$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa File: a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa (raw, json) Hash identifier: s9fJr8skIrYQdxZx4Z1kDpRITH8DFDS4HFlCIIj3keE= Subject key identifier: 6B:AF:5B:EC:AC:6A:CE:59:4E:25:20:0D:86:47:62:80:7B:83:64:B2 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584A4DA045502C18A07BFDF8DA80 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 152700 IP address blocks: 72.14.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:45:50:2c:18:a0:7b:fd:f8:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=af5b0abd-258c-45d1-ad2c-a74204d7b114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:78:27:cc:f8:d4:cc:02:f2:3e:4b:0e:c6: 18:94:87:14:98:0d:57:a3:5c:cb:97:76:a1:ba:db: 8e:e8:f5:7f:f1:48:02:f6:39:41:af:6d:7a:82:2a: 37:2d:9f:77:af:f2:e0:17:55:6a:99:17:b2:36:f9: ef:c4:28:1d:88:4c:82:12:ca:ab:16:ff:12:8e:d6: a8:d7:69:1b:8b:0f:8b:6a:d2:48:3c:bf:16:06:e8: ca:7b:1c:94:ee:5c:75:6d:1e:a7:86:3b:76:01:45: f2:7a:07:d6:85:20:31:2d:82:63:a3:81:cb:5c:1d: 48:2d:d5:a6:31:76:c1:39:e1:8a:5c:3c:0e:4a:35: 88:7f:25:4d:d4:d0:fc:5e:4b:a7:c8:70:f1:64:55: 57:2c:58:1e:cb:be:57:5f:26:06:b0:03:b9:b8:ce: 06:06:5e:06:03:05:8f:72:da:92:f0:ce:97:e5:e5: b2:47:1d:77:66:3d:76:cd:35:53:33:8c:9a:76:67: 83:11:a5:b3:36:de:44:fe:8f:7b:b8:57:4d:f5:43: 87:0c:2e:c6:6a:9e:84:d3:e6:47:9e:2d:a1:3c:a4: 41:1a:1c:ca:41:d9:fa:80:f9:03:6a:5d:60:89:c5: ab:a8:e9:01:42:06:7f:06:0f:27:c3:d8:ab:74:2d: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AF:5B:EC:AC:6A:CE:59:4E:25:20:0D:86:47:62:80:7B:83:64:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:85:5b:6a:3d:12:f3:ed:50:87:1c:a6:23:c6:c2:d4:8f:60: b6:18:21:17:4f:c7:00:0e:1c:56:7e:53:7e:8b:27:69:9a:9c: c0:5f:b7:e5:91:3a:dc:b5:1d:91:1b:9a:be:b7:c6:6b:59:97: a6:0a:47:13:b7:cc:b2:7e:46:f9:c0:a1:26:68:62:9e:6d:db: 48:c0:d3:63:39:dc:eb:2b:29:2e:17:36:c6:c9:f3:37:e6:29: 2b:de:cb:6f:76:1c:19:a0:8b:f8:c1:ca:9c:a4:7e:d3:f8:9e: 4f:9f:02:42:67:1e:7f:95:2f:bd:a5:3a:0a:96:2c:34:d0:8e: 34:99:d6:13:b6:55:b1:1d:d7:6b:b1:83:6e:2a:7d:c3:71:92: e9:67:59:7f:b5:c7:dc:6c:b6:d2:95:99:3e:3f:4b:86:f3:50: 0c:df:4b:ec:4f:06:7a:ec:5b:d0:6b:f9:15:11:4a:0a:94:31: fe:7d:d2:8a:92:3d:33:e1:f2:b5:2c:24:50:89:82:49:48:aa: fd:72:9b:10:f2:4b:11:1c:71:95:f9:01:23:18:e7:b7:48:10: 44:24:67:57:05:a4:81:18:ce:2b:f1:99:22:28:ea:10:ce:52: ba:b5:a0:29:a4:27:d8:e5:51:26:d3:d9:e5:f9:8e:6b:76:7c: 40:5a:dd:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoEVQLBige/342oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YWY1YjBhYmQtMjU4Yy00NWQxLWFkMmMtYTc0MjA0ZDdiMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXx4J8z41MwC8j5LDsYYlIcUmA1Xo1zLl3ah utuO6PV/8UgC9jlBr216gio3LZ93r/LgF1VqmReyNvnvxCgdiEyCEsqrFv8Sjtao 12kbiw+LatJIPL8WBujKexyU7lx1bR6nhjt2AUXyegfWhSAxLYJjo4HLXB1ILdWm MXbBOeGKXDwOSjWIfyVN1ND8XkunyHDxZFVXLFgey75XXyYGsAO5uM4GBl4GAwWP ctqS8M6X5eWyRx13Zj12zTVTM4yadmeDEaWzNt5E/o97uFdN9UOHDC7Gap6E0+ZH ni2hPKRBGhzKQdn6gPkDal1gicWrqOkBQgZ/Bg8nw9irdC2J8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuvW+ysas5ZTiUgDYZHYoB7g2SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTA1ZmRlNmMtZDJmZi0z NzAxLTkyNTItZGRhOGRhNWI3OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeFW2o9EvPtUIccpiPGwtSPYLYYIRdPxwAOHFZ+U36LJ2manMBft+WR Oty1HZEbmr63xmtZl6YKRxO3zLJ+RvnAoSZoYp5t20jA02M53OsrKS4XNsbJ8zfm KSvey292HBmgi/jBypykftP4nk+fAkJnHn+VL72lOgqWLDTQjjSZ1hO2VbEd12ux g24qfcNxkulnWX+1x9xsttKVmT4/S4bzUAzfS+xPBnrsW9Br+RURSgqUMf590oqS PTPh8rUsJFCJgklIqv1ymxDySxEccZX5ASMY57dIEEQkZ1cFpIEYzivxmSIo6hDO Urq1oCmkJ9jlUSbT2eX5jmt2fEBa3Qs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:02:04 2025 by rpki-client