$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98798328-000a-3f1f-853f-273f9323b632.roa File: 98798328-000a-3f1f-853f-273f9323b632.roa (raw, json) Hash identifier: +wtrNqtvREhYoC6S9qj3c8fg5POnNSNp696hs2XROMM= Subject key identifier: 51:24:3F:3F:3E:A8:35:D2:2D:C0:B5:52:FC:AB:76:8E:73:CE:16:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2B8B7AF9359C190E4AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98798328-000a-3f1f-853f-273f9323b632.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:2b:8b:7a:f9:35:9c:19:0e:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9b1a3046-e99d-4be1-8419-b2d9236079d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:f7:27:f2:f8:dd:c7:81:6f:03:72:ab:97: 67:bf:44:94:e4:9d:e2:09:4f:e9:18:3e:3b:ec:a0: fb:1d:61:b7:d4:9f:3e:90:9d:68:82:12:10:08:13: 07:17:e7:fb:ad:36:13:c6:b9:af:1f:97:e3:42:39: 7d:1b:c6:53:d3:96:72:fb:0d:19:33:79:cd:03:84: 4c:11:25:cb:01:65:ab:bd:61:91:e4:e6:f8:e8:30: 6f:91:f2:03:0b:3c:4e:f0:ab:ed:37:72:dc:90:a8: d3:d0:27:45:b2:0d:9b:c1:b1:fe:d8:5f:44:b4:62: e1:21:cf:ed:5e:b9:fa:4d:01:72:d1:10:6c:84:0d: 73:b8:2b:c6:4d:94:d4:51:ff:2d:87:9e:cf:ea:b7: 34:d1:3c:b0:d2:b5:37:71:d2:e9:37:fa:95:25:5a: 41:f9:2d:94:37:19:6f:a2:b5:d7:47:28:39:70:44: 61:ca:df:f4:d9:a4:0a:c6:02:72:2b:0b:63:46:43: 7f:1d:03:91:ef:87:e7:23:61:be:db:f0:9b:a4:99: 6f:a5:a2:10:48:c4:9a:4b:78:fe:57:a6:de:15:60: e0:2f:a1:6b:9c:c0:a9:ba:0f:da:25:7d:b1:88:eb: ce:24:22:74:eb:da:3f:a2:5d:f0:af:47:f0:32:54: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:3F:3F:3E:A8:35:D2:2D:C0:B5:52:FC:AB:76:8E:73:CE:16:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98798328-000a-3f1f-853f-273f9323b632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:dc:b5:e0:4c:78:68:4d:b4:da:a6:49:c0:e7:56:e8:72:4b: c7:8b:ae:07:07:bc:6f:02:75:a9:f9:cb:ce:46:90:6f:bd:66: 8a:6b:23:1b:ba:e4:ce:5a:32:50:46:1c:b1:c1:70:ca:89:77: 82:3e:d4:94:37:e0:03:14:c8:f3:8e:46:f9:72:50:e2:50:8e: d1:3f:e2:da:af:c7:bf:50:23:b8:88:df:4c:d0:80:88:8f:4e: 33:15:e0:9b:be:88:c7:13:7b:8a:9f:82:1f:79:ba:c6:d2:a1: af:57:97:ba:29:48:f6:53:c7:5f:f2:57:b2:81:3d:7d:0b:d8: 8d:6b:66:5f:44:0f:93:fb:97:7a:1a:54:d7:90:7f:05:c1:d5: 39:9b:1b:7d:40:b6:c6:04:b8:b9:82:99:e3:7c:4c:a7:3c:88: 45:43:2b:e0:82:06:91:3e:26:ab:7d:59:3c:88:fc:93:c6:b5: 48:b5:18:cc:10:30:f8:c7:0a:c5:14:b3:30:bc:cb:91:dc:60: 19:38:c3:75:f1:97:c2:99:18:da:e0:24:24:af:c9:af:e4:22: 09:09:d3:48:a9:b2:b0:cb:36:4c:14:d3:f5:82:0f:ca:17:62: a8:a5:43:51:11:85:6f:ee:a4:49:c5:13:e1:ec:ce:b5:f6:13: cc:95:ed:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyuLevk1nBkOSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWIxYTMwNDYtZTk5ZC00YmUxLTg0MTktYjJkOTIzNjA3OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsej3J/L43ceBbwNyq5dnv0SU5J3iCU/pGD47 7KD7HWG31J8+kJ1oghIQCBMHF+f7rTYTxrmvH5fjQjl9G8ZT05Zy+w0ZM3nNA4RM ESXLAWWrvWGR5Ob46DBvkfIDCzxO8KvtN3LckKjT0CdFsg2bwbH+2F9EtGLhIc/t Xrn6TQFy0RBshA1zuCvGTZTUUf8th57P6rc00Tyw0rU3cdLpN/qVJVpB+S2UNxlv orXXRyg5cERhyt/02aQKxgJyKwtjRkN/HQOR74fnI2G+2/CbpJlvpaIQSMSaS3j+ V6beFWDgL6FrnMCpug/aJX2xiOvOJCJ069o/ol3wr0fwMlSj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEkPz8+qDXSLcC1Uvyrdo5zzhZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTg3OTgzMjgtMDAwYS0z ZjFmLTg1M2YtMjczZjkzMjNiNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7cteBMeGhNtNqmScDnVuhyS8eLrgcHvG8Cdan5y85GkG+9ZoprIxu6 5M5aMlBGHLHBcMqJd4I+1JQ34AMUyPOORvlyUOJQjtE/4tqvx79QI7iI30zQgIiP TjMV4Ju+iMcTe4qfgh95usbSoa9Xl7opSPZTx1/yV7KBPX0L2I1rZl9ED5P7l3oa VNeQfwXB1TmbG31AtsYEuLmCmeN8TKc8iEVDK+CCBpE+Jqt9WTyI/JPGtUi1GMwQ MPjHCsUUszC8y5HcYBk4w3Xxl8KZGNrgJCSvya/kIgkJ00ipsrDLNkwU0/WCD8oX YqilQ1ERhW/upEnFE+HszrX2E8yV7fg= -----END CERTIFICATE-----Generated at Sat May 10 22:07:32 2025 by rpki-client