$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6966894-df51-33e4-80fe-d29e43044ad1.roa File: c6966894-df51-33e4-80fe-d29e43044ad1.roa (raw, json) Hash identifier: nFysTTx4FLU8F4FUGrF6nkNucxAYy3A1vdF8OiTsnfM= Subject key identifier: 24:64:81:E7:28:CB:B6:FE:BF:A9:DE:75:C3:FE:04:BF:F7:30:38:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2D0BD775C489AB30CC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6966894-df51-33e4-80fe-d29e43044ad1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:2d:0b:d7:75:c4:89:ab:30:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=243bee7b-8af8-42d8-ab0e-34bf82505a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:b1:77:e1:06:2e:49:c1:54:cb:0f:1b:90: 3c:a9:19:a8:f7:95:a4:29:63:a2:63:39:ed:f5:f5: 1c:bc:a2:a9:71:9c:80:a2:e1:3c:28:9b:7a:82:dd: 48:9a:5e:6f:b7:a8:44:c1:a5:e9:4b:d2:7c:c6:6a: a4:d1:27:64:6f:b0:15:e6:1e:2e:5e:cf:3b:13:aa: db:f8:0f:27:c1:09:6f:0a:ef:29:fb:3d:7c:bf:6e: 13:cb:1c:28:db:15:17:e3:4a:eb:44:5b:98:ac:45: 80:bf:5b:ac:f4:7d:9e:5b:dd:bb:46:f3:dc:f3:95: 87:5f:2a:e9:44:29:55:91:49:1c:f6:07:47:1e:22: 95:c4:1f:0c:81:62:dc:0c:13:e0:74:81:68:94:cc: eb:ab:d0:34:28:fd:16:58:3a:42:84:f5:5b:57:ea: 89:aa:db:e2:65:ce:e1:af:cb:a1:c2:15:55:42:5c: 5d:92:15:11:94:3a:9c:51:18:a2:6d:a9:c1:16:c8: 23:50:17:62:7c:90:d3:92:97:49:5c:85:ba:ec:a4: 18:8b:fb:79:2b:c9:d4:f0:2b:97:9c:a1:a4:ff:c1: f4:fb:c3:64:cc:87:3a:9e:6f:8f:d3:f7:b8:d5:0e: dd:82:3d:73:8c:32:08:69:57:60:8b:52:a0:3c:68: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:81:E7:28:CB:B6:FE:BF:A9:DE:75:C3:FE:04:BF:F7:30:38:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6966894-df51-33e4-80fe-d29e43044ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:db:e2:aa:78:15:c6:f0:63:ba:bb:c6:ee:f6:f9:27:9f:31: 5c:3a:75:b2:04:85:0b:c2:a5:3a:7e:57:bc:9e:bb:70:5e:e6: e6:13:a0:e8:aa:7a:6c:d9:28:d4:23:95:a4:06:f2:5f:e7:42: 9f:70:0a:d5:02:6a:fe:57:9b:94:7d:f6:25:17:a1:73:09:b2: 73:2a:54:a3:e0:c4:0b:af:7e:23:15:2c:d9:27:4c:8d:4d:57: be:3b:0d:13:45:47:d5:bf:51:00:dc:c7:38:fc:40:d0:86:0a: ab:46:39:b0:84:c2:d1:79:25:6e:b9:22:79:67:8e:e3:cb:6a: ba:6d:56:f2:6b:d9:d8:9e:de:e5:ff:b9:12:c5:27:2b:f0:69: 95:e9:cf:ec:25:6e:66:ff:38:5f:5c:38:25:2e:b3:32:bc:48: 78:89:01:77:0f:55:47:ac:92:5b:7e:3e:5c:80:c6:34:1f:58: c2:1c:f4:ab:bb:54:ef:31:7a:5a:d2:bd:7f:5b:47:0b:a8:9a: 66:49:35:99:3f:2c:88:b6:c9:8c:3f:4b:f8:25:4d:bc:74:42: f6:16:de:aa:55:03:bb:57:ac:4d:36:25:57:50:d0:85:7b:be: bf:40:46:95:5f:d1:15:c6:1b:b8:dd:a9:3e:75:29:f1:bb:9d: 08:d3:cd:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuy0L13XEiaswzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjQzYmVlN2ItOGFmOC00MmQ4LWFiMGUtMzRiZjgyNTA1YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzSxd+EGLknBVMsPG5A8qRmo95WkKWOiYznt 9fUcvKKpcZyAouE8KJt6gt1Iml5vt6hEwaXpS9J8xmqk0Sdkb7AV5h4uXs87E6rb +A8nwQlvCu8p+z18v24Tyxwo2xUX40rrRFuYrEWAv1us9H2eW927RvPc85WHXyrp RClVkUkc9gdHHiKVxB8MgWLcDBPgdIFolMzrq9A0KP0WWDpChPVbV+qJqtviZc7h r8uhwhVVQlxdkhURlDqcURiibanBFsgjUBdifJDTkpdJXIW67KQYi/t5K8nU8CuX nKGk/8H0+8NkzIc6nm+P0/e41Q7dgj1zjDIIaVdgi1KgPGhKGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRkgecoy7b+v6nedcP+BL/3MDiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY5NjY4OTQtZGY1MS0z M2U0LTgwZmUtZDI5ZTQzMDQ0YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3b4qp4FcbwY7q7xu72+SefMVw6dbIEhQvCpTp+V7yeu3Be5uYToOiq emzZKNQjlaQG8l/nQp9wCtUCav5Xm5R99iUXoXMJsnMqVKPgxAuvfiMVLNknTI1N V747DRNFR9W/UQDcxzj8QNCGCqtGObCEwtF5JW65InlnjuPLarptVvJr2die3uX/ uRLFJyvwaZXpz+wlbmb/OF9cOCUuszK8SHiJAXcPVUesklt+PlyAxjQfWMIc9Ku7 VO8xelrSvX9bRwuommZJNZk/LIi2yYw/S/glTbx0QvYW3qpVA7tXrE02JVdQ0IV7 vr9ARpVf0RXGG7jdqT51KfG7nQjTzQE= -----END CERTIFICATE-----Generated at Sun Apr 27 14:12:56 2025 by rpki-client