$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa File: 84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa (raw, json) Hash identifier: arVEr3xi1yadtVGGn94By+FKLTCw09pwrlrReT0PjA0= Subject key identifier: 10:87:42:4D:F6:CB:0E:EA:4F:8C:6B:CB:D5:16:2F:0C:67:E1:9E:54 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F9853572E26211E2EB00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f9:85:35:72:e2:62:11:e2:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=41dd8ba6-e68b-4b4a-8c81-09338b8d6a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:29:44:99:be:f6:c4:25:e0:8f:a3:a8:6b: 1a:40:7a:ed:c4:3d:9b:f2:49:80:ab:1b:d1:7d:a1: e7:a0:41:20:ff:84:1c:ef:8a:7c:ca:17:cf:4c:36: 5c:66:1c:a9:72:1d:10:28:37:b6:cf:06:32:c2:ee: db:f3:f2:69:0d:56:88:3e:02:c8:51:69:00:7a:c9: 86:d8:2c:4c:6d:8f:b3:66:aa:e1:c8:f8:68:61:f0: e9:4e:3d:f4:a7:f9:a9:ea:cb:a2:4a:8d:ec:d7:f9: c0:1f:1a:5d:d4:29:3a:1b:ba:93:1b:17:dd:a6:7f: 5c:6a:88:9f:a8:40:2b:af:0d:60:60:e2:16:cf:f8: 1b:0f:77:98:0a:1b:7c:06:8d:39:cf:ba:8c:bd:4d: 7f:c3:5c:25:9e:6d:5d:14:71:22:6d:cf:6a:23:27: a4:c6:96:2a:af:45:43:ee:f8:e2:8f:b8:24:da:76: d9:24:02:45:79:1f:c6:c1:b4:cf:6f:ad:d4:53:54: 87:62:54:d4:2c:2d:c5:2a:d2:94:99:01:00:aa:2f: 33:7c:a2:9b:38:1f:d4:1b:82:fd:e4:11:a5:f1:db: f1:71:95:be:49:65:b8:b1:ab:d5:4d:d7:e1:c4:39: 5b:68:34:39:5b:9f:05:6f:52:36:eb:0e:71:57:86: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:42:4D:F6:CB:0E:EA:4F:8C:6B:CB:D5:16:2F:0C:67:E1:9E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2c:5e:cd:5d:fa:72:9c:e5:42:f9:8d:e2:4c:92:c7:2f:18: 46:b9:4e:90:03:15:25:b5:63:cc:76:bf:f1:3a:52:58:db:ee: 94:63:dc:55:1d:fc:4a:36:48:16:4a:16:1d:fe:d9:49:ee:3c: d5:50:37:5d:5b:66:e9:97:18:d0:82:26:ea:56:8e:ae:41:57: a1:b8:9f:d8:ec:b2:74:0c:a2:ea:8e:95:60:6c:3c:73:69:3f: 85:c7:18:06:09:c0:79:d1:b6:da:46:02:47:09:7a:da:41:f6: 9b:5d:f3:f8:b5:58:a5:e0:f4:83:0e:78:fe:2f:41:df:c8:d3: 63:c6:98:80:58:db:42:d4:f5:1f:fd:3f:98:a6:a6:be:d6:c1: 24:45:91:1a:cb:41:68:8d:a1:d1:07:fb:a4:ae:df:d1:fe:98: 41:57:f7:70:14:d7:fc:84:ca:d9:a9:0b:f6:1c:0b:e5:72:8e: 23:8c:63:82:86:1c:c4:c3:30:26:1b:5e:b4:9f:1e:d3:aa:d9: d1:2b:0e:a4:d5:f4:73:b4:36:b8:a8:60:cc:8d:3e:05:68:dc: 5a:c3:ab:63:b6:a9:4b:fa:d5:80:d5:a1:84:fb:c1:2a:ab:f2: ed:14:3d:8b:eb:bc:a8:1c:96:eb:85:e9:03:f4:e4:0e:1e:7f: 8a:c0:9d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufmFNXLiYhHi6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDFkZDhiYTYtZTY4Yi00YjRhLThjODEtMDkzMzhiOGQ2YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8kpRJm+9sQl4I+jqGsaQHrtxD2b8kmAqxvR faHnoEEg/4Qc74p8yhfPTDZcZhypch0QKDe2zwYywu7b8/JpDVaIPgLIUWkAesmG 2CxMbY+zZqrhyPhoYfDpTj30p/mp6suiSo3s1/nAHxpd1Ck6G7qTGxfdpn9caoif qEArrw1gYOIWz/gbD3eYCht8Bo05z7qMvU1/w1wlnm1dFHEibc9qIyekxpYqr0VD 7vjij7gk2nbZJAJFeR/GwbTPb63UU1SHYlTULC3FKtKUmQEAqi8zfKKbOB/UG4L9 5BGl8dvxcZW+SWW4savVTdfhxDlbaDQ5W58Fb1I26w5xV4aOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCHQk32yw7qT4xry9UWLwxn4Z5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvODRjZWY0ZDItYjNjYS0z YWRiLWJmY2EtOWU0YjQ4Njc0MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcsXs1d+nKc5UL5jeJMkscvGEa5TpADFSW1Y8x2v/E6Uljb7pRj3FUd /Eo2SBZKFh3+2UnuPNVQN11bZumXGNCCJupWjq5BV6G4n9jssnQMouqOlWBsPHNp P4XHGAYJwHnRttpGAkcJetpB9ptd8/i1WKXg9IMOeP4vQd/I02PGmIBY20LU9R/9 P5impr7WwSRFkRrLQWiNodEH+6Su39H+mEFX93AU1/yEytmpC/YcC+VyjiOMY4KG HMTDMCYbXrSfHtOq2dErDqTV9HO0NrioYMyNPgVo3FrDq2O2qUv61YDVoYT7wSqr 8u0UPYvrvKgcluuF6QP05A4ef4rAnSQ= -----END CERTIFICATE-----Generated at Fri May 9 03:00:02 2025 by rpki-client