$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d0eafb3-7487-327f-8add-ed19c30281ca.roa File: 8d0eafb3-7487-327f-8add-ed19c30281ca.roa (raw, json) Hash identifier: z8cynMM/LyYXRzVApWuB1ZHE99CxoMbRcIfBFEb9++I= Subject key identifier: 1B:9C:92:18:2F:4A:B5:7C:DD:99:96:C0:0A:76:F5:BB:A9:7A:27:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8AE01A5ED08216487440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d0eafb3-7487-327f-8add-ed19c30281ca.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8a:e0:1a:5e:d0:82:16:48:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=94c756d3-9958-4390-b4c5-c1e4a36f023b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:d5:3a:c3:0b:a1:71:91:05:ea:61:ad:2a: 9b:d8:79:30:96:af:c1:97:48:5b:7b:15:10:b6:8f: 8a:c1:b2:a9:7e:f4:74:6a:d7:bb:fb:3d:1e:a2:6e: 89:a8:13:da:2f:97:f4:16:f3:92:ef:fd:45:6b:23: ca:ac:4f:83:a2:ef:17:5d:20:3c:1d:30:d1:9d:37: a1:a9:4d:d1:5f:78:ab:76:de:61:83:6b:21:29:04: 53:04:89:9c:05:98:21:05:38:ca:22:8d:6a:ef:b8: a5:36:76:72:74:76:e1:42:73:f9:12:ea:98:c1:01: 85:79:d8:2b:17:fd:db:4d:dd:0b:83:74:d8:a2:b0: 0e:d7:7a:55:c5:01:34:f6:00:e4:27:e7:eb:bb:58: be:83:e2:43:e4:47:a3:4a:d4:93:9c:43:f2:40:dc: 6d:80:1c:8f:03:9a:50:a6:e2:d5:5b:16:eb:47:a9: d3:cc:1f:6b:0f:ea:c9:42:d3:cd:c1:f9:03:d3:e4: d2:68:ee:c2:0d:08:3f:5d:ee:b9:18:d5:3e:4a:60: 3b:28:73:7e:5c:d4:8b:4a:f5:cf:07:0b:88:8b:ed: cd:4f:fa:f0:95:84:82:37:81:d9:46:b2:d4:28:62: c0:00:17:7a:04:b6:4c:f9:6d:d8:e1:56:cd:eb:83: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9C:92:18:2F:4A:B5:7C:DD:99:96:C0:0A:76:F5:BB:A9:7A:27:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d0eafb3-7487-327f-8add-ed19c30281ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a9:aa:15:24:93:2d:c5:63:81:cd:c7:25:85:d0:e9:e6:55: 24:1e:57:05:96:c5:39:c4:95:f1:84:15:02:26:df:48:06:e2: 12:48:ef:2c:af:38:7c:f6:cb:85:30:f6:df:03:d3:a5:07:19: 0a:f4:ef:76:c0:44:e1:5f:f6:fc:9a:84:62:6f:7e:63:b3:1e: 1f:87:24:13:e3:bf:a7:f1:ad:c6:22:69:0b:7d:dd:08:3b:ee: e7:c4:b7:11:84:a4:3c:70:7e:f0:87:f0:e8:f6:f6:95:93:19: c1:b6:bf:89:8f:58:54:0d:ab:4c:de:b3:76:ad:0a:1a:40:f2: 3f:0a:51:5a:c9:f8:b0:fa:e3:96:64:41:5a:57:21:0a:aa:87: eb:80:1a:3f:fc:20:78:07:f4:05:12:12:46:a0:43:de:80:64: 22:c2:d0:a0:19:fd:09:2c:25:62:69:e2:f5:6f:1f:60:75:80: 7f:e2:69:64:23:2b:12:d4:88:fc:ad:44:d8:62:de:01:7b:61: 03:fc:5e:e1:61:7d:bd:90:bb:a7:84:12:f9:b4:31:20:4b:ad: fd:bb:af:53:47:45:5a:e6:f8:7d:0c:1b:03:6a:e5:0f:49:13: 12:e5:b1:53:68:79:e9:76:7f:52:60:48:90:72:dc:11:ea:b1: ed:57:be:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuorgGl7QghZIdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTRjNzU2ZDMtOTk1OC00MzkwLWI0YzUtYzFlNGEzNmYwMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCPVOsMLoXGRBephrSqb2Hkwlq/Bl0hbexUQ to+KwbKpfvR0ate7+z0eom6JqBPaL5f0FvOS7/1FayPKrE+Dou8XXSA8HTDRnTeh qU3RX3irdt5hg2shKQRTBImcBZghBTjKIo1q77ilNnZydHbhQnP5EuqYwQGFedgr F/3bTd0Lg3TYorAO13pVxQE09gDkJ+fru1i+g+JD5EejStSTnEPyQNxtgByPA5pQ puLVWxbrR6nTzB9rD+rJQtPNwfkD0+TSaO7CDQg/Xe65GNU+SmA7KHN+XNSLSvXP BwuIi+3NT/rwlYSCN4HZRrLUKGLAABd6BLZM+W3Y4VbN64PotwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuckhgvSrV83ZmWwAp29bupeieaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGQwZWFmYjMtNzQ4Ny0z MjdmLThhZGQtZWQxOWMzMDI4MWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqpqhUkky3FY4HNxyWF0OnmVSQeVwWWxTnElfGEFQIm30gG4hJI7yyv OHz2y4Uw9t8D06UHGQr073bAROFf9vyahGJvfmOzHh+HJBPjv6fxrcYiaQt93Qg7 7ufEtxGEpDxwfvCH8Oj29pWTGcG2v4mPWFQNq0zes3atChpA8j8KUVrJ+LD645Zk QVpXIQqqh+uAGj/8IHgH9AUSEkagQ96AZCLC0KAZ/QksJWJp4vVvH2B1gH/iaWQj KxLUiPytRNhi3gF7YQP8XuFhfb2Qu6eEEvm0MSBLrf27r1NHRVrm+H0MGwNq5Q9J ExLlsVNoeel2f1JgSJBy3BHqse1XvhI= -----END CERTIFICATE-----Generated at Sun Apr 27 05:50:52 2025 by rpki-client