$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa File: f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa (raw, json) Hash identifier: 6FLCp2uZtcPic0sGrKyqi80BrOOyH+tTdMz6pewUUzE= Subject key identifier: B3:35:99:56:0A:5F:43:2B:F9:34:E0:AC:D0:5F:84:48:3C:96:7B:28 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584909E69692721E63F9AC31E54C Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 272370 IP address blocks: 72.14.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:96:92:72:1e:63:f9:ac:31:e5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=cf3317c1-55b6-48df-bc56-2bce45ec67c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:15:99:61:08:8d:eb:07:1d:f9:86:0c:2a: 34:17:be:a6:6c:40:27:8e:4e:86:72:ef:e3:3e:6e: c2:a0:a3:f1:e0:ce:8d:0f:64:74:51:61:f0:33:e4: a4:2f:09:81:25:ed:ab:0f:80:d0:1e:95:25:b9:e3: 01:e2:c2:1b:3c:bc:87:eb:14:b2:9d:e3:38:2b:8c: b1:21:44:e1:6e:08:26:ad:ed:af:41:93:d7:33:56: 5d:12:20:6b:ae:d4:20:46:d3:72:00:e3:d6:34:77: d9:4c:3a:3e:0a:35:af:c8:82:2f:c3:cc:54:3d:bd: 70:28:d2:f8:eb:25:10:9b:ba:e4:c4:fa:f4:37:f3: 51:ff:5d:a4:77:52:be:b3:b2:f8:22:ef:f9:ce:27: 57:5e:7e:38:c0:57:ce:a0:6c:7e:71:41:60:01:12: 74:d8:cd:57:60:16:d9:7f:1e:5f:38:93:dc:cc:f3: a8:84:34:b8:e6:de:63:98:2b:d0:98:5d:13:26:72: 16:46:46:37:90:10:b3:cf:76:a8:18:47:8d:b5:5f: 5b:b9:84:b1:c8:3a:3e:41:9b:95:a9:37:80:0d:1c: 81:5e:e3:a1:95:d8:b7:a1:c9:25:8d:93:eb:74:a7: f3:12:34:b3:8f:1b:9d:22:36:40:56:ec:40:03:77: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:35:99:56:0A:5F:43:2B:F9:34:E0:AC:D0:5F:84:48:3C:96:7B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:08:77:32:4b:a0:73:6a:d3:9d:d8:69:3c:23:8b:54:f0:39: 0e:65:6e:37:4e:b1:85:ae:eb:27:8c:ab:ac:54:08:31:9b:85: a8:18:a5:56:d4:3f:28:2d:f1:ef:a9:c6:1b:76:e7:3e:cc:c0: 86:57:21:3d:07:87:aa:d4:23:b4:cf:ad:fb:fc:56:a5:f3:61: 4f:e0:00:5d:6f:9f:fd:06:24:5e:e2:3a:d8:af:fa:3c:a3:5e: 11:a1:dd:af:4a:ea:5a:05:06:6f:38:8e:b4:d0:5d:c6:86:4f: c6:a6:c2:46:c2:ec:c5:07:36:aa:5a:a3:b0:43:21:36:4b:3c: 0a:9f:15:42:90:26:c5:d6:84:aa:61:87:de:d4:59:a9:5d:51: d5:00:08:f6:13:c3:4c:6d:02:2d:e4:fc:d7:64:49:4b:2b:fa: 40:32:f5:14:04:d6:eb:ad:5c:b0:1c:1c:5f:24:b5:de:5f:37: 08:5e:d6:bf:87:84:ca:b1:2d:4e:43:27:f2:1d:0a:4f:a6:ff: ca:dd:f5:8d:28:8e:8c:e6:43:55:5e:d2:7c:05:c4:e0:00:b0: c1:f7:bf:d5:c1:ab:4f:f6:ff:1e:8d:8c:ec:66:2a:63:d3:25: c4:ef:7e:f1:14:01:80:68:56:e8:ad:0e:44:af:60:9b:20:4b: 0b:54:d3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5paSch5j+awx5UwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2YzMzE3YzEtNTViNi00OGRmLWJjNTYtMmJjZTQ1ZWM2N2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOwVmWEIjesHHfmGDCo0F76mbEAnjk6Gcu/j Pm7CoKPx4M6ND2R0UWHwM+SkLwmBJe2rD4DQHpUlueMB4sIbPLyH6xSyneM4K4yx IUThbggmre2vQZPXM1ZdEiBrrtQgRtNyAOPWNHfZTDo+CjWvyIIvw8xUPb1wKNL4 6yUQm7rkxPr0N/NR/12kd1K+s7L4Iu/5zidXXn44wFfOoGx+cUFgARJ02M1XYBbZ fx5fOJPczPOohDS45t5jmCvQmF0TJnIWRkY3kBCzz3aoGEeNtV9buYSxyDo+QZuV qTeADRyBXuOhldi3ockljZPrdKfzEjSzjxudIjZAVuxAA3ffSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM1mVYKX0Mr+TTgrNBfhEg8lnsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZjJiZWNiZWEtOGU1Zi0z ZGQ2LWJiZTAtMzhjODMxNWFhMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoIdzJLoHNq053YaTwji1TwOQ5lbjdOsYWu6yeMq6xUCDGbhagYpVbU Pygt8e+pxht25z7MwIZXIT0Hh6rUI7TPrfv8VqXzYU/gAF1vn/0GJF7iOtiv+jyj XhGh3a9K6loFBm84jrTQXcaGT8amwkbC7MUHNqpao7BDITZLPAqfFUKQJsXWhKph h97UWaldUdUACPYTw0xtAi3k/NdkSUsr+kAy9RQE1uutXLAcHF8ktd5fNwhe1r+H hMqxLU5DJ/IdCk+m/8rd9Y0ojozmQ1Ve0nwFxOAAsMH3v9XBq0/2/x6NjOxmKmPT JcTvfvEUAYBoVuitDkSvYJsgSwtU07k= -----END CERTIFICATE-----Generated at Sat Apr 26 23:48:53 2025 by rpki-client