$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa File: f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa (raw, json) Hash identifier: TnKVPXBZETtRBbs4y3kQUfSqPSuMXj+6N+pyJIvpub0= Subject key identifier: AD:83:4A:20:E3:8A:17:CA:63:E0:AE:7E:91:86:C7:14:CD:8E:4B:DD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB31429F1FDDA8EC5CB500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:31:42:9f:1f:dd:a8:ec:5c:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=976e60e0-c0ea-49a5-b433-ef218bcc3689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:78:4a:8c:df:ea:05:e3:65:e8:47:26:2a: 18:2d:c0:29:ff:54:c1:b6:81:3c:c4:e2:af:e5:d9: 2d:69:ec:3e:75:42:43:cf:8d:9f:57:fb:25:7e:ae: ab:fe:96:52:14:0d:26:db:38:6a:c1:f0:56:75:13: 53:3d:cb:21:7f:74:4d:6e:6b:a4:5d:b7:dc:41:76: 29:ac:bf:29:3c:48:c2:a3:f8:5d:54:0e:3f:55:98: 94:f6:7b:bf:c4:00:e3:02:5c:3e:9e:7d:e5:9d:61: b2:98:db:09:79:e0:12:8d:9e:69:da:db:6d:fb:c6: 1c:ff:36:66:d2:22:34:f0:19:30:33:4e:4f:7b:72: f3:9b:f3:1e:81:7a:2d:85:41:c8:36:60:63:59:1f: 9e:95:05:0b:9e:fe:bc:a6:98:48:37:d2:87:93:95: da:05:bc:59:bd:1f:91:a0:fd:34:c1:38:3a:78:e7: 92:0b:f9:0a:0e:9d:9f:d1:ae:6b:b1:ff:73:66:67: a7:05:6d:da:64:f6:c7:33:4f:02:6b:94:d9:83:23: 12:1b:d5:0a:e2:22:bb:47:31:98:e4:52:82:a2:56: 0e:75:46:58:71:92:21:bd:2d:f4:e8:7b:ad:cb:fe: be:7d:5d:64:9e:4b:15:06:89:7b:d3:34:b4:38:ff: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:83:4A:20:E3:8A:17:CA:63:E0:AE:7E:91:86:C7:14:CD:8E:4B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f67aa71f-7802-3ed4-bed1-6cefaa00d9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8d:8a:3b:b0:88:2e:6c:85:f0:33:04:2c:cd:41:76:f1:d7: 02:ef:6a:8f:01:c4:75:9f:4a:5b:c5:4c:fd:5e:30:23:b9:ef: 43:7a:fe:f3:32:26:d9:15:35:75:aa:db:b2:5c:2d:70:c4:68: c7:66:6d:4f:be:f5:0e:62:85:b3:c9:cd:a8:36:af:46:32:32: 7f:52:ca:4b:3c:08:ef:eb:01:d9:82:d1:c9:33:45:fb:9d:1c: 36:03:2b:d8:45:26:bc:d7:cd:8f:a3:8f:23:66:19:86:96:ed: f1:33:d1:88:38:cd:9d:9d:ae:52:2e:42:56:75:d4:c1:c6:19: 21:7a:10:68:98:d4:4c:03:3a:eb:6b:22:74:16:89:55:00:8b: da:c3:80:5e:1f:fb:9c:8a:16:99:1b:bc:9d:83:19:38:fe:e5: 9f:c0:a1:70:77:a8:1d:ee:c2:d1:7e:4e:5d:ac:cb:f6:38:7b: 2d:10:0c:d3:cd:84:3d:4d:c8:ac:56:84:f2:e5:7f:19:ad:bb: 47:0b:10:a2:35:ff:bb:13:d2:ee:59:3b:26:27:4d:43:53:d5: 6a:1e:49:bb:2c:16:bb:b9:30:ea:93:cc:99:58:d7:61:48:b2: b2:21:81:bf:cb:e8:25:e4:81:c1:00:f8:cb:bf:68:29:be:d4: b0:83:0d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzFCnx/dqOxctQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTc2ZTYwZTAtYzBlYS00OWE1LWI0MzMtZWYyMThiY2MzNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOB4Sozf6gXjZehHJioYLcAp/1TBtoE8xOKv 5dktaew+dUJDz42fV/slfq6r/pZSFA0m2zhqwfBWdRNTPcshf3RNbmukXbfcQXYp rL8pPEjCo/hdVA4/VZiU9nu/xADjAlw+nn3lnWGymNsJeeASjZ5p2ttt+8Yc/zZm 0iI08BkwM05Pe3Lzm/MegXothUHINmBjWR+elQULnv68pphIN9KHk5XaBbxZvR+R oP00wTg6eOeSC/kKDp2f0a5rsf9zZmenBW3aZPbHM08Ca5TZgyMSG9UK4iK7RzGY 5FKColYOdUZYcZIhvS306Huty/6+fV1knksVBol70zS0OP/mDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2DSiDjihfKY+CufpGGxxTNjkvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjY3YWE3MWYtNzgwMi0z ZWQ0LWJlZDEtNmNlZmFhMDBkOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyNijuwiC5shfAzBCzNQXbx1wLvao8BxHWfSlvFTP1eMCO570N6/vMy JtkVNXWq27JcLXDEaMdmbU++9Q5ihbPJzag2r0YyMn9Syks8CO/rAdmC0ckzRfud HDYDK9hFJrzXzY+jjyNmGYaW7fEz0Yg4zZ2drlIuQlZ11MHGGSF6EGiY1EwDOutr InQWiVUAi9rDgF4f+5yKFpkbvJ2DGTj+5Z/AoXB3qB3uwtF+Tl2sy/Y4ey0QDNPN hD1NyKxWhPLlfxmtu0cLEKI1/7sT0u5ZOyYnTUNT1WoeSbssFru5MOqTzJlY12FI srIhgb/L6CXkgcEA+Mu/aCm+1LCDDd8= -----END CERTIFICATE-----Generated at Sun Apr 27 10:10:41 2025 by rpki-client