$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa File: f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa (raw, json) Hash identifier: tC+A+OJwCWisY3pJyOJF4XUGlJGWQAV7I1mHTeB+dV8= Subject key identifier: 64:D0:22:6D:73:E7:06:63:7B:BE:BA:BA:80:01:A2:28:67:20:CA:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8B7413F7DA9A6DBCC6C8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8b:74:13:f7:da:9a:6d:bc:c6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=915a7de5-57bc-4ba4-a078-f97e2ec843c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:f8:95:26:0b:e5:6c:90:d7:35:4d:e1:06: e1:35:1e:f2:b9:a0:20:b1:06:93:7b:be:70:7a:1b: 7c:f3:a8:20:7c:b2:b6:cb:a3:4b:32:17:c5:c3:2f: 7b:db:58:c0:f1:b7:20:74:c0:17:02:3c:66:34:b6: b7:55:27:58:7a:a1:9a:80:5f:a8:63:f4:3e:14:c3: 89:5e:7b:e4:36:7e:7b:e6:c0:cc:21:b8:eb:0b:af: 74:dd:db:49:eb:f4:3d:57:8f:f4:a8:0f:94:da:cb: c9:5f:2e:7a:fb:c7:98:05:9a:e7:1c:11:a5:09:48: 61:66:3c:9f:e0:86:c5:aa:4c:7a:dd:ea:5a:b3:88: cb:bf:f2:53:bf:11:19:07:c9:fb:79:0b:ec:97:43: 65:3e:da:b4:bd:ba:f3:57:39:fb:6d:a7:39:b9:dc: d8:2e:0c:1b:dd:d2:3e:77:27:58:b6:30:c7:2b:e1: 08:5a:32:fd:36:b7:cb:00:f2:54:92:85:f8:1b:db: e1:e1:1e:a4:85:78:59:d3:42:0b:7b:b0:ef:cd:65: 07:bd:31:48:a7:6c:7a:19:33:d4:8b:4f:ef:ad:3b: 8e:6c:c6:79:8d:0e:c7:34:4d:b8:7a:0e:2b:0b:0b: 87:bd:bd:30:17:5a:19:d9:a2:52:1b:d4:b9:61:f9: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D0:22:6D:73:E7:06:63:7B:BE:BA:BA:80:01:A2:28:67:20:CA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ef:b5:b9:41:5f:ca:b4:b5:14:14:e1:c1:68:45:9f:0f:26: 59:78:96:b0:53:f9:eb:51:be:e6:ec:60:3f:a8:b8:88:4d:1f: 55:11:cd:ba:15:02:47:3a:4d:db:67:27:fa:a5:1a:05:34:9f: 3b:de:64:30:66:f0:f4:78:94:79:be:45:07:be:65:d7:b8:2a: c1:27:bc:9e:49:d4:06:35:a5:5c:8d:db:e0:ab:ea:29:4f:37: 0c:b5:91:e5:eb:89:07:ad:ad:b1:a9:ca:b2:e2:1c:8f:2c:7c: 40:3e:12:a4:36:c3:f9:63:3e:38:b1:4e:29:30:40:3d:92:02: 0c:54:0a:ce:ec:03:3b:a8:13:ab:d9:06:4e:7f:09:0d:29:80: f4:2b:7c:bc:ad:12:e0:bc:75:54:3a:1d:ee:96:eb:2c:05:26: f4:e0:1c:a2:dc:5f:cc:89:c9:8c:4f:c7:1e:a0:cc:34:d6:b1: c3:cf:3a:e3:c7:3d:45:ae:69:3e:ca:02:52:24:bf:ce:40:b2: 0f:f2:85:41:47:54:d6:02:07:70:32:2d:f8:68:8d:55:bb:1a: 98:8e:f6:ed:2a:bd:e2:07:fa:b5:88:70:a5:81:89:a8:b6:2b: 7b:ea:77:1a:e2:e9:2d:5e:24:82:7a:82:b0:34:d0:53:14:41: 2f:c7:b5:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuot0E/famm28xsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTE1YTdkZTUtNTdiYy00YmE0LWEwNzgtZjk3ZTJlYzg0M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYr4lSYL5WyQ1zVN4QbhNR7yuaAgsQaTe75w eht886ggfLK2y6NLMhfFwy9721jA8bcgdMAXAjxmNLa3VSdYeqGagF+oY/Q+FMOJ XnvkNn575sDMIbjrC6903dtJ6/Q9V4/0qA+U2svJXy56+8eYBZrnHBGlCUhhZjyf 4IbFqkx63epas4jLv/JTvxEZB8n7eQvsl0NlPtq0vbrzVzn7bac5udzYLgwb3dI+ dydYtjDHK+EIWjL9NrfLAPJUkoX4G9vh4R6khXhZ00ILe7DvzWUHvTFIp2x6GTPU i0/vrTuObMZ5jQ7HNE24eg4rCwuHvb0wF1oZ2aJSG9S5YfkfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTQIm1z5wZje766uoABoihnIMo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjQ3Mzc5MWMtMjM4Ni0z YWE1LTg2YjMtMTc2NmM4ZDljNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrvtblBX8q0tRQU4cFoRZ8PJll4lrBT+etRvubsYD+ouIhNH1URzboV Akc6TdtnJ/qlGgU0nzveZDBm8PR4lHm+RQe+Zde4KsEnvJ5J1AY1pVyN2+Cr6ilP Nwy1keXriQetrbGpyrLiHI8sfEA+EqQ2w/ljPjixTikwQD2SAgxUCs7sAzuoE6vZ Bk5/CQ0pgPQrfLytEuC8dVQ6He6W6ywFJvTgHKLcX8yJyYxPxx6gzDTWscPPOuPH PUWuaT7KAlIkv85Asg/yhUFHVNYCB3AyLfhojVW7GpiO9u0qveIH+rWIcKWBiai2 K3vqdxri6S1eJIJ6grA00FMUQS/Htac= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:38 2025 by rpki-client