$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa File: b2baff77-b625-3202-8580-45c0ed7a13c0.roa (raw, json) Hash identifier: uhXY/HyC6Qc1dRoExHXcYYm7GL++b+lzXENpDMQ+sUI= Subject key identifier: B1:23:F5:CA:5D:9D:D1:1C:5E:3C:8F:8F:FE:46:DE:4D:40:49:97:0E Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584AA160E00D89DD2A67CBAB9380 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 212238 IP address blocks: 72.14.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e0:0d:89:dd:2a:67:cb:ab:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8d2cb068-12f2-47fd-8e1d-8b1b7e5e4022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:e7:e3:09:a6:ea:c0:91:c4:3e:3f:66:c0: c4:38:f6:ab:b0:48:d0:1f:fb:d2:54:b2:3d:71:bb: 02:47:e4:e1:bb:1f:ff:c9:51:31:7f:03:5c:6e:a1: a6:1e:cc:57:fa:7e:fd:78:a8:79:45:1f:45:7f:09: 37:79:19:e1:b0:9f:a8:3d:86:b0:96:72:21:a0:6b: 9b:a3:bc:3e:bf:d9:73:0d:7d:0d:87:69:aa:d0:0c: 60:2b:1c:b0:fe:cd:17:58:8c:06:24:68:e7:85:3a: 87:ba:0c:dc:90:65:95:83:91:46:1f:14:c9:a4:0c: 0f:97:22:0c:65:87:f5:bb:81:e6:a4:fb:96:cd:d2: 50:f1:89:7c:dc:0e:5f:88:f5:06:f3:4e:e0:5c:bf: 2a:55:98:20:04:4a:e3:a0:4a:20:aa:8d:58:b9:31: 4c:1a:6b:bc:1f:5b:0f:6f:2c:89:7e:b4:f1:fc:ac: 54:37:a5:d5:94:16:fe:f1:e7:ed:c7:b2:2e:57:3e: 71:30:a0:bc:ed:96:91:6c:8b:0b:4e:3f:86:05:e3: ac:6a:43:ef:83:ad:ff:c1:ed:29:53:9d:ec:b2:9d: 87:3f:82:b1:e0:0c:04:c3:cc:07:e6:ec:07:75:d5: aa:83:79:9f:b0:40:c0:c9:6a:30:0d:9d:65:9a:6c: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:23:F5:CA:5D:9D:D1:1C:5E:3C:8F:8F:FE:46:DE:4D:40:49:97:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f1:ec:b9:3a:56:6e:c4:8a:70:67:e6:29:48:24:5f:50:37: e1:5d:e1:e6:2c:2b:ca:c0:2b:8e:41:99:7b:54:29:f1:ca:14: e7:a0:37:35:cf:ff:e6:5a:31:ee:f0:c6:a6:b7:c2:e4:8a:f0: 4b:d2:79:cf:48:d8:4a:84:fa:88:59:da:2e:35:41:8a:92:7c: 01:df:52:5a:3b:05:68:c6:5f:08:13:cc:93:fa:ea:e6:e6:3f: 9b:dd:dc:eb:21:95:a7:e2:5a:c1:4b:d4:04:ec:53:33:a8:51: c2:fa:a8:a2:e4:a2:8e:44:c1:78:70:4f:ab:db:b4:82:52:2d: 08:d5:67:e2:b7:e1:68:91:dc:83:35:b6:8c:5e:19:8e:31:80: d0:6b:69:64:37:f6:10:a3:28:33:0e:6d:7a:7a:fc:8b:b4:ac: 4d:30:6b:41:ab:ed:82:ae:37:bd:25:ba:51:22:0c:b7:ea:1d: 96:5b:cc:90:80:49:02:fe:8b:63:95:47:7f:5a:0c:2a:4d:10: f8:75:2a:33:c3:ae:ba:a3:3c:88:fa:f7:f9:fd:e3:67:e0:04: 2f:38:23:30:34:25:43:17:43:60:d6:21:de:33:eb:14:10:ac: 9f:be:f5:1e:fe:aa:68:31:a8:57:94:98:22:ef:9e:e0:2b:72: 52:a3:55:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOANid0qZ8urk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OGQyY2IwNjgtMTJmMi00N2ZkLThlMWQtOGIxYjdlNWU0MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ujn4wmm6sCRxD4/ZsDEOParsEjQH/vSVLI9 cbsCR+Thux//yVExfwNcbqGmHsxX+n79eKh5RR9Ffwk3eRnhsJ+oPYawlnIhoGub o7w+v9lzDX0Nh2mq0AxgKxyw/s0XWIwGJGjnhTqHugzckGWVg5FGHxTJpAwPlyIM ZYf1u4HmpPuWzdJQ8Yl83A5fiPUG807gXL8qVZggBErjoEogqo1YuTFMGmu8H1sP byyJfrTx/KxUN6XVlBb+8eftx7IuVz5xMKC87ZaRbIsLTj+GBeOsakPvg63/we0p U53ssp2HP4Kx4AwEw8wH5uwHddWqg3mfsEDAyWowDZ1lmmyaQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEj9cpdndEcXjyPj/5G3k1ASZcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYjJiYWZmNzctYjYyNS0z MjAyLTg1ODAtNDVjMGVkN2ExM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/x7Lk6Vm7EinBn5ilIJF9QN+Fd4eYsK8rAK45BmXtUKfHKFOegNzXP /+ZaMe7wxqa3wuSK8EvSec9I2EqE+ohZ2i41QYqSfAHfUlo7BWjGXwgTzJP66ubm P5vd3OshlafiWsFL1ATsUzOoUcL6qKLkoo5EwXhwT6vbtIJSLQjVZ+K34WiR3IM1 toxeGY4xgNBraWQ39hCjKDMObXp6/Iu0rE0wa0Gr7YKuN70lulEiDLfqHZZbzJCA SQL+i2OVR39aDCpNEPh1KjPDrrqjPIj69/n942fgBC84IzA0JUMXQ2DWId4z6xQQ rJ++9R7+qmgxqFeUmCLvnuArclKjVXI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:02 2025 by rpki-client