$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa File: 5e9f9539-e9cd-3978-849c-cb39566f29fe.roa (raw, json) Hash identifier: gecrVXIQE8Z+pajGmm28hGI6m1UXkj9QhKTh5x8UZV4= Subject key identifier: 8B:CB:A1:99:66:98:22:A9:C4:32:C5:95:B3:B0:F9:27:D9:42:C7:0C Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285849849EF95E3FEA05011C798000 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 834 IP address blocks: 72.14.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f9:5e:3f:ea:05:01:1c:79:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=cc5d5d8d-cd5d-4762-9501-2ef5c4c40aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:9b:1c:5a:e9:44:d1:68:9d:96:32:fa:b6: 28:22:6f:9d:b8:02:6a:a4:81:b7:86:27:01:15:e0: 3b:79:0b:93:54:26:b0:08:2f:27:41:3f:c2:68:3d: fc:aa:fc:e2:96:21:96:c3:76:e0:59:2c:9a:15:e0: 8c:d0:28:68:5d:78:38:7b:d3:e3:92:3c:ab:08:fe: 7e:42:8e:f9:dc:d7:e8:83:c3:80:12:44:1c:55:cb: 18:6c:38:c6:cb:44:b8:4a:83:32:34:48:f6:2e:dd: b6:7a:45:35:32:23:55:80:43:6e:f6:9b:66:93:a3: 5b:ff:fe:ee:ad:2e:51:7a:02:68:cd:3a:18:14:9c: 7d:5f:30:cf:66:f8:19:bd:2f:fc:66:69:3b:a4:4f: 7b:f0:5d:4a:39:5e:05:ef:d0:1b:3b:a9:a0:ce:05: 47:a4:7a:48:4a:05:c8:46:d0:2b:cb:77:44:51:d1: a4:9f:89:5c:e3:27:ca:7f:c1:75:81:d6:a9:f3:3f: 18:41:20:9d:5c:6d:b4:27:00:21:a8:33:d7:89:a0: 34:4c:a3:52:ea:41:38:15:b6:f8:3b:b0:91:7a:34: c0:44:72:68:d6:e2:cd:ef:38:20:c7:53:8d:b4:ed: d2:88:90:e2:6e:06:27:2d:e0:f5:9a:e6:14:53:18: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CB:A1:99:66:98:22:A9:C4:32:C5:95:B3:B0:F9:27:D9:42:C7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bd:d9:ac:85:6b:60:15:bc:20:42:9d:cd:68:4e:a5:8a:ad: 1e:e2:a5:f2:f3:cb:61:23:c3:7e:de:9f:0e:2e:5e:17:50:bd: 35:75:13:41:43:63:ef:22:78:b2:e6:31:28:44:2c:26:71:5c: 8b:13:05:f2:2d:a0:24:e7:a4:31:56:a2:98:68:cd:57:a1:74: e2:cd:0d:64:e1:90:60:18:4b:08:0b:96:0b:8e:fa:ce:54:25: b7:08:2a:24:69:12:57:08:1f:8c:58:7d:a8:e0:8a:c8:2e:ac: c0:68:01:8a:7d:4a:6b:60:94:14:a2:06:0a:f9:57:00:91:bd: ce:fb:53:4a:05:2e:c3:35:b0:c1:03:60:2b:8c:1e:51:49:aa: 3b:12:f9:45:2b:d7:39:80:a2:42:1e:50:a6:6c:90:b8:7c:95: c8:a0:80:b5:30:c4:f1:f4:aa:52:1a:5f:da:d7:3e:4b:f4:0b: d9:4f:2a:6e:4e:06:8f:c2:cf:3f:39:f4:1a:53:2c:35:af:fb: 5e:d7:64:db:2b:5a:f6:0f:46:d1:7c:ae:23:2f:da:6e:9d:23: 0a:3e:f1:c4:c6:51:35:aa:7d:c8:25:5d:c0:c1:4d:d5:a6:78: af:16:ae:42:c8:74:08:eb:7b:fc:85:c2:6e:0b:d6:08:bb:60: 88:88:36:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvleP+oFARx5gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk Y2M1ZDVkOGQtY2Q1ZC00NzYyLTk1MDEtMmVmNWM0YzQwYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz+bHFrpRNFonZYy+rYoIm+duAJqpIG3hicB FeA7eQuTVCawCC8nQT/CaD38qvziliGWw3bgWSyaFeCM0ChoXXg4e9PjkjyrCP5+ Qo753Nfog8OAEkQcVcsYbDjGy0S4SoMyNEj2Lt22ekU1MiNVgENu9ptmk6Nb//7u rS5RegJozToYFJx9XzDPZvgZvS/8Zmk7pE978F1KOV4F79AbO6mgzgVHpHpISgXI RtAry3dEUdGkn4lc4yfKf8F1gdap8z8YQSCdXG20JwAhqDPXiaA0TKNS6kE4Fbb4 O7CRejTARHJo1uLN7zggx1ONtO3SiJDibgYnLeD1muYUUxg/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvLoZlmmCKpxDLFlbOw+SfZQscMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWU5Zjk1MzktZTljZC0z OTc4LTg0OWMtY2IzOTU2NmYyOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi92ayFa2AVvCBCnc1oTqWKrR7ipfLzy2Ejw37enw4uXhdQvTV1E0FD Y+8ieLLmMShELCZxXIsTBfItoCTnpDFWophozVehdOLNDWThkGAYSwgLlguO+s5U JbcIKiRpElcIH4xYfajgisgurMBoAYp9SmtglBSiBgr5VwCRvc77U0oFLsM1sMED YCuMHlFJqjsS+UUr1zmAokIeUKZskLh8lciggLUwxPH0qlIaX9rXPkv0C9lPKm5O Bo/Czz859BpTLDWv+17XZNsrWvYPRtF8riMv2m6dIwo+8cTGUTWqfcglXcDBTdWm eK8WrkLIdAjre/yFwm4L1gi7YIiINhM= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:01 2025 by rpki-client