$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa File: ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa (raw, json) Hash identifier: sxrapz7PNwxQ+gSVdHE3taKEd7ykTSWZnIrWZnpuJCM= Subject key identifier: 52:C1:EA:68:EA:25:ED:4B:29:2F:78:6E:D3:11:97:8F:F7:08:16:FA Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584A94D0CE46E85839323CF32C40 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 151872 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:ce:46:e8:58:39:32:3c:f3:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=8973e429-3b37-41dd-bd14-b6e4145b0ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:c1:7a:26:4b:42:b4:db:c8:3a:fb:82:66: ea:99:45:63:52:56:a5:3c:6f:37:4f:ef:9a:9b:2e: bc:95:b9:ff:5a:1a:45:87:cc:bb:40:73:af:45:2f: 1b:c4:f5:18:37:df:76:35:4c:33:29:3a:da:31:ee: 30:5a:90:f6:48:82:8b:f3:43:98:60:a5:a3:13:15: 0e:23:0f:b3:b6:d2:9d:d9:0a:b9:95:e9:fa:e2:cf: 05:b9:6c:8d:43:75:fb:3e:79:a4:d2:9c:ab:cd:c4: 82:83:99:4a:cf:ac:1c:d2:ef:2e:ea:6a:54:ec:4d: 64:44:43:52:b1:41:8b:20:41:2a:c6:36:bc:cb:e2: 2a:1d:19:87:55:f1:1b:30:73:2c:7e:0a:fb:a2:82: 61:bd:1b:11:aa:fb:51:ba:df:7d:b1:78:05:62:16: 84:8d:ec:d0:df:5d:fb:40:45:d8:b3:22:74:ec:aa: 12:9e:53:60:74:65:db:3d:1a:15:b2:31:2c:c8:06: 72:38:08:fa:11:a4:45:40:0b:fd:33:3d:62:eb:02: 02:22:06:e6:57:ec:cb:60:a4:af:8a:9e:63:f5:fd: bc:be:7b:11:1b:fa:2a:f7:eb:f2:0b:73:65:dd:d1: 8e:c5:ac:cc:e1:7e:18:24:91:9a:09:d3:df:cd:37: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C1:EA:68:EA:25:ED:4B:29:2F:78:6E:D3:11:97:8F:F7:08:16:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:35:cf:77:4f:bc:cd:f0:54:96:b0:4c:f4:9c:6b:7e:23:8f: a8:03:78:f3:88:04:21:72:d0:24:75:65:2c:c6:6c:fd:b2:2f: 91:15:b0:be:b0:5c:31:68:69:98:36:86:c0:b8:8d:f7:67:d8: 9f:d6:77:7c:96:b2:b3:e0:10:30:be:cf:03:14:5a:5f:cd:d9: 55:de:e9:6c:3d:8c:8b:25:fc:21:d0:39:8c:41:62:27:d1:03: e8:10:9e:96:c9:05:22:87:47:e4:3a:a7:f0:23:40:19:2b:b4: 54:15:1d:25:65:7e:7e:16:9b:d9:d4:e8:f7:b7:f8:66:2b:bd: 41:d7:5c:ae:aa:d0:c3:35:36:80:1e:b6:ef:27:4e:4e:e1:03: 86:02:13:4b:73:38:94:72:91:e8:be:62:f9:b7:5e:e2:bb:23: 7e:86:54:63:bb:b7:9e:f8:5f:be:8d:35:73:d1:55:64:e4:56: 51:f7:cd:f7:36:43:97:91:05:c4:bd:f7:12:3d:08:48:90:af: a7:ba:e6:02:13:c0:02:82:86:b5:22:46:83:50:26:d2:0a:e7: 90:f6:2c:8d:82:5c:fe:a3:0a:5b:04:0f:ab:13:fa:81:82:11: c8:5f:ab:2d:cf:42:46:f5:13:c6:13:b9:f3:f8:8d:6b:c3:15: 7a:ce:64:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0M5G6Fg5MjzzLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk ODk3M2U0MjktM2IzNy00MWRkLWJkMTQtYjZlNDE0NWIwYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wXBeiZLQrTbyDr7gmbqmUVjUlalPG83T++a my68lbn/WhpFh8y7QHOvRS8bxPUYN992NUwzKTraMe4wWpD2SIKL80OYYKWjExUO Iw+zttKd2Qq5len64s8FuWyNQ3X7Pnmk0pyrzcSCg5lKz6wc0u8u6mpU7E1kRENS sUGLIEEqxja8y+IqHRmHVfEbMHMsfgr7ooJhvRsRqvtRut99sXgFYhaEjezQ3137 QEXYsyJ07KoSnlNgdGXbPRoVsjEsyAZyOAj6EaRFQAv9Mz1i6wICIgbmV+zLYKSv ip5j9f28vnsRG/oq9+vyC3Nl3dGOxazM4X4YJJGaCdPfzTcsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLB6mjqJe1LKS94btMRl4/3CBb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmY0MzAxYTQtNGE0Yi0z MzBhLTlmMDMtZTg2YmM5ZWI0ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI1z3dPvM3wVJawTPSca34jj6gDePOIBCFy0CR1ZSzGbP2yL5EVsL6w XDFoaZg2hsC4jfdn2J/Wd3yWsrPgEDC+zwMUWl/N2VXe6Ww9jIsl/CHQOYxBYifR A+gQnpbJBSKHR+Q6p/AjQBkrtFQVHSVlfn4Wm9nU6Pe3+GYrvUHXXK6q0MM1NoAe tu8nTk7hA4YCE0tzOJRykei+Yvm3XuK7I36GVGO7t574X76NNXPRVWTkVlH3zfc2 Q5eRBcS99xI9CEiQr6e65gITwAKChrUiRoNQJtIK55D2LI2CXP6jClsED6sT+oGC Echfqy3PQkb1E8YTufP4jWvDFXrOZJs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:03 2025 by rpki-client