$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json) Hash identifier: TNavMVFTeeuBtj+eU7edEGvu3J24LP42aaTRRTjCtuM= Subject key identifier: E5:13:57:0E:91:72:F4:BD:B4:D1:9B:B9:4F:80:A0:1A:02:EF:97:08 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285849F9DFC6364A2DBFB1D575248C Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 211373 IP address blocks: 72.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c6:36:4a:2d:bf:b1:d5:75:24:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=7041f83d-46a3-42c3-805d-77ccd753cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:c4:7e:41:db:a3:01:66:38:20:09:6c:7c: 18:f3:1b:6a:01:e1:c3:20:4b:eb:df:33:4a:ea:5e: 6a:19:7b:d2:24:4a:37:43:41:e8:72:a5:83:e9:9a: cc:1d:69:45:45:c8:e7:4f:25:67:36:48:e3:b4:83: 31:cc:7a:12:88:c6:86:30:ca:a1:17:c8:cb:f1:b9: 5e:78:35:b2:4a:98:dc:e0:ad:9c:2d:aa:9a:bb:ee: 2d:8f:8b:48:82:d6:62:73:4b:05:e0:19:da:be:ad: 0c:a7:ed:44:09:95:fb:24:d4:e5:eb:72:88:50:46: b3:5f:b1:8e:e9:f2:7a:2b:f6:1b:c3:6b:5a:62:c0: 88:97:86:6a:ac:39:9b:4a:9a:04:b9:de:46:e2:a4: e6:fb:95:0b:04:5d:2e:d1:94:e3:c2:f9:1c:98:e4: 27:c6:7d:1d:9a:3e:e1:93:eb:3d:c3:50:39:c0:c0: 01:bf:00:6c:65:85:4d:d2:a6:bd:1c:30:7b:49:cf: a8:5b:58:84:fd:f8:a2:5a:4e:3e:ac:bf:19:91:b0: 75:d3:aa:3b:ff:04:f3:c7:ac:79:6a:f9:b2:e1:7e: 50:d8:73:19:99:1b:ea:fb:10:7e:65:4a:40:b5:d0: d4:f3:4b:62:4d:17:d1:53:96:3a:00:1b:55:4b:99: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:13:57:0E:91:72:F4:BD:B4:D1:9B:B9:4F:80:A0:1A:02:EF:97:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b9:d7:1f:86:a7:3a:98:6b:9a:52:a2:dd:24:61:4b:dd:e8: 73:25:93:4e:c6:9f:c4:9c:ed:82:aa:e8:11:71:97:ff:70:cb: 44:6b:81:f5:f6:db:23:2e:96:6c:ef:07:c6:e6:2b:71:42:7d: e9:87:0d:52:6d:10:0c:11:07:74:37:7d:88:ef:66:4d:bd:db: b0:b2:41:93:4b:11:68:98:93:da:42:67:cf:03:b4:b3:88:1b: dc:11:66:39:6f:bb:fc:1a:b9:f4:73:1c:5b:6f:e1:31:1d:c7: 3c:fb:14:11:b8:8b:9e:8d:2c:9f:4e:7e:af:cc:4c:f3:ec:5d: a4:74:55:7b:69:ce:9c:ed:0e:04:8a:8d:a3:3e:08:46:69:47: 76:de:f9:74:dc:02:4d:4b:ce:08:1d:0b:2a:82:1a:94:b9:ee: 2a:f6:67:ba:d2:c5:30:4d:2e:70:32:d5:ba:79:95:8d:6a:7e: 56:b8:a3:2d:69:d0:cd:4f:08:a4:6a:c0:63:b2:33:3a:7b:0f: 4c:06:6d:bf:72:2f:b6:64:1e:78:cb:dd:cf:69:f3:88:84:bd: ed:d9:87:44:ec:d1:ad:e7:03:c5:f6:5c:25:14:de:9e:1e:0e: c9:51:45:ed:e4:8e:1c:af:8a:d3:d3:59:23:89:5a:68:3d:f5: e2:50:d0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538Y2Si2/sdV1JIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NzA0MWY4M2QtNDZhMy00MmMzLTgwNWQtNzdjY2Q3NTNjYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkDEfkHbowFmOCAJbHwY8xtqAeHDIEvr3zNK 6l5qGXvSJEo3Q0HocqWD6ZrMHWlFRcjnTyVnNkjjtIMxzHoSiMaGMMqhF8jL8ble eDWySpjc4K2cLaqau+4tj4tIgtZic0sF4Bnavq0Mp+1ECZX7JNTl63KIUEazX7GO 6fJ6K/Ybw2taYsCIl4ZqrDmbSpoEud5G4qTm+5ULBF0u0ZTjwvkcmOQnxn0dmj7h k+s9w1A5wMABvwBsZYVN0qa9HDB7Sc+oW1iE/fiiWk4+rL8ZkbB106o7/wTzx6x5 avmy4X5Q2HMZmRvq+xB+ZUpAtdDU80tiTRfRU5Y6ABtVS5ki1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUTVw6RcvS9tNGbuU+AoBoC75cIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNzA4ZTA0MWYtNmVlYS0z MmM1LWI1ZWYtMjQzN2I4NmE0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC51x+GpzqYa5pSot0kYUvd6HMlk07Gn8Sc7YKq6BFxl/9wy0RrgfX2 2yMulmzvB8bmK3FCfemHDVJtEAwRB3Q3fYjvZk2927CyQZNLEWiYk9pCZ88DtLOI G9wRZjlvu/waufRzHFtv4TEdxzz7FBG4i56NLJ9Ofq/MTPPsXaR0VXtpzpztDgSK jaM+CEZpR3be+XTcAk1LzggdCyqCGpS57ir2Z7rSxTBNLnAy1bp5lY1qfla4oy1p 0M1PCKRqwGOyMzp7D0wGbb9yL7ZkHnjL3c9p84iEve3Zh0Ts0a3nA8X2XCUU3p4e DslRRe3kjhyvitPTWSOJWmg99eJQ0MQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:08:11 2025 by rpki-client