$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa File: 33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa (raw, json) Hash identifier: EMJ9JHC9U2VFhjGdquDEHuXZqTEsoVgQs7LNu9hP9/4= Subject key identifier: 0F:5B:00:20:46:AB:41:75:EC:CC:41:E7:F6:63:B9:3E:57:7A:0B:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8B50E2C812BF3F224A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8b:50:e2:c8:12:bf:3f:22:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4ac5eb41-5bbe-43f0-8533-40af0201fe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:c4:4b:e0:b2:46:26:77:f5:32:3c:e5:d6: 60:3c:8e:49:f5:7c:d1:a6:da:7f:02:85:36:c1:92: 5a:78:01:77:b4:1f:0d:57:ea:83:21:95:c0:2d:61: 65:34:2b:b1:0a:72:8d:23:c8:a7:50:ac:a2:c9:f9: b5:f1:88:ef:dc:0f:b6:4e:d7:88:3a:a7:a2:8d:29: 39:c8:62:7b:56:c0:32:04:e2:b2:46:98:f1:96:58: 95:52:b4:84:aa:ed:dd:e4:02:d8:95:9d:61:b6:d9: 56:9b:92:e4:23:dc:4a:76:e7:d4:eb:f6:71:ad:ff: 43:20:41:02:7a:f5:9b:dc:fe:ac:91:3c:fe:03:71: 2d:33:21:bf:af:87:5d:9f:e5:93:06:93:5b:b7:55: ea:4b:c9:af:06:58:42:60:f9:da:8d:4b:60:bb:77: 42:32:6d:a1:b9:3a:83:51:29:1b:a4:e3:cf:23:73: d3:f7:db:f9:c6:d5:e2:72:bd:5c:95:49:5e:94:be: ab:1f:ae:b1:be:86:5b:d6:8b:56:b2:d9:0f:07:e8: 62:52:f4:8b:70:ba:11:49:8f:f7:44:b4:ef:ce:97: f9:63:25:9a:d0:2e:68:b4:e3:79:41:02:9a:3b:40: c8:ac:99:52:6b:8e:3f:fb:9c:7a:1d:01:c1:3f:1f: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:00:20:46:AB:41:75:EC:CC:41:E7:F6:63:B9:3E:57:7A:0B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:e5:57:1a:65:7e:b8:93:0d:e1:29:c9:4e:df:5f:2f:19:f6: cb:11:64:38:29:8e:69:45:eb:01:ae:11:30:26:fa:9f:44:35: e8:4c:ba:9c:1b:59:82:c1:f7:d9:0e:84:6d:3d:e3:c3:c5:8d: e4:86:7d:b5:11:2b:fd:34:cf:37:8a:a2:bb:41:d4:ee:d0:aa: c7:7c:b0:45:df:c3:79:51:d3:71:69:ad:0b:2f:d1:44:6e:c9: fd:fa:f6:bc:27:6d:db:8b:5a:a2:7b:41:06:14:8f:19:32:f8: 91:05:2d:e6:60:e4:5f:89:2d:75:61:36:fb:22:d5:eb:54:34: fd:fc:17:0c:e1:73:27:fb:ca:2a:fb:5a:73:85:76:09:cf:f3: d6:dc:00:4a:33:b5:9b:7e:5f:82:26:d6:4b:c6:52:6b:a2:5b: 52:be:1c:0e:ee:16:05:ef:eb:d4:86:e5:11:6e:d8:15:2a:33: 4a:14:6c:e7:04:c0:18:6b:b0:ef:ea:91:7d:ed:58:5c:62:a8: 46:f9:8b:d6:e2:96:8c:43:ce:fb:66:68:8e:95:59:f3:9d:95: ea:6a:a3:26:21:60:c4:17:9e:2f:83:37:12:e5:52:14:da:a4: 21:0b:02:34:59:7e:78:1a:07:c5:59:f5:57:6c:e6:51:80:91: 75:42:16:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuotQ4sgSvz8iSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGFjNWViNDEtNWJiZS00M2YwLTg1MzMtNDBhZjAyMDFmZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0/ES+CyRiZ39TI85dZgPI5J9XzRptp/AoU2 wZJaeAF3tB8NV+qDIZXALWFlNCuxCnKNI8inUKyiyfm18Yjv3A+2TteIOqeijSk5 yGJ7VsAyBOKyRpjxlliVUrSEqu3d5ALYlZ1httlWm5LkI9xKdufU6/Zxrf9DIEEC evWb3P6skTz+A3EtMyG/r4ddn+WTBpNbt1XqS8mvBlhCYPnajUtgu3dCMm2huTqD USkbpOPPI3PT99v5xtXicr1clUlelL6rH66xvoZb1otWstkPB+hiUvSLcLoRSY/3 RLTvzpf5YyWa0C5otON5QQKaO0DIrJlSa44/+5x6HQHBPx8gHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9bACBGq0F17MxB5/ZjuT5Xegt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNmNjRlYWUtZDMzNi0z NDEwLThjNmEtMmRlNGJmNmE0YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANflVxplfriTDeEpyU7fXy8Z9ssRZDgpjmlF6wGuETAm+p9ENehMupwb WYLB99kOhG0948PFjeSGfbURK/00zzeKortB1O7Qqsd8sEXfw3lR03FprQsv0URu yf369rwnbduLWqJ7QQYUjxky+JEFLeZg5F+JLXVhNvsi1etUNP38Fwzhcyf7yir7 WnOFdgnP89bcAEoztZt+X4Im1kvGUmuiW1K+HA7uFgXv69SG5RFu2BUqM0oUbOcE wBhrsO/qkX3tWFxiqEb5i9biloxDzvtmaI6VWfOdlepqoyYhYMQXni+DNxLlUhTa pCELAjRZfngaB8VZ9Vds5lGAkXVCFvM= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:04 2025 by rpki-client