$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa File: a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa (raw, json) Hash identifier: /5gwX3lEi/HyYYGZZWhxMC6wWF2g4FmYQfhMRCtAXqU= Subject key identifier: 06:AC:D4:5E:00:6A:40:41:04:38:96:2F:7D:EA:E0:FF:38:A6:FE:D7 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285849A61F3A44A3A7335C33D9B080 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 200017 IP address blocks: 72.14.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3a:44:a3:a7:33:5c:33:d9:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=4fd2731a-062f-4d6b-9b41-539c785115be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:70:d0:16:fa:42:94:30:d0:94:35:b9:79: 9c:cf:82:03:2d:09:1c:75:6b:34:7c:80:f2:3e:ef: 89:fb:9b:11:f0:e5:a4:47:49:22:3c:a5:19:55:78: f9:ed:2b:11:1c:77:eb:bf:51:71:6e:21:d0:a4:7b: 71:c1:d9:c6:61:c9:4c:22:2e:73:f4:54:11:0c:51: bf:0a:54:ec:aa:6c:53:26:ec:a2:c8:1e:71:35:5c: c1:64:62:ba:f6:7d:71:14:53:e3:24:3d:10:ab:4a: 7d:6a:1b:0e:2a:c1:87:f9:08:bc:65:a2:6d:5d:ab: 43:64:67:d3:1c:0d:74:77:cb:25:7f:ff:c0:69:8f: b7:ed:93:aa:d2:98:6b:74:2e:89:52:d6:b5:3e:da: 32:73:fa:28:c1:97:2f:97:1b:6e:c9:7f:47:4a:a8: fa:ba:4b:96:22:87:16:4f:08:07:14:d7:ef:ea:ce: c8:fd:73:8f:9d:a7:f7:3e:16:e2:eb:c4:75:12:4a: 53:18:1a:c4:61:f6:11:14:da:12:b9:7d:0e:1c:c8: ac:61:1a:44:48:f9:1f:53:c9:f8:c0:b3:ac:f5:9b: 25:e6:8d:fa:6a:32:6d:52:d3:82:ad:7b:a4:71:30: 88:ec:82:93:c8:d3:5a:45:9b:8f:24:e6:6e:bc:89: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:D4:5E:00:6A:40:41:04:38:96:2F:7D:EA:E0:FF:38:A6:FE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:45:a8:61:40:1b:09:76:09:57:1b:25:55:7e:d2:60:1b:ef: 24:62:93:7e:9f:96:97:64:2a:ec:0d:3f:34:de:69:92:b9:7d: dd:3b:7b:d9:30:aa:56:6e:ec:35:2f:19:68:a4:32:4d:c8:1e: 7d:9d:37:cd:ed:8a:c2:fc:d9:4c:51:bb:9d:8c:26:43:da:67: 4c:87:1d:4e:f7:05:3d:92:4d:59:0d:57:79:bf:af:f3:ee:d6: bd:27:8b:a9:4d:7c:e3:db:31:93:6b:8b:6c:58:1b:c4:df:d5: 56:21:cd:38:4e:9e:95:fe:4f:92:91:56:25:c0:c6:a9:1b:6f: b0:89:5d:0a:57:33:34:b2:19:28:b0:71:24:1a:94:14:08:b3: db:f6:c4:9b:32:41:8c:5f:bf:07:78:c7:4d:d2:85:98:2d:1e: 29:12:a7:48:fd:16:f7:c0:25:9c:28:7a:8d:45:d3:f4:77:2f: 96:18:3c:50:6d:6d:73:83:db:21:35:db:fd:8c:77:a1:5c:d3: a9:a6:af:0a:64:d8:fd:40:75:76:4e:00:a7:87:bb:fc:2a:bc: 27:89:4b:a9:e0:c3:98:fb:d3:03:10:ca:cd:16:54:cc:3c:14: f5:6c:e6:42:f8:19:24:7e:29:98:0c:c1:c4:5d:b6:98:4a:b3: 7c:0b:aa:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzpEo6czXDPZsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NGZkMjczMWEtMDYyZi00ZDZiLTliNDEtNTM5Yzc4NTExNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA411w0Bb6QpQw0JQ1uXmcz4IDLQkcdWs0fIDy Pu+J+5sR8OWkR0kiPKUZVXj57SsRHHfrv1FxbiHQpHtxwdnGYclMIi5z9FQRDFG/ ClTsqmxTJuyiyB5xNVzBZGK69n1xFFPjJD0Qq0p9ahsOKsGH+Qi8ZaJtXatDZGfT HA10d8slf//AaY+37ZOq0phrdC6JUta1Ptoyc/oowZcvlxtuyX9HSqj6ukuWIocW TwgHFNfv6s7I/XOPnaf3Phbi68R1EkpTGBrEYfYRFNoSuX0OHMisYRpESPkfU8n4 wLOs9Zsl5o36ajJtUtOCrXukcTCI7IKTyNNaRZuPJOZuvImG8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAas1F4AakBBBDiWL33q4P84pv7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTM4OWRiZDQtYTJkNy0z YWMxLTk0ODQtNWQxYjY0NzI4OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZFqGFAGwl2CVcbJVV+0mAb7yRik36flpdkKuwNPzTeaZK5fd07e9kw qlZu7DUvGWikMk3IHn2dN83tisL82UxRu52MJkPaZ0yHHU73BT2STVkNV3m/r/Pu 1r0ni6lNfOPbMZNri2xYG8Tf1VYhzThOnpX+T5KRViXAxqkbb7CJXQpXMzSyGSiw cSQalBQIs9v2xJsyQYxfvwd4x03ShZgtHikSp0j9FvfAJZwoeo1F0/R3L5YYPFBt bXOD2yE12/2Md6Fc06mmrwpk2P1AdXZOAKeHu/wqvCeJS6ngw5j70wMQys0WVMw8 FPVs5kL4GSR+KZgMwcRdtphKs3wLqqE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:16 2025 by rpki-client