$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bc152e4-2d98-3b7b-8863-697e3a2eaa44.roa File: 1bc152e4-2d98-3b7b-8863-697e3a2eaa44.roa (raw, json) Hash identifier: +v33g2PSUD2LLkww9mZotGDjjqN340t9zyLnjKhw+/c= Subject key identifier: 9B:0E:29:59:96:6E:D9:54:9B:E8:F7:D9:61:D1:0B:B6:87:70:79:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2EBF1FC3AD6A26196770 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bc152e4-2d98-3b7b-8863-697e3a2eaa44.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:2e:bf:1f:c3:ad:6a:26:19:67:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7c0e103b-ef2f-4348-b7e1-b05b1f5a1e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6b:57:5f:92:11:b5:a1:59:3b:ad:b0:2b:5d: 98:61:9c:9b:3d:1d:3c:ea:61:13:41:2b:ed:40:b4: f5:9e:17:16:d8:be:29:78:58:9f:d6:f4:4f:46:e0: 67:0f:3a:1b:d8:47:30:5e:97:0d:43:51:fd:1e:76: ee:7c:a9:f9:f9:19:4e:98:e7:de:43:36:19:b0:b4: 17:bb:56:8b:d6:11:d8:6b:3e:6b:f3:ec:f7:02:35: 68:78:34:63:a5:b6:55:94:b1:0f:33:23:af:e9:e5: b1:21:4a:11:4c:ef:af:fd:10:71:f4:93:18:41:f1: 2b:23:a9:27:6d:c0:fa:5a:64:92:f5:a1:66:5c:13: 9e:84:c3:18:4c:a3:82:2d:a7:8e:e1:fe:3b:36:ce: 61:7f:a4:38:8b:12:3d:46:ba:96:9b:0a:24:80:c9: 25:a3:29:1b:fb:3e:e2:6b:79:53:83:d6:ae:2e:5a: 84:92:c5:bf:0b:62:07:b3:fc:8b:0e:57:ba:b9:ca: 30:af:88:9b:d9:43:47:b5:6f:ff:cb:bd:6e:3d:71: 9f:73:f7:1e:cd:6f:12:62:4f:b9:41:af:24:12:4c: b6:24:48:4d:c5:13:1e:b4:8e:27:2c:14:3e:69:11: 7b:a3:06:f1:60:38:c4:31:19:7c:98:ff:1e:55:f1: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0E:29:59:96:6E:D9:54:9B:E8:F7:D9:61:D1:0B:B6:87:70:79:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bc152e4-2d98-3b7b-8863-697e3a2eaa44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:1b:4d:cf:cd:70:cc:0c:76:db:7d:fd:96:a3:ab:66:bd:8f: 86:3a:fa:84:d9:87:04:3a:d1:52:47:60:91:f7:e6:ac:bb:c3: c8:e6:44:b9:e7:9f:e0:b7:57:26:db:ad:72:66:84:cc:d7:26: cd:82:7a:39:2d:70:ba:5e:18:7e:04:c9:58:c2:33:ec:c5:e0: 31:14:6c:c8:fc:6a:27:98:48:42:ce:23:d6:60:44:46:6f:77: db:e5:29:21:1e:1c:f5:45:0d:c6:ab:5f:a0:c8:e9:29:42:22: 3e:ef:af:c5:57:42:86:15:0d:ed:79:ed:d6:2a:94:31:d1:03: d5:30:01:9f:73:31:91:e0:ff:b1:6c:f0:b0:a7:d6:fa:61:16: e5:f8:e4:61:59:2b:6a:3a:e9:9f:89:11:b6:b1:71:b2:5e:5d: 7a:ab:54:a9:27:60:ac:9a:52:e2:eb:16:ae:56:62:60:b7:32: e2:e1:59:79:17:c5:ef:0c:ce:ad:5a:a2:c8:c6:91:d2:42:8e: b3:81:37:0c:f2:b0:97:f5:67:e0:cc:44:fa:f6:2e:7c:78:f7: 39:07:4a:56:b8:e3:b2:a9:a9:a2:44:5e:b6:29:79:84:f0:c5: 0e:0c:ce:27:a0:f7:97:86:f5:9c:9e:b9:ff:7d:5d:ce:42:f7: 4f:9b:2b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuy6/H8OtaiYZZ3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2MwZTEwM2ItZWYyZi00MzQ4LWI3ZTEtYjA1YjFmNWExZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWtXX5IRtaFZO62wK12YYZybPR086mETQSvt QLT1nhcW2L4peFif1vRPRuBnDzob2EcwXpcNQ1H9HnbufKn5+RlOmOfeQzYZsLQX u1aL1hHYaz5r8+z3AjVoeDRjpbZVlLEPMyOv6eWxIUoRTO+v/RBx9JMYQfErI6kn bcD6WmSS9aFmXBOehMMYTKOCLaeO4f47Ns5hf6Q4ixI9RrqWmwokgMkloykb+z7i a3lTg9auLlqEksW/C2IHs/yLDle6ucowr4ib2UNHtW//y71uPXGfc/cezW8SYk+5 Qa8kEky2JEhNxRMetI4nLBQ+aRF7owbxYDjEMRl8mP8eVfFjDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsOKVmWbtlUm+j32WHRC7aHcHncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWJjMTUyZTQtMmQ5OC0z YjdiLTg4NjMtNjk3ZTNhMmVhYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0bTc/NcMwMdtt9/Zajq2a9j4Y6+oTZhwQ60VJHYJH35qy7w8jmRLnn n+C3VybbrXJmhMzXJs2CejktcLpeGH4EyVjCM+zF4DEUbMj8aieYSELOI9ZgREZv d9vlKSEeHPVFDcarX6DI6SlCIj7vr8VXQoYVDe157dYqlDHRA9UwAZ9zMZHg/7Fs 8LCn1vphFuX45GFZK2o66Z+JEbaxcbJeXXqrVKknYKyaUuLrFq5WYmC3MuLhWXkX xe8Mzq1aosjGkdJCjrOBNwzysJf1Z+DMRPr2Lnx49zkHSla447KpqaJEXrYpeYTw xQ4Mzieg95eG9Zyeuf99Xc5C90+bK24= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:20 2025 by rpki-client