$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa File: 01c00e7f-6f75-39cf-8a6f-0e53566512de.roa (raw, json) Hash identifier: 1RX7BRZh8HE1SFvjE+7UV+GXty8GZFjNczeKdZdZAEY= Subject key identifier: C1:19:4B:E8:55:5D:A7:BC:95:0E:A5:43:3B:FF:0E:9F:1D:2E:AB:CB Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9FA144E600505A16EA7C0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fa:14:4e:60:05:05:a1:6e:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dfe6d85a-1a77-451a-8f4a-e88834c30eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:55:f9:3f:41:42:47:7e:b7:39:79:02:8f: 12:e6:e4:ed:f4:67:31:82:2d:1b:f7:9f:df:5c:76: 27:b8:82:2f:15:db:02:c3:ae:4c:47:11:79:83:81: 06:8a:a0:63:8e:0c:5a:75:e4:5b:8b:e9:2b:11:3f: f9:16:a1:f1:7d:8e:03:ad:55:72:e8:ab:f4:35:5b: 81:0b:22:5e:70:96:8d:7d:f3:16:01:6b:7c:89:55: 97:ac:2a:57:6c:85:5b:b0:80:6c:4f:85:d9:54:ff: 59:76:8d:65:32:89:71:83:74:ec:6f:cc:19:73:0f: 43:f0:f6:e2:1c:ab:62:1b:e0:89:f9:b7:9d:e7:84: 01:43:46:05:4f:40:be:94:88:5f:8c:64:28:04:c6: 72:af:ca:1e:51:db:fb:e2:2f:a3:8b:ef:4a:c5:89: f1:f8:f7:f7:07:69:f1:09:c7:c0:2c:6e:e2:81:17: 08:f8:e1:d4:74:a8:53:c8:4e:d1:17:ad:d5:2c:04: 27:65:11:68:64:5e:43:26:09:65:88:6d:e2:d5:9d: 60:dc:f4:ae:bd:31:d4:a0:c1:9d:d5:4a:f3:a9:0f: 2e:30:31:74:b0:3a:52:24:74:c4:bf:e5:d3:5d:58: 90:13:db:f9:f0:b5:b1:86:b0:40:ba:71:1c:36:e5: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:4B:E8:55:5D:A7:BC:95:0E:A5:43:3B:FF:0E:9F:1D:2E:AB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:80:13:c7:fd:e7:7d:ba:33:3c:0e:ec:dc:49:34:f4:33:01: fc:c8:32:ae:97:3b:82:c6:1c:62:cb:7c:b3:94:bd:51:d1:70: bf:13:0b:fa:77:53:ce:59:c7:0b:bf:60:fc:28:ce:16:1a:f3: a9:d4:4a:84:e6:35:5b:f3:4c:15:b0:72:2b:23:e0:13:d8:f5: 9c:20:c5:a9:f3:6a:f8:66:1d:8d:8b:ae:56:c0:d8:63:27:44: 50:ba:5e:d8:57:76:12:86:a5:1a:6f:ff:62:50:e1:0a:33:89: a9:c4:d3:5e:91:48:5c:17:58:76:53:d5:72:dd:0c:f1:bf:e9: 62:eb:fc:7f:e0:d3:b7:f1:02:65:e9:c8:e9:59:a6:19:7b:8b: ea:e5:74:7d:7a:81:38:b5:da:74:38:3c:14:d3:5f:87:a6:b3: 91:de:8a:57:b7:3e:57:79:cb:76:3f:6e:5f:66:b7:2e:d7:3b: e6:70:92:16:77:9f:c1:46:c1:42:63:92:4e:3a:0f:61:eb:8e: 31:2c:f3:ff:44:b5:b9:c1:de:a6:c7:00:a2:03:52:4c:31:5a: 39:19:0d:1c:ec:16:5c:07:7a:20:ed:b6:fe:26:55:92:4c:90: 01:a9:2f:9f:e8:c9:54:51:70:ee:7c:28:d2:aa:c1:d3:80:b0: 80:ec:f4:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufoUTmAFBaFup8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGZlNmQ4NWEtMWE3Ny00NTFhLThmNGEtZTg4ODM0YzMwZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHhV+T9BQkd+tzl5Ao8S5uTt9Gcxgi0b95/f XHYnuIIvFdsCw65MRxF5g4EGiqBjjgxadeRbi+krET/5FqHxfY4DrVVy6Kv0NVuB CyJecJaNffMWAWt8iVWXrCpXbIVbsIBsT4XZVP9Zdo1lMolxg3Tsb8wZcw9D8Pbi HKtiG+CJ+bed54QBQ0YFT0C+lIhfjGQoBMZyr8oeUdv74i+ji+9KxYnx+Pf3B2nx CcfALG7igRcI+OHUdKhTyE7RF63VLAQnZRFoZF5DJglliG3i1Z1g3PSuvTHUoMGd 1UrzqQ8uMDF0sDpSJHTEv+XTXViQE9v58LWxhrBAunEcNuVynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEZS+hVXae8lQ6lQzv/Dp8dLqvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDFjMDBlN2YtNmY3NS0z OWNmLThhNmYtMGU1MzU2NjUxMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeAE8f95326MzwO7NxJNPQzAfzIMq6XO4LGHGLLfLOUvVHRcL8TC/p3 U85Zxwu/YPwozhYa86nUSoTmNVvzTBWwcisj4BPY9ZwgxanzavhmHY2LrlbA2GMn RFC6XthXdhKGpRpv/2JQ4QozianE016RSFwXWHZT1XLdDPG/6WLr/H/g07fxAmXp yOlZphl7i+rldH16gTi12nQ4PBTTX4ems5Heile3Pld5y3Y/bl9mty7XO+ZwkhZ3 n8FGwUJjkk46D2HrjjEs8/9EtbnB3qbHAKIDUkwxWjkZDRzsFlwHeiDttv4mVZJM kAGpL5/oyVRRcO58KNKqwdOAsIDs9DA= -----END CERTIFICATE-----Generated at Mon Apr 28 17:04:32 2025 by rpki-client