$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa File: 9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa (raw, json) Hash identifier: XZJJoaAL117f7jwlITWGGso9vVFJS8igdL3w8J3Hj7k= Subject key identifier: 54:3C:18:34:4F:D6:14:A7:97:90:56:77:55:E2:90:F7:F4:A3:7A:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB31950185D3DFCCF7BDC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 162.72.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:31:95:01:85:d3:df:cc:f7:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c1c47e3a-41b7-4af5-be61-a92526e8c64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:e7:b3:d1:57:af:6f:6c:bb:33:12:68:7b: 30:8e:d9:3a:ae:a9:af:44:7d:9d:ac:6a:b3:4d:04: 0a:08:9e:c3:8c:a6:c3:24:55:90:c9:ae:de:20:34: 4a:b1:97:83:af:77:c0:7b:e0:0f:ea:3a:36:58:c4: 10:ac:96:93:3b:26:37:c3:ff:83:7f:55:5f:d4:2f: 7d:d5:39:c3:ef:ce:ca:62:d2:87:88:15:6f:41:cb: ca:13:58:9d:a6:bb:3a:f1:a0:94:10:2f:8d:af:db: 34:f8:0b:75:b0:60:99:69:b4:5c:ed:60:31:81:b7: b7:5c:da:56:25:9b:d6:45:e3:49:f0:6a:cb:51:41: ac:1f:c3:bc:ba:a3:f4:cb:30:67:e9:ed:bd:62:c0: 8a:30:ff:a2:7e:1a:34:96:92:84:03:8f:2f:45:ab: 2f:cf:f9:58:c4:30:32:63:1e:19:60:cb:d5:ac:98: 6f:60:d5:10:66:fb:ff:81:05:60:f2:a0:29:82:3c: 9f:c5:2a:ce:31:97:df:57:8e:51:d0:d7:83:48:1b: 32:67:78:3a:3a:87:a7:95:90:9d:1f:88:4a:a1:d5: 06:a4:1b:42:1a:89:4f:3a:d6:54:f6:68:24:6d:41: 7b:0b:d9:29:6d:58:64:0b:08:97:0f:77:2a:84:18: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3C:18:34:4F:D6:14:A7:97:90:56:77:55:E2:90:F7:F4:A3:7A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9afb65a4-0ce3-3ab3-b94b-d9e5d4e1610b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:ca:81:9b:9a:81:6b:f9:0b:69:e7:b4:58:0a:c7:7d:36: 72:12:11:c5:b3:38:6e:65:c5:df:fb:6d:3d:9b:4c:0e:33:db: 86:11:4e:c4:58:0a:ef:9e:b6:b0:d3:26:63:8f:a4:2e:c5:4c: e8:3a:56:0d:5d:bc:eb:fd:02:34:8a:12:b3:4a:5a:0f:ff:24: cd:66:fd:e6:53:05:15:67:a0:cb:37:09:1b:86:db:e4:e2:7d: d6:b9:cd:dc:c4:e4:c7:18:1a:dd:b6:2c:5e:cd:04:be:b2:2b: e8:a5:d8:b9:17:4f:c8:68:dc:09:a7:41:99:1e:b0:84:0b:f7: 9e:90:54:e4:ff:23:6a:bb:4f:5e:30:fa:76:60:24:ef:99:ff: 87:5b:3e:c4:72:5b:0a:8c:d6:93:4c:c1:56:c9:3d:65:ee:ba: 6f:f6:c6:56:07:d4:0d:95:25:3f:6f:c8:90:86:a1:7d:dc:e7: e3:2d:b0:04:a6:e9:09:db:10:b8:72:a3:74:99:8c:80:2a:30: 5b:79:1c:32:46:da:80:e6:59:12:d7:56:fc:2c:19:68:b6:ae: e0:8d:67:fe:2d:53:9c:29:ae:b6:be:68:64:09:0f:40:ab:13: 95:c6:ff:5e:e3:52:82:a6:cb:ce:76:32:6a:72:01:9f:75:3a: 33:df:16:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzGVAYXT38z3vcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzFjNDdlM2EtNDFiNy00YWY1LWJlNjEtYTkyNTI2ZThjNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhejns9FXr29suzMSaHswjtk6rqmvRH2drGqz TQQKCJ7DjKbDJFWQya7eIDRKsZeDr3fAe+AP6jo2WMQQrJaTOyY3w/+Df1Vf1C99 1TnD787KYtKHiBVvQcvKE1idprs68aCUEC+Nr9s0+At1sGCZabRc7WAxgbe3XNpW JZvWReNJ8GrLUUGsH8O8uqP0yzBn6e29YsCKMP+ifho0lpKEA48vRasvz/lYxDAy Yx4ZYMvVrJhvYNUQZvv/gQVg8qApgjyfxSrOMZffV45R0NeDSBsyZ3g6OoenlZCd H4hKodUGpBtCGolPOtZU9mgkbUF7C9kpbVhkCwiXD3cqhBjNUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ8GDRP1hSnl5BWd1XikPf0o3o0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWFmYjY1YTQtMGNlMy0z YWIzLWI5NGItZDllNWQ0ZTE2MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhDyoGbmoFr+Qtp57RYCsd9NnISEcWzOG5lxd/7bT2bTA4z24YRTsRY Cu+etrDTJmOPpC7FTOg6Vg1dvOv9AjSKErNKWg//JM1m/eZTBRVnoMs3CRuG2+Ti fda5zdzE5McYGt22LF7NBL6yK+il2LkXT8ho3AmnQZkesIQL956QVOT/I2q7T14w +nZgJO+Z/4dbPsRyWwqM1pNMwVbJPWXuum/2xlYH1A2VJT9vyJCGoX3c5+MtsASm 6QnbELhyo3SZjIAqMFt5HDJG2oDmWRLXVvwsGWi2ruCNZ/4tU5wprra+aGQJD0Cr E5XG/17jUoKmy852MmpyAZ91OjPfFj4= -----END CERTIFICATE-----Generated at Tue May 6 20:43:47 2025 by rpki-client