:48:3a:84:da:76:cc:ed:95:1c:0f: 1c:b6:f2:b6:e5:51:ca:8e:d0:27:c3:7f:ec:45:1e: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:27:01:1F:74:8B:22:54:8F:D1:0F:73:B9:95:B7:CD:1F:C1:D3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1025c768-2888-3f02-ad6f-1c264c53ed60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:50:1a:a9:47:c0:97:f5:03:ff:aa:e4:ab:0d:a8:a3:ea:78: 67:e6:c0:ef:79:88:61:86:6a:df:a2:f7:51:d1:04:1c:4d:92: 60:5b:43:b0:4d:78:96:72:70:63:34:2f:87:86:c8:b6:4e:0b: 67:dc:39:6b:68:59:35:8c:b3:21:9a:54:92:d9:6a:df:16:22: ab:f2:73:7b:33:f8:27:31:48:5a:1c:14:36:f8:cf:ea:83:8b: 5e:c4:f9:06:cc:46:9e:6f:d4:37:85:03:46:dc:2b:4f:2d:3e: 01:16:86:31:17:fb:b6:8f:17:2d:c2:41:f3:24:ef:d2:72:d4: c0:9e:3e:23:77:ae:e6:d8:10:e7:72:42:c1:37:b8:3c:32:4a: 62:bf:11:eb:8a:e0:23:46:89:2e:43:4c:13:52:70:68:bb:c7: 53:2b:9d:a9:c2:f4:d8:bd:13:be:39:a8:ec:d2:b0:97:cc:4c: da:04:73:3f:88:9d:ff:fa:89:73:d9:0f:d8:c5:d1:43:03:0b: 79:87:ab:34:a3:59:e4:c8:7a:9a:22:21:2a:e5:f1:f3:99:0a: 9d:21:ce:0e:22:8c:72:b8:7d:3d:1e:70:8f:32:cb:38:3d:bc: 83:e6:88:1b:fa:b1:33:c4:41:03:90:34:58:50:a0:d1:55:a3: 77:d6:34:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo2EoqaWxzRHScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmRlMTk4MzgtNjgwYy00N2ViLTg0MDktOGZhNDJhNDU3MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hzgqiYclJ9s3vTSlxEz/c6ezzHS6zybdeYm 5etjzpXElpmmhb2wCuAJ7grMsHmcQSMGw2UgMLVpD9HRFKhx3FCQe56n0qss97Iw oxxkgABKQFgY9kx8HCqcYdKKYWQWiMdZGNpxB4X5oOLdleTbHgJdjxMkzDR72QqC 3eFDoVKEuvvstRRKEhz7YZvdqbxt5eHGbsjaKWeDOVlckotY9tUhcJKkuIP3R6YO jV/3c++hEsy8ycTCqGcsx5uMyhUee7o6HwdkHXKWPaxUwvPDsz0Cj6fTEo+exJJo S3Gb3qiIOroSvkg6hNp2zO2VHA8ctvK25VHKjtAnw3/sRR4yKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUnAR90iyJUj9EPc7mVt80fwdOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTAyNWM3NjgtMjg4OC0z ZjAyLWFkNmYtMWMyNjRjNTNlZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClQGqlHwJf1A/+q5KsNqKPqeGfmwO95iGGGat+i91HRBBxNkmBbQ7BN eJZycGM0L4eGyLZOC2fcOWtoWTWMsyGaVJLZat8WIqvyc3sz+CcxSFocFDb4z+qD i17E+QbMRp5v1DeFA0bcK08tPgEWhjEX+7aPFy3CQfMk79Jy1MCePiN3rubYEOdy QsE3uDwySmK/EeuK4CNGiS5DTBNScGi7x1MrnanC9Ni9E745qOzSsJfMTNoEcz+I nf/6iXPZD9jF0UMDC3mHqzSjWeTIepoiISrl8fOZCp0hzg4ijHK4fT0ecI8yyzg9 vIPmiBv6sTPEQQOQNFhQoNFVo3fWNK0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:27 2025 by rpki-client