$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/562eab88-2956-33cc-ba86-2de1113c5703.roa File: 562eab88-2956-33cc-ba86-2de1113c5703.roa (raw, json) Hash identifier: hv/vWDpZd+uJrzA9OxeD38+CjEqhH305zfJU6q4OJ+s= Subject key identifier: 88:C6:F7:2B:C2:91:A3:D3:3C:E2:30:7C:4D:9D:47:FC:0F:2D:43:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8BF74DB47E8608623180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/562eab88-2956-33cc-ba86-2de1113c5703.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8b:f7:4d:b4:7e:86:08:62:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d1f8dea7-f0c4-42a0-b61e-556a42631915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:4c:62:8d:d5:f1:ed:76:30:17:19:ec:7c: c5:a0:5e:e0:1e:a1:97:ff:22:a2:41:4b:90:70:2e: 60:3f:56:4b:51:0b:bc:d9:80:99:ef:38:ec:76:4e: 2b:f1:ea:80:38:45:95:3d:ab:d3:2b:b8:01:31:45: 3e:b5:23:06:f4:11:70:2f:6c:51:9d:0a:34:77:dd: 83:fc:3e:82:f8:81:e2:0b:ca:15:0e:8a:e1:f9:f6: f1:df:14:c4:c0:ab:f9:e9:7a:bf:e3:c0:68:eb:2a: 39:42:82:18:2a:87:96:0b:4a:cf:72:b2:14:15:63: 43:30:56:e5:77:4c:fc:8a:39:9e:cf:2c:0f:84:11: ba:5d:10:ff:e4:24:8f:fb:58:f0:21:46:c7:f4:38: ea:c5:02:7a:a4:ab:d5:47:cb:52:f6:ab:04:f5:0a: ca:93:c4:d0:2a:3a:6e:ab:8c:0b:16:d9:72:4e:b6: cc:c8:3e:71:24:35:9e:c0:f5:9c:e1:e3:53:e7:94: fd:d7:41:96:09:6e:85:e1:ac:2c:02:fb:2d:93:c3: eb:c1:2f:d5:12:81:26:c0:20:6f:33:cb:b7:aa:84: 88:49:7d:b5:f3:45:22:0d:72:e3:d4:5b:eb:d0:d4: 0a:59:5c:12:53:82:88:1a:62:00:f5:3a:9c:90:4a: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C6:F7:2B:C2:91:A3:D3:3C:E2:30:7C:4D:9D:47:FC:0F:2D:43:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/562eab88-2956-33cc-ba86-2de1113c5703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:bb:15:90:e1:36:36:77:1f:72:f7:a7:e0:e0:3e:62:af:a6: 8b:70:22:f5:5f:85:99:28:e8:a4:9e:c7:d8:e8:67:d4:9f:a4: de:c8:87:2b:85:cf:0c:4e:e3:e1:a0:4b:36:cb:0c:cb:1e:c5: 6a:1f:6c:99:9e:1c:74:21:f7:93:fb:b3:4d:35:a1:28:9c:71: 5b:5d:92:cd:bf:e8:81:07:ed:e3:74:50:5a:4d:2b:1c:22:8a: 8b:b6:21:df:1b:ef:9d:9f:63:e1:d3:dd:88:02:ce:a0:80:39: 27:15:90:7e:4a:34:db:b6:ce:92:6d:a7:c4:d9:db:a8:cb:0b: 6d:f6:6b:51:bb:5d:41:20:e6:25:eb:e3:e9:b2:d2:51:f9:39: 77:e9:59:d6:0a:94:48:bd:e3:21:f8:08:19:67:a3:aa:fb:e1: e1:64:7b:14:fa:c9:e8:78:b2:64:7e:83:c5:d1:63:11:d8:66: 30:ff:6d:ba:98:48:24:b6:cb:59:6f:82:1c:f8:86:48:f6:e4: fc:4f:89:04:cb:94:9a:7a:45:2a:91:9a:68:6a:84:1a:78:13: 55:b1:35:a1:16:c3:4a:56:69:6a:cf:1a:18:64:6f:17:50:be: bc:ac:24:68:22:60:bd:6b:99:87:df:45:1b:ab:49:bb:01:a1: 82:3b:34:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuov3TbR+hghiMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDFmOGRlYTctZjBjNC00MmEwLWI2MWUtNTU2YTQyNjMxOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZMYo3V8e12MBcZ7HzFoF7gHqGX/yKiQUuQ cC5gP1ZLUQu82YCZ7zjsdk4r8eqAOEWVPavTK7gBMUU+tSMG9BFwL2xRnQo0d92D /D6C+IHiC8oVDorh+fbx3xTEwKv56Xq/48Bo6yo5QoIYKoeWC0rPcrIUFWNDMFbl d0z8ijmezywPhBG6XRD/5CSP+1jwIUbH9DjqxQJ6pKvVR8tS9qsE9QrKk8TQKjpu q4wLFtlyTrbMyD5xJDWewPWc4eNT55T910GWCW6F4awsAvstk8PrwS/VEoEmwCBv M8u3qoSISX2180UiDXLj1Fvr0NQKWVwSU4KIGmIA9TqckEpKpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjG9yvCkaPTPOIwfE2dR/wPLUOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTYyZWFiODgtMjk1Ni0z M2NjLWJhODYtMmRlMTExM2M1NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS7FZDhNjZ3H3L3p+DgPmKvpotwIvVfhZko6KSex9joZ9SfpN7IhyuF zwxO4+GgSzbLDMsexWofbJmeHHQh95P7s001oSiccVtdks2/6IEH7eN0UFpNKxwi iou2Id8b752fY+HT3YgCzqCAOScVkH5KNNu2zpJtp8TZ26jLC232a1G7XUEg5iXr 4+my0lH5OXfpWdYKlEi94yH4CBlno6r74eFkexT6yeh4smR+g8XRYxHYZjD/bbqY SCS2y1lvghz4hkj25PxPiQTLlJp6RSqRmmhqhBp4E1WxNaEWw0pWaWrPGhhkbxdQ vrysJGgiYL1rmYffRRurSbsBoYI7NEY= -----END CERTIFICATE-----Generated at Tue Apr 29 05:24:18 2025 by rpki-client