$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823af2ac-61d6-3483-8361-a206666b32a6.roa File: 823af2ac-61d6-3483-8361-a206666b32a6.roa (raw, json) Hash identifier: tKHhDxweRbIdXtsKQ3AR3h7V7vMM2mhFL4Gt8cGoSGc= Subject key identifier: C8:06:E4:11:6D:B6:AD:48:16:39:50:48:1C:D6:09:4F:59:81:0B:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB31B9DBA8D15C5CC24C70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823af2ac-61d6-3483-8361-a206666b32a6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:31:b9:db:a8:d1:5c:5c:c2:4c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a435d47c-eb2b-4633-896e-ee05806f276b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:3d:95:23:61:08:71:8b:d7:28:b7:8f:42: 07:c0:2e:52:3e:17:07:b8:cc:59:ef:1e:48:82:bd: 5b:00:20:24:c8:81:7b:00:19:5b:a2:d3:d8:26:20: cd:22:4f:d1:65:ed:a5:a7:c2:88:9f:0d:18:29:b9: fa:cf:7e:fb:86:92:2e:93:03:25:27:ab:54:3d:63: ed:3f:4d:34:a3:e8:42:09:8a:28:97:69:59:dd:6e: 8d:1b:28:2f:5d:29:78:60:1a:b1:98:ad:cf:fb:09: 4e:c7:c2:da:ca:60:00:88:95:db:24:6e:89:4d:c8: 05:36:77:bb:37:43:eb:0c:d1:e3:2f:7f:01:d8:b6: a8:a4:ed:91:4c:7d:f4:71:75:22:51:70:03:94:97: c8:19:75:c0:be:34:d0:7d:66:f5:01:10:e2:af:cf: 21:38:da:24:51:d3:1c:c1:81:51:21:5d:3e:2e:be: 99:4e:e1:61:b1:e6:68:83:60:00:69:02:2b:9e:96: 7b:43:06:00:32:d8:58:e6:b4:09:03:3a:4f:95:c7: 10:ad:0b:98:34:2f:25:71:45:4e:7e:3f:ca:96:a7: 81:5c:3f:09:cc:5d:22:dc:b3:1b:81:b9:82:30:fd: f9:70:57:01:68:c3:5a:a7:24:9f:29:26:ec:6e:d0: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:06:E4:11:6D:B6:AD:48:16:39:50:48:1C:D6:09:4F:59:81:0B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823af2ac-61d6-3483-8361-a206666b32a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:c6:9c:8b:6c:d3:a0:c8:a1:66:66:76:8a:94:f2:a9:a4:29: af:1f:95:8a:5a:27:58:cd:93:2e:f1:1c:c7:5c:ec:ba:29:59: 43:c8:4f:28:27:1f:c6:d3:c1:aa:0d:87:de:05:b9:0c:36:f2: 9d:cb:9e:9e:5e:a5:ed:7d:25:9f:23:8e:af:1c:93:05:80:99: 1e:dc:2e:1b:64:de:ac:03:46:fd:20:31:bd:b0:d9:9c:fb:de: cb:39:e6:70:bc:73:2c:8a:34:d8:41:65:09:21:ad:79:fc:f2: 83:84:73:f4:37:7e:d0:da:b9:22:41:64:0a:4e:68:52:c4:75: 9b:40:e6:be:1f:11:5f:ee:a5:4f:1d:10:27:80:9a:2a:b0:ac: 5f:11:76:e1:b9:ce:73:de:95:83:0b:1b:f8:d1:55:89:6f:b9: f8:cf:56:00:0b:7b:6b:8c:12:54:c1:47:fb:33:0b:ea:11:99: 87:c2:c8:a6:61:82:bb:45:e3:1a:82:87:0d:5d:2b:d4:fe:19: bd:35:b4:75:31:14:32:30:f2:49:5d:8d:76:37:cf:49:66:fc: 26:43:3e:bd:88:2f:d2:49:f4:e1:21:d8:b2:1e:12:13:9e:a2: a1:7a:aa:52:aa:a7:e5:b1:fb:9b:10:80:7e:a5:c0:41:75:24: 22:1e:ec:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzG526jRXFzCTHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTQzNWQ0N2MtZWIyYi00NjMzLTg5NmUtZWUwNTgwNmYyNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKg9lSNhCHGL1yi3j0IHwC5SPhcHuMxZ7x5I gr1bACAkyIF7ABlbotPYJiDNIk/RZe2lp8KInw0YKbn6z377hpIukwMlJ6tUPWPt P000o+hCCYool2lZ3W6NGygvXSl4YBqxmK3P+wlOx8LaymAAiJXbJG6JTcgFNne7 N0PrDNHjL38B2LaopO2RTH30cXUiUXADlJfIGXXAvjTQfWb1ARDir88hONokUdMc wYFRIV0+Lr6ZTuFhseZog2AAaQIrnpZ7QwYAMthY5rQJAzpPlccQrQuYNC8lcUVO fj/KlqeBXD8JzF0i3LMbgbmCMP35cFcBaMNapySfKSbsbtCrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgG5BFttq1IFjlQSBzWCU9ZgQs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODIzYWYyYWMtNjFkNi0z NDgzLTgzNjEtYTIwNjY2NmIzMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXGnIts06DIoWZmdoqU8qmkKa8flYpaJ1jNky7xHMdc7LopWUPITygn H8bTwaoNh94FuQw28p3Lnp5epe19JZ8jjq8ckwWAmR7cLhtk3qwDRv0gMb2w2Zz7 3ss55nC8cyyKNNhBZQkhrXn88oOEc/Q3ftDauSJBZApOaFLEdZtA5r4fEV/upU8d ECeAmiqwrF8RduG5znPelYMLG/jRVYlvufjPVgALe2uMElTBR/szC+oRmYfCyKZh grtF4xqChw1dK9T+Gb01tHUxFDIw8kldjXY3z0lm/CZDPr2IL9JJ9OEh2LIeEhOe oqF6qlKqp+Wx+5sQgH6lwEF1JCIe7AA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:23:56 2025 by rpki-client