$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa File: f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa (raw, json) Hash identifier: SWix6dtWC/lG5Ao4mBGcIkddb9OZt4z493RLfmpoFkE= Subject key identifier: D2:F7:B3:D3:3A:02:F5:F3:9D:9D:8D:9C:F0:D4:33:65:76:84:4B:09 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285849E91FA6A9C551E22B6400B3FC Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 272370 IP address blocks: 72.14.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a6:a9:c5:51:e2:2b:64:00:b3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=d24c18c9-b97e-45a1-a69d-9044f32e57ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:8c:68:2e:9b:eb:7d:a7:0d:9a:fc:7e:4c: dd:b9:d4:bf:03:56:b7:3b:97:ee:58:8b:dc:5f:47: 01:a6:9c:d1:46:5c:ad:d1:fd:96:4e:2f:a9:9a:fb: 9a:97:4d:b3:28:ab:78:09:5a:6a:a7:db:4b:a9:bd: d3:19:60:ae:f6:63:a3:9a:3f:b0:b1:44:1f:8c:84: ac:91:90:bf:21:3e:b1:0c:d8:df:eb:c8:59:81:65: 25:7b:03:e2:50:63:31:cb:f8:4f:da:04:e2:84:45: e6:4f:8c:ac:a3:67:63:24:cd:3a:33:52:63:a5:39: d2:04:8f:e8:c3:5e:9a:50:d4:02:91:bd:73:0d:a4: e3:98:28:10:13:e3:2e:ee:db:b8:27:2a:05:41:db: a6:b8:85:23:7d:f1:83:34:c3:70:61:95:1c:0d:8f: 61:c7:3a:ff:b5:3b:83:81:24:7c:43:76:14:5a:46: 7d:41:e5:ce:44:c0:22:af:c2:89:81:12:70:b4:97: 74:7f:90:69:10:e2:71:0d:11:11:54:9f:11:43:0c: 21:aa:90:08:14:a4:51:5f:6e:14:5b:7b:92:13:7f: 87:dd:e0:7b:9d:00:70:a8:d1:33:df:b4:fe:aa:43: 22:8e:75:da:ca:3e:2b:68:f6:a7:8d:4a:af:40:30: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:B3:D3:3A:02:F5:F3:9D:9D:8D:9C:F0:D4:33:65:76:84:4B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:eb:61:e7:a8:cc:cf:28:48:f7:bf:57:cd:97:99:7b:41:4a: 3f:fc:85:0b:9f:db:c9:74:64:bf:bb:8b:3a:bb:14:7b:fd:5c: db:ff:c8:77:41:00:c7:fb:f6:05:db:fe:b6:9b:7b:ec:5e:11: 02:31:d0:c5:c6:52:c3:2f:5f:68:2f:16:e0:55:6d:d2:ec:d5: 12:b0:9d:6b:fc:11:ad:a5:23:bc:f1:45:0e:db:ac:9b:c5:8a: 0c:ff:64:8f:fe:6c:39:13:bf:4d:dc:23:8d:ad:c4:1b:b3:a3: 11:f2:49:5e:97:9d:d3:13:04:eb:9f:a8:74:05:4f:d6:c1:a1: 51:f9:80:17:77:4f:32:d7:55:15:55:e2:9d:be:21:f0:a6:77: d5:20:ad:f1:28:40:58:26:5b:5d:05:da:77:e8:f1:8d:76:1d: 2d:b7:23:26:15:e3:d1:90:6a:e1:d1:26:a1:4f:ba:45:51:93: d6:5d:bc:58:14:4e:45:f8:e1:e9:3b:f6:7e:a2:8b:68:1b:8b: 52:63:be:98:71:8d:f9:ff:4c:e9:62:43:75:bf:45:6f:07:c1: a7:99:48:9a:c1:3d:3e:2b:6f:3e:08:08:b7:6c:b2:79:80:8d: 8b:5d:93:85:c8:95:22:ae:40:de:60:7e:68:e6:30:6b:65:45: 33:43:00:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6apxVHiK2QAs/wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZDI0YzE4YzktYjk3ZS00NWExLWE2OWQtOTA0NGYzMmU1N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5GMaC6b632nDZr8fkzdudS/A1a3O5fuWIvc X0cBppzRRlyt0f2WTi+pmvual02zKKt4CVpqp9tLqb3TGWCu9mOjmj+wsUQfjISs kZC/IT6xDNjf68hZgWUlewPiUGMxy/hP2gTihEXmT4yso2djJM06M1JjpTnSBI/o w16aUNQCkb1zDaTjmCgQE+Mu7tu4JyoFQdumuIUjffGDNMNwYZUcDY9hxzr/tTuD gSR8Q3YUWkZ9QeXORMAir8KJgRJwtJd0f5BpEOJxDRERVJ8RQwwhqpAIFKRRX24U W3uSE3+H3eB7nQBwqNEz37T+qkMijnXayj4raPanjUqvQDDG8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL3s9M6AvXznZ2NnPDUM2V2hEsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZjJiZWNiZWEtOGU1Zi0z ZGQ2LWJiZTAtMzhjODMxNWFhMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbrYeeozM8oSPe/V82XmXtBSj/8hQuf28l0ZL+7izq7FHv9XNv/yHdB AMf79gXb/rabe+xeEQIx0MXGUsMvX2gvFuBVbdLs1RKwnWv8Ea2lI7zxRQ7brJvF igz/ZI/+bDkTv03cI42txBuzoxHySV6XndMTBOufqHQFT9bBoVH5gBd3TzLXVRVV 4p2+IfCmd9UgrfEoQFgmW10F2nfo8Y12HS23IyYV49GQauHRJqFPukVRk9ZdvFgU TkX44ek79n6ii2gbi1Jjvphxjfn/TOliQ3W/RW8HwaeZSJrBPT4rbz4ICLdssnmA jYtdk4XIlSKuQN5gfmjmMGtlRTNDAJQ= -----END CERTIFICATE-----Generated at Sun Jun 29 23:20:46 2025 by rpki-client