$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa File: c4d953b3-7c7f-365a-8946-e94b12d360e2.roa (raw, json) Hash identifier: 4xi6+qadR8hYuEN5ff4rRnnbBr6fjVrEpQnb27lYQUw= Subject key identifier: 0A:E5:C2:C8:CF:67:E1:F1:8B:0B:0F:8B:5B:89:4F:A9:42:9A:89:55 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584AA85BB7B091A2E0D60D8DB300 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 1239 IP address blocks: 72.14.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b7:b0:91:a2:e0:d6:0d:8d:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=0b559f7b-77a6-422d-9e2b-e46a4ffd5d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:e8:1d:57:3f:08:ea:aa:7a:b5:a6:b1:8d: 66:0c:ac:2f:ce:54:64:77:1c:cd:a1:7f:77:d2:22: b3:7c:91:aa:35:94:fc:07:65:f6:dc:53:d2:59:b8: 05:0a:f2:71:14:15:89:32:f2:85:3a:9c:36:1b:b7: 4a:9b:55:03:ef:28:f4:6c:36:0b:f6:ba:46:73:e1: 63:68:0a:19:d6:70:38:7f:9d:63:3f:b0:ec:a2:d7: 9d:a8:a1:f1:2a:e4:62:ea:26:ab:5a:a7:80:38:88: e5:48:fc:fe:32:04:5c:1e:97:63:93:49:60:26:67: a7:66:7b:97:e3:17:38:52:5a:03:ec:f3:8c:00:02: 56:98:5c:48:d8:f2:f4:98:80:15:c3:0d:4d:2b:8c: 59:f7:92:12:3b:c3:3e:84:52:ae:d4:44:53:f9:85: 14:08:d2:c1:4d:07:80:82:4e:84:23:3c:fc:2f:0d: 6e:01:46:8d:ff:f8:a3:90:12:2a:97:b3:8a:df:ed: 59:23:3e:b6:7c:f3:fb:c6:e4:b5:4a:42:6d:81:ed: 5f:f0:18:d5:3a:12:4a:45:16:60:66:8c:47:2b:2e: ed:72:5a:77:ba:5c:a1:b0:1d:f2:59:ed:29:b3:b1: dd:48:7c:97:5e:3c:c6:f5:06:d6:92:8b:86:4c:ae: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E5:C2:C8:CF:67:E1:F1:8B:0B:0F:8B:5B:89:4F:A9:42:9A:89:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c0:e7:e9:2d:b4:d7:70:20:31:a4:21:ac:58:91:12:22:72: da:19:b5:5d:94:15:5a:d2:35:97:67:1b:24:ba:a9:08:30:ae: cf:94:00:97:df:ad:90:67:16:7e:f5:d6:59:cf:29:33:0f:67: d5:a6:06:5a:6d:73:f8:a9:8e:cb:97:c3:01:05:5f:04:30:f1: 72:9e:f2:d3:56:b1:1d:1a:69:f5:e3:ad:73:d2:54:06:06:25: c5:f1:90:8b:cf:f9:72:f2:12:dd:6a:04:9a:c9:7b:4d:de:7f: 70:e7:25:d0:72:5f:aa:ad:cb:8b:c7:5c:30:a7:72:d7:33:61: 7f:e6:15:03:a5:93:26:9c:1d:f1:bb:d0:2e:a4:c9:53:33:27: 1f:22:6d:de:13:5b:e7:7f:63:c0:d9:93:ba:4e:99:d1:2b:36: 8e:5a:ab:b9:1a:ab:5f:3c:c2:23:c6:81:f9:a3:67:f9:9e:5c: f8:a6:61:37:3c:1e:35:49:47:88:7e:51:cf:33:4a:41:0b:22: 47:8d:20:db:51:72:2a:31:2c:aa:e4:b9:1a:cf:16:2c:bc:f2: 1d:3a:8d:31:77:c5:07:21:c4:23:0d:04:35:98:d6:67:12:8e: 0d:7b:32:12:50:c1:be:eb:4d:3d:b0:98:e8:df:5f:1c:4b:27: 28:07:b8:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7ewkaLg1g2NswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MGI1NTlmN2ItNzdhNi00MjJkLTllMmItZTQ2YTRmZmQ1ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/HoHVc/COqqerWmsY1mDKwvzlRkdxzNoX93 0iKzfJGqNZT8B2X23FPSWbgFCvJxFBWJMvKFOpw2G7dKm1UD7yj0bDYL9rpGc+Fj aAoZ1nA4f51jP7DsotedqKHxKuRi6iarWqeAOIjlSPz+MgRcHpdjk0lgJmenZnuX 4xc4UloD7POMAAJWmFxI2PL0mIAVww1NK4xZ95ISO8M+hFKu1ERT+YUUCNLBTQeA gk6EIzz8Lw1uAUaN//ijkBIql7OK3+1ZIz62fPP7xuS1SkJtge1f8BjVOhJKRRZg ZoxHKy7tclp3ulyhsB3yWe0ps7HdSHyXXjzG9QbWkouGTK5lgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArlwsjPZ+HxiwsPi1uJT6lCmolVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYzRkOTUzYjMtN2M3Zi0z NjVhLTg5NDYtZTk0YjEyZDM2MGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzA5+kttNdwIDGkIaxYkRIictoZtV2UFVrSNZdnGyS6qQgwrs+UAJff rZBnFn711lnPKTMPZ9WmBlptc/ipjsuXwwEFXwQw8XKe8tNWsR0aafXjrXPSVAYG JcXxkIvP+XLyEt1qBJrJe03ef3DnJdByX6qty4vHXDCnctczYX/mFQOlkyacHfG7 0C6kyVMzJx8ibd4TW+d/Y8DZk7pOmdErNo5aq7kaq188wiPGgfmjZ/meXPimYTc8 HjVJR4h+Uc8zSkELIkeNINtRcioxLKrkuRrPFiy88h06jTF3xQchxCMNBDWY1mcS jg17MhJQwb7rTT2wmOjfXxxLJygHuNM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:45 2025 by rpki-client