$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa File: ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa (raw, json) Hash identifier: 7xJmK5FS15Tdva84yL0qfRH2mrnQNNVFU8B2/GRvz38= Subject key identifier: 7E:B3:87:81:27:C4:9F:06:60:E3:8A:2B:4A:CC:1B:97:E6:E0:5F:74 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285849B57A06AF3901C1DD7945BB00 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 151872 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:06:af:39:01:c1:dd:79:45:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=747d4e98-370c-45d0-b7a2-2c328ee3482a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:0a:3b:7a:0e:c0:29:bb:7d:6f:d4:18:ea: 65:97:60:92:22:b1:d2:05:f4:f7:ae:77:bf:92:19: bc:a8:2f:69:19:ef:ab:21:9c:46:1e:7c:b5:d5:46: 74:57:da:29:e4:df:ab:7a:75:54:7a:cd:0e:a8:8f: fb:78:8d:80:a6:d1:0f:3b:0d:9a:81:26:76:50:b5: 16:e2:8e:17:22:3e:fd:e5:dd:19:50:e0:21:c6:18: aa:16:c5:6a:44:ec:05:b9:05:eb:7f:1d:3b:74:7f: 68:59:a1:fd:f5:2f:71:b9:44:79:fd:5f:13:41:c5: 45:a6:68:b2:90:13:72:c0:7a:d2:22:6d:95:5b:09: ba:a1:16:5d:9c:37:29:ee:08:57:32:8e:b5:19:b5: cb:fa:b3:cd:9f:16:1c:77:dd:50:50:e0:47:60:db: 17:c9:ed:23:b8:73:1d:e4:18:ef:3f:56:22:b7:ac: b8:6c:3c:52:69:30:53:56:f0:77:53:61:b0:7d:b9: 42:27:d3:0e:d7:15:2e:4a:d6:a3:55:b8:08:77:bc: 00:81:5e:0c:5e:0e:76:b7:f3:ce:c7:27:77:f2:0c: 01:a7:d0:8c:54:8b:0b:7a:cc:6b:93:57:5e:a7:c3: 76:48:f7:79:a5:3a:74:2a:49:1a:a4:41:79:17:74: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:87:81:27:C4:9F:06:60:E3:8A:2B:4A:CC:1B:97:E6:E0:5F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:2a:cc:43:05:23:11:9e:60:3d:0c:97:b3:b3:99:e4:48: e8:36:66:f5:11:06:eb:67:7e:f3:86:1d:65:38:ca:a3:bb:f5: 5f:7f:59:87:77:a4:f4:55:b5:8b:5a:21:91:fa:17:18:f8:73: 25:51:83:ce:38:74:12:cb:d3:56:21:30:b5:22:64:84:94:bb: 22:a2:2e:9f:15:b8:ec:69:32:af:3c:f7:0a:9e:41:25:79:2b: 08:0d:12:9c:b0:c3:1c:83:da:e2:32:b3:ff:0f:d0:65:2a:45: d5:26:e3:c8:30:db:e5:50:eb:0a:0b:23:84:fd:a8:6b:e1:bc: ba:61:ad:64:f8:ec:08:1b:29:3d:ac:ea:fa:41:44:75:6f:00: 08:9b:1f:46:c2:c2:59:9b:cc:1e:c8:0e:06:da:07:ff:17:db: 90:2f:28:01:38:9f:6a:da:4c:d6:d5:85:cd:1d:78:63:92:42: ed:70:8c:63:dc:82:8f:49:e5:58:53:e2:33:77:be:98:46:ec: db:55:60:f4:bc:fe:90:81:ef:52:ea:b1:87:9e:e1:c3:af:02: 97:b7:a2:79:a5:bc:0a:db:3c:0e:b9:0d:9f:fa:0b:6c:da:4b: 91:42:0d:72:b7:11:bd:1d:1b:d2:32:31:4d:39:fb:6f:2e:73: 3e:72:89:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1egavOQHB3XlFuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NzQ3ZDRlOTgtMzcwYy00NWQwLWI3YTItMmMzMjhlZTM0ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JgKO3oOwCm7fW/UGOpll2CSIrHSBfT3rne/ khm8qC9pGe+rIZxGHny11UZ0V9op5N+renVUes0OqI/7eI2AptEPOw2agSZ2ULUW 4o4XIj795d0ZUOAhxhiqFsVqROwFuQXrfx07dH9oWaH99S9xuUR5/V8TQcVFpmiy kBNywHrSIm2VWwm6oRZdnDcp7ghXMo61GbXL+rPNnxYcd91QUOBHYNsXye0juHMd 5BjvP1Yit6y4bDxSaTBTVvB3U2GwfblCJ9MO1xUuStajVbgId7wAgV4MXg52t/PO xyd38gwBp9CMVIsLesxrk1dep8N2SPd5pTp0KkkapEF5F3Q4MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6zh4EnxJ8GYOOKK0rMG5fm4F90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmY0MzAxYTQtNGE0Yi0z MzBhLTlmMDMtZTg2YmM5ZWI0ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi3KsxDBSMRnmA9DJezs5nkSOg2ZvURButnfvOGHWU4yqO79V9/WYd3 pPRVtYtaIZH6Fxj4cyVRg844dBLL01YhMLUiZISUuyKiLp8VuOxpMq889wqeQSV5 KwgNEpywwxyD2uIys/8P0GUqRdUm48gw2+VQ6woLI4T9qGvhvLphrWT47AgbKT2s 6vpBRHVvAAibH0bCwlmbzB7IDgbaB/8X25AvKAE4n2raTNbVhc0deGOSQu1wjGPc go9J5VhT4jN3vphG7NtVYPS8/pCB71LqsYee4cOvApe3onmlvArbPA65DZ/6C2za S5FCDXK3Eb0dG9IyMU05+28ucz5yiQs= -----END CERTIFICATE-----Generated at Wed May 7 08:30:09 2025 by rpki-client