$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/86920d0a-4eef-3173-a46b-516410385b8c.roa File: 86920d0a-4eef-3173-a46b-516410385b8c.roa (raw, json) Hash identifier: ugp2RUXlP5hjcQw4LekcKTrlZqBKq/MCLIbhbOtjwfk= Subject key identifier: 28:AB:9B:E4:35:E4:8A:BB:89:DB:76:82:5F:FE:31:0E:F7:CE:DB:34 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F9A0D89CC48F331265C0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/86920d0a-4eef-3173-a46b-516410385b8c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f9:a0:d8:9c:c4:8f:33:12:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ec637502-5aaa-4c96-b623-6947d2e6cb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:25:79:0d:fc:3e:3c:24:8c:19:80:60:c6: 10:b0:d2:ce:b4:d5:e0:e7:a0:dc:da:fa:ad:75:97: 47:2a:bc:06:ef:56:0c:89:da:df:d2:61:fe:f8:20: e7:9c:2c:ef:37:78:e4:0e:e1:b9:58:5a:30:47:ec: 9b:a6:c7:94:00:10:99:4a:21:60:50:d5:c0:40:2b: 4e:fb:88:89:6c:48:5f:cb:a7:09:06:11:d2:f6:ec: 06:47:4f:e6:d0:d0:65:4d:a6:73:d2:fa:04:0f:48: 20:c3:54:6a:cc:76:9d:e9:b2:3b:5a:d0:38:e5:b0: 28:3b:f9:3a:f6:39:2b:4f:30:b9:82:6f:5b:32:d9: a5:5e:3b:5f:03:d7:01:d2:7f:85:50:35:d7:e5:3e: 19:15:1f:d1:26:ae:92:10:5f:a8:a5:71:85:f0:99: 5c:ed:6e:54:89:ed:31:29:5d:c0:7c:54:25:73:76: 00:e5:ee:2c:0c:7e:47:66:64:14:50:04:36:dc:3c: 93:e8:9d:59:ee:19:fc:78:a6:32:2a:44:26:b8:cb: fd:79:c7:6f:fc:55:06:45:4f:2c:61:34:ef:44:ca: c9:a2:fc:54:3c:64:15:35:ed:8b:35:53:7d:f8:72: c1:8e:30:18:8f:84:6b:69:59:44:b7:12:79:95:8a: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AB:9B:E4:35:E4:8A:BB:89:DB:76:82:5F:FE:31:0E:F7:CE:DB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/86920d0a-4eef-3173-a46b-516410385b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:0d:0a:79:74:a7:b3:d6:89:58:9c:29:d3:5e:c2:b9:a0:c3: 53:37:6d:10:cd:25:d1:fd:41:18:b1:ff:68:41:9c:7b:cb:63: 29:fc:c6:d6:a4:3b:00:6a:ba:b7:ec:6a:9f:9d:0e:67:ee:5f: 11:68:04:bd:90:7c:5a:f7:9b:ec:d9:54:1e:6d:9b:f2:2d:f6: 04:bb:8e:fb:f4:c8:22:8c:70:8f:f0:6c:27:65:a9:ab:3a:d8: ba:a6:7c:5c:31:18:2c:7a:5c:87:9f:4e:94:14:7e:06:4c:e1: 85:f2:ca:16:c6:31:e9:07:ad:3f:35:da:23:34:af:5c:75:e4: 8f:1e:83:d8:f7:2d:8f:c9:d6:3b:07:07:a7:5f:44:3d:b2:6d: c4:19:35:06:6a:d2:30:f7:13:73:e9:b4:2e:e3:8c:30:70:c3: d1:7e:ff:09:63:97:3e:fe:fc:87:5d:6b:45:70:c1:6a:3c:b9: f0:1f:05:9f:aa:46:d2:ff:64:6b:51:04:53:2c:cf:e7:fc:38: ee:88:07:a4:03:63:30:17:f2:b4:fd:99:aa:5a:18:a0:61:51: d4:02:db:ea:8a:e4:ce:54:fe:e2:79:dd:bc:4f:ca:b1:53:31: 89:a3:d7:f8:fd:00:ac:6f:83:39:48:18:29:43:bb:4d:81:20: d7:51:35:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufmg2JzEjzMSZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWM2Mzc1MDItNWFhYS00Yzk2LWI2MjMtNjk0N2QyZTZjYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN8leQ38PjwkjBmAYMYQsNLOtNXg56Dc2vqt dZdHKrwG71YMidrf0mH++CDnnCzvN3jkDuG5WFowR+ybpseUABCZSiFgUNXAQCtO +4iJbEhfy6cJBhHS9uwGR0/m0NBlTaZz0voED0ggw1RqzHad6bI7WtA45bAoO/k6 9jkrTzC5gm9bMtmlXjtfA9cB0n+FUDXX5T4ZFR/RJq6SEF+opXGF8Jlc7W5Uie0x KV3AfFQlc3YA5e4sDH5HZmQUUAQ23DyT6J1Z7hn8eKYyKkQmuMv9ecdv/FUGRU8s YTTvRMrJovxUPGQVNe2LNVN9+HLBjjAYj4RraVlEtxJ5lYo1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCirm+Q15Iq7idt2gl/+MQ73zts0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvODY5MjBkMGEtNGVlZi0z MTczLWE0NmItNTE2NDEwMzg1YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALENCnl0p7PWiVicKdNewrmgw1M3bRDNJdH9QRix/2hBnHvLYyn8xtak OwBqurfsap+dDmfuXxFoBL2QfFr3m+zZVB5tm/It9gS7jvv0yCKMcI/wbCdlqas6 2LqmfFwxGCx6XIefTpQUfgZM4YXyyhbGMekHrT812iM0r1x15I8eg9j3LY/J1jsH B6dfRD2ybcQZNQZq0jD3E3PptC7jjDBww9F+/wljlz7+/Idda0VwwWo8ufAfBZ+q RtL/ZGtRBFMsz+f8OO6IB6QDYzAX8rT9mapaGKBhUdQC2+qK5M5U/uJ53bxPyrFT MYmj1/j9AKxvgzlIGClDu02BINdRNV4= -----END CERTIFICATE-----Generated at Thu May 8 09:46:04 2025 by rpki-client