$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa File: ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa (raw, json) Hash identifier: T1/+73jPwhSTXPiPs2JcEkbhYJMrl+15BKqaXS9b0JQ= Subject key identifier: 17:0A:2D:D3:32:B1:EC:0F:11:36:A5:63:E0:44:40:F0:FA:1F:43:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2C37E1549FE298FD6600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:2c:37:e1:54:9f:e2:98:fd:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=abc55395-cc2c-4300-940c-50bacebf5f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:4c:1f:7b:9a:7c:99:cc:e3:6d:16:0e:8b: 5a:f3:68:2a:00:e2:38:1f:bf:b5:6e:b5:29:44:d1: 59:6c:f2:9c:61:0c:2e:0c:38:2f:e0:02:95:b5:fd: d3:81:e4:4e:7d:b6:8b:3a:85:7a:5e:13:0f:fd:1c: 98:7d:37:42:df:f0:b9:25:8b:84:16:7d:23:26:3f: b4:5e:bd:92:6c:89:b6:60:2c:60:81:18:50:22:d7: 85:fc:66:19:22:b1:d2:67:18:30:bf:24:58:cc:5a: dc:6c:ab:04:fe:5f:db:af:b0:c0:b6:36:50:76:ee: ac:d2:e7:f3:de:87:a9:00:cf:ae:b2:b4:bd:09:18: 54:6d:00:b0:26:a8:1a:e8:2b:5a:81:ba:3e:e7:85: d8:36:b8:9b:e2:4e:50:87:66:8a:5e:91:1c:05:36: 38:ab:cd:8c:c9:f1:8c:a9:45:92:7f:70:1b:9e:36: 04:a3:4e:dd:03:f4:cf:93:a3:b3:44:46:99:9d:a0: fc:29:a8:73:f8:ed:20:b9:56:ef:4c:25:d3:a2:21: 77:a1:06:7d:e1:ca:d8:4c:88:6b:5a:db:4d:c5:40: 4c:0e:10:8d:ca:a8:ef:0f:f6:db:75:fa:1c:1f:9a: 7d:2a:6b:1e:03:6e:d1:62:bf:0c:e5:ac:b5:f1:bc: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0A:2D:D3:32:B1:EC:0F:11:36:A5:63:E0:44:40:F0:FA:1F:43:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae5f1d1d-3b87-3349-951a-f0b6f5f02680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d7:0d:bb:d5:10:99:17:9c:fd:b6:a7:4f:76:16:29:e3:ae: c8:b9:3e:01:5c:89:7a:5c:5f:b3:b4:c7:d3:73:28:1a:79:47: 43:cd:88:d4:4d:9f:b0:18:80:81:59:1f:4c:98:1f:1b:28:df: a5:4c:f7:75:58:80:4f:ed:25:af:4b:c0:9a:fb:64:8c:04:c1: 42:9e:9c:e7:b0:00:4b:94:6e:27:5e:d7:f4:44:7b:1e:7e:88: 87:16:40:ae:ee:e7:58:82:e5:83:a6:6c:96:ca:3d:46:b1:88: bb:19:ab:8e:3e:00:86:72:9e:32:be:84:9e:f2:c7:4d:91:ca: ac:95:03:da:2f:91:81:9f:80:a9:9b:e6:55:8e:af:56:7b:3f: ad:0f:41:38:43:0c:04:c2:0d:94:4e:57:ff:ed:e2:92:6e:95: 5b:aa:cc:54:70:6c:77:96:d4:05:c7:51:3f:06:b5:6e:42:58: d3:86:07:45:51:d4:3d:3c:2e:86:67:91:77:73:5d:ce:ab:ce: b4:d5:1a:be:a8:54:da:ba:0f:be:e1:7c:30:fd:4a:e1:ec:00: 3f:74:33:4d:c2:8c:65:96:cf:26:7f:73:4a:4e:bd:64:30:7c: 31:0b:54:c3:90:9f:aa:20:e5:2a:6f:72:7c:51:87:76:10:0c: a2:51:60:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyw34VSf4pj9ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWJjNTUzOTUtY2MyYy00MzAwLTk0MGMtNTBiYWNlYmY1ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+9MH3uafJnM420WDota82gqAOI4H7+1brUp RNFZbPKcYQwuDDgv4AKVtf3TgeROfbaLOoV6XhMP/RyYfTdC3/C5JYuEFn0jJj+0 Xr2SbIm2YCxggRhQIteF/GYZIrHSZxgwvyRYzFrcbKsE/l/br7DAtjZQdu6s0ufz 3oepAM+usrS9CRhUbQCwJqga6Ctagbo+54XYNrib4k5Qh2aKXpEcBTY4q82MyfGM qUWSf3AbnjYEo07dA/TPk6OzREaZnaD8Kahz+O0guVbvTCXToiF3oQZ94crYTIhr WttNxUBMDhCNyqjvD/bbdfocH5p9KmseA27RYr8M5ay18bwQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcKLdMysewPETalY+BEQPD6H0MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU1ZjFkMWQtM2I4Ny0z MzQ5LTk1MWEtZjBiNmY1ZjAyNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjXDbvVEJkXnP22p092Finjrsi5PgFciXpcX7O0x9NzKBp5R0PNiNRN n7AYgIFZH0yYHxso36VM93VYgE/tJa9LwJr7ZIwEwUKenOewAEuUbide1/REex5+ iIcWQK7u51iC5YOmbJbKPUaxiLsZq44+AIZynjK+hJ7yx02RyqyVA9ovkYGfgKmb 5lWOr1Z7P60PQThDDATCDZROV//t4pJulVuqzFRwbHeW1AXHUT8GtW5CWNOGB0VR 1D08LoZnkXdzXc6rzrTVGr6oVNq6D77hfDD9SuHsAD90M03CjGWWzyZ/c0pOvWQw fDELVMOQn6og5SpvcnxRh3YQDKJRYAE= -----END CERTIFICATE-----Generated at Sun Apr 27 07:01:26 2025 by rpki-client