$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json) Hash identifier: lEs8r5zRSEdcbZBtQ3ITvzJUS0dkNidBnWMFXEgzB9U= Subject key identifier: 4A:C7:0F:D7:17:37:90:4D:AB:27:9B:BF:79:A4:D5:B2:6E:BF:9D:E3 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584ADA9BC01AADD592BA59E57340 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 211373 IP address blocks: 72.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c0:1a:ad:d5:92:ba:59:e5:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=936cf429-f6cc-4230-a46f-9fcde2275f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:95:76:d0:7c:ba:f6:df:9d:28:4d:0d:bc: b4:69:c5:5b:d8:93:cd:1d:f7:50:fc:67:be:22:e1: 70:2b:fd:ce:76:f2:cf:f2:d3:8b:56:5e:a7:59:f5: 67:61:f4:38:45:8f:e6:dc:05:fd:d4:44:f5:97:65: 0b:28:e6:26:37:e1:82:54:f4:6a:dd:ef:96:9d:d6: 69:d4:f5:5e:7b:f7:ae:10:4f:1c:fd:95:86:f1:0c: 3a:bd:0b:5e:69:86:2b:07:61:be:b6:51:3e:47:0a: e7:81:dc:78:37:57:75:fa:d4:2a:1b:ef:d3:95:a1: c9:9f:54:dc:f4:aa:c8:bf:9c:da:d9:c0:c9:e8:bb: 62:8f:ce:db:f6:8a:54:20:86:25:28:d0:9c:d8:c8: ae:18:8a:ff:d4:35:7f:f2:6f:81:86:fa:1a:fd:a9: 72:4d:19:50:cd:48:f8:0d:91:77:cb:06:f7:f9:41: f6:79:19:69:77:9e:62:43:d6:4d:40:d0:ae:39:d6: d5:36:06:08:d9:88:36:a2:e9:f5:d8:a8:b3:75:83: 20:4e:2e:8e:d9:8a:8c:73:b4:00:a8:2f:a4:0e:5f: ad:25:fb:d2:bd:f8:a1:04:62:24:2d:45:b2:0b:fc: 31:2a:cb:ff:bb:c2:ad:dd:73:8a:93:23:98:3d:cd: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:0F:D7:17:37:90:4D:AB:27:9B:BF:79:A4:D5:B2:6E:BF:9D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:03:9f:b6:76:2b:78:66:da:2c:90:5e:21:54:9b:16:75:b7: f4:00:0f:9c:ab:a3:5e:1d:0b:7a:b6:1e:23:a4:9d:4c:be:99: 31:fe:32:1f:c8:b0:47:93:c1:1e:5f:af:b7:45:1e:09:de:9e: a4:44:83:d2:06:f7:dd:47:fa:25:99:d4:49:72:0f:79:96:87: 97:2e:e3:15:ce:e9:b9:a7:1c:7b:30:4c:a1:b3:c8:62:22:01: b9:01:1f:48:10:3f:fc:de:17:a4:6c:00:0d:3c:18:8b:af:3a: da:e6:90:06:9e:7b:48:cf:a6:bb:60:4b:62:46:65:84:43:d1: 3f:b7:ef:9f:74:b9:54:45:b6:ad:37:32:b7:4b:64:0b:1d:f1: f5:83:e7:33:30:ae:6b:46:11:ce:fa:cf:27:e5:50:37:7a:61: 01:96:cf:98:ba:28:6a:98:f4:78:21:0b:b8:2c:c5:6d:b8:66: e4:96:0e:a6:cd:a9:40:37:30:27:34:4e:4d:89:56:c5:7a:17: 0a:86:11:9f:6b:58:08:43:bf:ce:cc:02:02:d8:33:ee:74:75: e8:52:89:9c:fd:a2:cb:0e:02:fe:4f:87:3e:84:7f:17:15:c0: 62:90:34:1c:62:16:61:c5:cc:75:01:45:21:84:56:28:42:9d: 52:31:5f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8AardWSulnlc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OTM2Y2Y0MjktZjZjYy00MjMwLWE0NmYtOWZjZGUyMjc1ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCVdtB8uvbfnShNDby0acVb2JPNHfdQ/Ge+ IuFwK/3OdvLP8tOLVl6nWfVnYfQ4RY/m3AX91ET1l2ULKOYmN+GCVPRq3e+WndZp 1PVee/euEE8c/ZWG8Qw6vQteaYYrB2G+tlE+Rwrngdx4N1d1+tQqG+/TlaHJn1Tc 9KrIv5za2cDJ6Ltij87b9opUIIYlKNCc2MiuGIr/1DV/8m+Bhvoa/alyTRlQzUj4 DZF3ywb3+UH2eRlpd55iQ9ZNQNCuOdbVNgYI2Yg2oun12KizdYMgTi6O2YqMc7QA qC+kDl+tJfvSvfihBGIkLUWyC/wxKsv/u8Kt3XOKkyOYPc1FSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErHD9cXN5BNqyebv3mk1bJuv53jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNzA4ZTA0MWYtNmVlYS0z MmM1LWI1ZWYtMjQzN2I4NmE0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQDn7Z2K3hm2iyQXiFUmxZ1t/QAD5yro14dC3q2HiOknUy+mTH+Mh/I sEeTwR5fr7dFHgnenqREg9IG991H+iWZ1ElyD3mWh5cu4xXO6bmnHHswTKGzyGIi AbkBH0gQP/zeF6RsAA08GIuvOtrmkAaee0jPprtgS2JGZYRD0T+37590uVRFtq03 MrdLZAsd8fWD5zMwrmtGEc76zyflUDd6YQGWz5i6KGqY9HghC7gsxW24ZuSWDqbN qUA3MCc0Tk2JVsV6FwqGEZ9rWAhDv87MAgLYM+50dehSiZz9ossOAv5Phz6EfxcV wGKQNBxiFmHFzHUBRSGEVihCnVIxX4g= -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:14 2025 by rpki-client