$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa File: fe7bf971-d595-362a-9a0e-ed505e789075.roa (raw, json) Hash identifier: VPXa8ytIfNCWpaaazUDSQGVWDX+KYhxZ4PRGp33boC0= Subject key identifier: 60:22:6F:60:5A:66:FE:32:72:8C:B0:D5:73:EF:98:B3:BD:45:AD:91 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F432858491AA6D0AA3CAC9256D074FD00 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 20460 IP address blocks: 72.14.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d0:aa:3c:ac:92:56:d0:74:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=49aa0979-31e2-4892-9af4-aa2ba1efab26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:6d:08:df:41:af:c9:93:8e:fd:f4:9b:89: 88:0a:80:06:54:5e:7d:55:cf:65:0b:1c:73:26:90: 67:08:1a:8e:ee:d3:aa:2f:95:a5:4d:57:ab:77:31: ac:7c:b2:9d:b9:29:97:5b:7e:60:42:7a:eb:96:71: 29:08:36:33:4d:b2:d2:0a:97:41:e0:e5:83:71:cf: 24:d6:21:03:ea:69:36:df:e7:b8:28:aa:cf:fe:05: ea:f9:e8:04:35:e2:44:02:ca:cd:de:4c:52:25:6b: f0:0e:d8:b7:b3:a5:69:13:50:b5:58:3e:62:60:33: aa:c4:a7:f8:db:4d:7b:d7:47:db:d5:4d:08:a7:e2: b4:ba:84:75:be:f6:24:95:8c:f2:bc:c8:27:3f:77: cd:65:6a:b7:37:84:97:80:9a:7d:44:a7:7c:ae:e6: aa:37:e3:63:fa:6d:9e:b2:74:b6:40:57:62:59:91: a8:1d:86:88:8b:a0:7b:85:81:db:ff:1d:58:39:42: 10:e7:f7:2c:a2:b6:02:f9:69:ec:a8:7f:aa:8b:14: c2:c4:73:86:80:a2:9a:33:8a:60:63:bc:d5:e4:0a: 44:4e:17:59:98:63:62:d4:59:ac:ee:68:53:fe:6b: 4c:93:88:e2:c4:17:82:75:80:95:7e:4d:2f:32:e7: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:22:6F:60:5A:66:FE:32:72:8C:B0:D5:73:EF:98:B3:BD:45:AD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6b:d2:ff:cf:e4:bd:a1:01:df:e0:e0:e0:4a:fa:e7:94:a4: 5d:f4:2e:9c:40:d8:75:26:3c:99:44:32:6c:a7:20:76:c5:05: 0b:96:16:13:21:e8:c6:ae:12:c6:59:71:94:b7:fd:9f:77:0e: 96:63:f9:21:d2:68:ea:ba:c6:e3:47:e2:29:f9:17:04:5b:5e: 0e:e9:60:10:10:52:09:e8:61:2e:df:14:a2:32:14:49:48:75: 19:b7:c2:63:4c:95:95:30:fb:d6:47:11:11:e6:0f:c8:33:28: 37:84:64:5b:9d:73:98:7e:9c:26:c1:d5:3b:08:ba:bb:85:ae: 39:e6:8d:fd:bd:bd:da:f6:33:06:b7:db:6d:40:f9:8e:51:40: f6:ff:cf:07:ab:43:5a:fe:8f:f5:94:43:cd:45:c8:d5:43:89: cc:87:b6:a6:51:89:72:10:7e:5d:19:f2:35:82:9a:98:35:d9: e6:ae:a0:8e:b9:6e:4b:a2:f0:5e:67:ad:cf:3d:f3:4d:52:8e: 92:b1:99:56:d8:5d:1c:8e:3e:a0:9f:06:ee:24:dc:0e:a0:6f: 53:49:9f:9c:e6:2b:e6:20:64:c0:b1:46:f0:44:70:32:22:80: 24:69:36:67:04:39:f2:95:b8:e9:89:d2:4c:72:30:3b:f1:78: 31:1d:ac:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaptCqPKySVtB0/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NDlhYTA5NzktMzFlMi00ODkyLTlhZjQtYWEyYmExZWZhYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvxtCN9Br8mTjv30m4mICoAGVF59Vc9lCxxz JpBnCBqO7tOqL5WlTVerdzGsfLKduSmXW35gQnrrlnEpCDYzTbLSCpdB4OWDcc8k 1iED6mk23+e4KKrP/gXq+egENeJEAsrN3kxSJWvwDti3s6VpE1C1WD5iYDOqxKf4 201710fb1U0Ip+K0uoR1vvYklYzyvMgnP3fNZWq3N4SXgJp9RKd8ruaqN+Nj+m2e snS2QFdiWZGoHYaIi6B7hYHb/x1YOUIQ5/csorYC+WnsqH+qixTCxHOGgKKaM4pg Y7zV5ApEThdZmGNi1Fms7mhT/mtMk4jixBeCdYCVfk0vMuc/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAib2BaZv4ycoyw1XPvmLO9Ra2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmU3YmY5NzEtZDU5NS0z NjJhLTlhMGUtZWQ1MDVlNzg5MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtr0v/P5L2hAd/g4OBK+ueUpF30LpxA2HUmPJlEMmynIHbFBQuWFhMh 6MauEsZZcZS3/Z93DpZj+SHSaOq6xuNH4in5FwRbXg7pYBAQUgnoYS7fFKIyFElI dRm3wmNMlZUw+9ZHERHmD8gzKDeEZFudc5h+nCbB1TsIuruFrjnmjf29vdr2Mwa3 221A+Y5RQPb/zwerQ1r+j/WUQ81FyNVDicyHtqZRiXIQfl0Z8jWCmpg12eauoI65 bkui8F5nrc89801SjpKxmVbYXRyOPqCfBu4k3A6gb1NJn5zmK+YgZMCxRvBEcDIi gCRpNmcEOfKVuOmJ0kxyMDvxeDEdrLY= -----END CERTIFICATE-----Generated at Wed May 7 13:12:49 2025 by rpki-client