$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa File: fe7bf971-d595-362a-9a0e-ed505e789075.roa (raw, json) Hash identifier: h5roZ9ExyuHozBpvDcrSnmZV5YCUksT/ANsKyV0DUzI= Subject key identifier: 8C:B5:68:18:09:FE:64:A3:68:AF:B1:B3:4E:3F:64:99:86:15:A4:B9 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285849F9DFDD9FC240F3299BC85C5A Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 20460 IP address blocks: 72.14.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:dd:9f:c2:40:f3:29:9b:c8:5c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=596d4c18-642a-418b-a2d4-947bd8c8e791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:87:8b:95:25:7e:f4:3b:1b:69:e8:aa:ee: a8:0e:12:95:a9:5a:9d:c6:60:40:a6:83:7a:27:bd: 63:bd:2a:34:d9:12:d1:8b:b9:dd:f9:5d:c4:9d:d7: 1d:9a:cf:a9:31:f6:3b:f9:08:2c:d7:15:ab:d0:6a: 3c:0d:76:48:8b:b9:43:71:3a:8b:e2:96:35:6d:69: 3c:84:4b:51:22:4e:15:5c:95:4b:da:bb:ff:1c:3b: 7e:12:6e:b2:27:47:f0:8f:02:10:3a:5f:a5:fd:17: e3:41:48:f1:2b:3c:1d:c2:0d:cb:d7:b1:6a:aa:7c: 76:1a:1f:6a:a8:62:21:90:90:b4:a2:4c:83:a4:08: 5a:19:0a:eb:6f:84:2e:87:2b:47:4e:26:de:45:c1: 7b:b7:51:4c:42:a4:23:6f:68:37:71:ee:dc:bd:7a: 75:27:eb:51:46:49:6b:c0:d6:84:2e:e0:ac:9e:64: a9:5b:db:01:91:e5:00:0a:95:b9:af:a4:db:f1:7d: 4b:89:05:35:a1:6d:1d:40:77:62:89:d0:b0:03:9a: f4:30:d7:d1:10:e3:d2:91:ea:45:67:e2:2e:61:88: d5:1b:b8:de:a6:bd:3d:64:b5:9c:c5:b5:f5:db:0f: c0:06:23:99:82:e9:25:06:b7:75:68:f5:52:b6:66: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B5:68:18:09:FE:64:A3:68:AF:B1:B3:4E:3F:64:99:86:15:A4:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:06:4c:cf:6d:41:6c:4a:5e:65:3f:ea:16:ab:58:bc:b2:77: d1:10:94:30:3f:e8:b2:63:21:34:9c:f9:77:bc:e9:cb:40:01: 5a:1b:35:2c:66:d8:a6:c0:c9:7b:17:a7:34:6a:5a:cd:17:ec: 33:fa:2e:c1:39:ac:67:a9:f1:ee:6f:59:55:64:7a:36:da:55: a9:f5:3c:f8:d0:34:86:92:17:38:30:de:8f:4b:1a:52:91:6d: c8:73:00:16:45:6b:65:60:df:8c:e4:78:02:31:bf:22:93:2d: e5:be:7f:81:d3:7a:f4:c0:49:0b:bd:28:4d:9a:8c:c2:14:6b: 09:17:a4:09:c3:59:5e:59:32:0f:96:24:68:75:9e:13:6b:a0: 7a:4a:d8:2d:1f:f4:94:d6:34:14:4e:44:06:80:3b:e6:3a:06: b9:a3:67:2b:34:6d:63:77:fa:8a:75:eb:4b:5e:f7:e2:7c:d4: 38:41:4a:ab:b6:e5:bd:76:36:bc:53:37:d0:c0:9a:28:5a:29: dc:65:de:1c:c3:f8:9a:56:31:6d:28:0f:36:76:ac:03:c9:e4: 4e:90:3d:61:7b:04:10:1b:90:68:90:68:1c:cc:a6:44:47:fd: 2b:50:73:5d:92:73:16:e8:24:7d:86:a0:79:ad:d1:af:41:b9: 6c:32:95:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn5392fwkDzKZvIXFowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NTk2ZDRjMTgtNjQyYS00MThiLWEyZDQtOTQ3YmQ4YzhlNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVeHi5UlfvQ7G2noqu6oDhKVqVqdxmBApoN6 J71jvSo02RLRi7nd+V3Endcdms+pMfY7+Qgs1xWr0Go8DXZIi7lDcTqL4pY1bWk8 hEtRIk4VXJVL2rv/HDt+Em6yJ0fwjwIQOl+l/RfjQUjxKzwdwg3L17Fqqnx2Gh9q qGIhkJC0okyDpAhaGQrrb4QuhytHTibeRcF7t1FMQqQjb2g3ce7cvXp1J+tRRklr wNaELuCsnmSpW9sBkeUACpW5r6Tb8X1LiQU1oW0dQHdiidCwA5r0MNfREOPSkepF Z+IuYYjVG7jepr09ZLWcxbX12w/ABiOZguklBrd1aPVStmZMxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy1aBgJ/mSjaK+xs04/ZJmGFaS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmU3YmY5NzEtZDU5NS0z NjJhLTlhMGUtZWQ1MDVlNzg5MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAGTM9tQWxKXmU/6harWLyyd9EQlDA/6LJjITSc+Xe86ctAAVobNSxm 2KbAyXsXpzRqWs0X7DP6LsE5rGep8e5vWVVkejbaVan1PPjQNIaSFzgw3o9LGlKR bchzABZFa2Vg34zkeAIxvyKTLeW+f4HTevTASQu9KE2ajMIUawkXpAnDWV5ZMg+W JGh1nhNroHpK2C0f9JTWNBRORAaAO+Y6BrmjZys0bWN3+op160te9+J81DhBSqu2 5b12NrxTN9DAmihaKdxl3hzD+JpWMW0oDzZ2rAPJ5E6QPWF7BBAbkGiQaBzMpkRH /StQc12ScxboJH2GoHmt0a9BuWwylac= -----END CERTIFICATE-----Generated at Mon Jun 30 10:25:30 2025 by rpki-client