$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa File: 7a272954-d9e7-38db-a114-33c519fdfe8a.roa (raw, json) Hash identifier: s12jmRmuTF5j70Irn2UPpIP4CAj85y3q9c+UYyfli70= Subject key identifier: F7:C1:C8:62:39:DF:68:34:9A:37:7D:98:08:4E:BA:54:06:D1:32:B9 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584AB220DF99CC9CF402D4B340A0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 63023 IP address blocks: 72.14.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:df:99:cc:9c:f4:02:d4:b3:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=ae483f3b-3c6d-4def-aad4-2635e6987782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:a3:47:03:cd:52:6c:c8:2e:27:22:a6:c6: 17:a4:a3:2a:86:70:08:ec:76:8e:2c:ba:66:43:c9: c3:07:0f:be:b7:c1:fe:d3:8c:8b:30:ee:f3:fa:a8: a5:a7:d0:a7:35:e8:31:30:45:0d:1f:28:23:73:34: d3:7a:ef:3d:9b:58:13:78:ee:9e:cd:bd:18:df:ce: f4:0a:fe:34:2e:c1:4e:91:89:48:85:98:12:2c:e3: 05:64:b6:85:a1:49:cc:2e:3d:88:e2:24:2f:25:88: 70:de:bf:55:99:93:56:e9:92:b7:96:6f:a5:b8:38: a4:61:86:61:6c:f8:4f:b6:78:47:9a:4b:73:82:69: b5:66:ff:8f:48:ab:d5:29:22:99:cf:3d:37:bf:72: 8b:e0:fd:fd:d3:7e:96:30:e2:8e:1c:a5:b9:2e:fa: dc:68:93:17:f2:d1:4b:4e:ac:26:11:d5:25:20:5c: 16:91:c9:95:cb:78:68:2c:54:6e:42:8e:9a:37:c6: e2:81:19:27:7c:0f:dc:b6:0b:cd:28:ca:c6:57:f9: 0f:a4:3d:cd:ad:55:36:4e:b5:ee:66:ff:89:ee:0a: 12:4f:1b:de:98:a6:c9:7d:da:50:ba:9c:68:e1:a3: 80:89:50:d8:68:ba:b1:79:62:8a:ff:57:29:7b:e2: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C1:C8:62:39:DF:68:34:9A:37:7D:98:08:4E:BA:54:06:D1:32:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:89:c6:6a:41:83:d2:c2:69:9a:5a:e0:23:c0:01:84:16:bc: b7:c0:59:fb:37:9b:50:f0:73:91:74:e6:fb:e1:b6:a8:f8:0a: a2:c8:3e:5a:18:d3:e8:32:98:9b:1f:95:7f:fb:ee:4d:4c:25: 28:99:f7:03:80:ae:c3:c6:ba:e8:38:3a:c1:e5:0c:7d:64:9e: 11:cf:52:75:67:9c:a4:44:de:c7:3f:98:25:32:56:47:42:f9: f5:1f:85:d7:6d:93:53:df:75:4c:63:18:c2:86:90:1a:60:c0: 1d:47:6d:8d:3a:68:2b:41:4f:57:7a:f2:76:38:4b:88:7d:71: fa:83:27:1b:a4:55:cc:2a:44:c7:fc:13:63:48:13:97:63:4a: 72:5d:2a:d4:98:10:f6:f8:b4:d5:c1:e9:f7:d4:83:25:e3:b3: df:65:44:93:31:0a:23:18:6c:9c:bf:12:83:c6:a5:b2:e5:30: 2c:7f:1a:54:85:77:0c:a4:70:b8:ea:5f:a6:18:f6:41:92:64: 59:f5:a7:60:27:ce:91:67:fe:47:58:41:2e:7f:f8:0a:60:11: 9c:c5:6d:f9:52:37:90:3c:2c:cb:b2:62:2f:5a:f1:e6:e4:66: 9e:c7:c7:d3:77:82:bb:e0:a9:86:97:73:18:09:be:30:c8:ef: 65:0b:77:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN+ZzJz0AtSzQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWU0ODNmM2ItM2M2ZC00ZGVmLWFhZDQtMjYzNWU2OTg3NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiySjRwPNUmzILicipsYXpKMqhnAI7HaOLLpm Q8nDBw++t8H+04yLMO7z+qilp9CnNegxMEUNHygjczTTeu89m1gTeO6ezb0Y3870 Cv40LsFOkYlIhZgSLOMFZLaFoUnMLj2I4iQvJYhw3r9VmZNW6ZK3lm+luDikYYZh bPhPtnhHmktzgmm1Zv+PSKvVKSKZzz03v3KL4P39036WMOKOHKW5LvrcaJMX8tFL TqwmEdUlIFwWkcmVy3hoLFRuQo6aN8bigRknfA/ctgvNKMrGV/kPpD3NrVU2TrXu Zv+J7goSTxvemKbJfdpQupxo4aOAiVDYaLqxeWKK/1cpe+KEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfByGI532g0mjd9mAhOulQG0TK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvN2EyNzI5NTQtZDllNy0z OGRiLWExMTQtMzNjNTE5ZmRmZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSJxmpBg9LCaZpa4CPAAYQWvLfAWfs3m1Dwc5F05vvhtqj4CqLIPloY 0+gymJsflX/77k1MJSiZ9wOArsPGuug4OsHlDH1knhHPUnVnnKRE3sc/mCUyVkdC +fUfhddtk1PfdUxjGMKGkBpgwB1HbY06aCtBT1d68nY4S4h9cfqDJxukVcwqRMf8 E2NIE5djSnJdKtSYEPb4tNXB6ffUgyXjs99lRJMxCiMYbJy/EoPGpbLlMCx/GlSF dwykcLjqX6YY9kGSZFn1p2AnzpFn/kdYQS5/+ApgEZzFbflSN5A8LMuyYi9a8ebk Zp7Hx9N3grvgqYaXcxgJvjDI72ULdxA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:03:17 2025 by rpki-client