$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa File: 0967f533-314b-31fa-9f37-b33da500d8a5.roa (raw, json) Hash identifier: hpxftn1v7llCHG2vHJdBiWNDN83Avhi+PTs4qfaGpCE= Subject key identifier: 88:A9:7B:05:9E:26:45:F0:B7:0D:04:52:C0:A1:BC:A0:1B:C6:EB:C8 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9FAC95C56FD6D096EBCD0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fa:c9:5c:56:fd:6d:09:6e:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fe7e8f61-4a8f-42bd-beee-0c67aad9eff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:95:2d:c4:70:c1:1c:c9:d9:87:2e:dc:43: 9d:ce:fa:13:6a:ea:b5:b6:44:3d:f5:08:8d:30:ee: 3c:20:07:81:bd:fb:b6:1e:6f:e0:12:a6:0a:e4:75: 69:ee:a0:7c:8c:12:5f:cc:92:32:22:b1:ce:d2:46: f8:de:82:8f:06:c0:3e:be:22:a7:8b:0e:4f:a4:9c: b3:ee:50:b0:46:d7:e7:e8:2a:3c:96:7c:e1:25:06: 72:0e:95:39:45:1f:2f:e1:99:0e:1c:82:b5:9a:11: 57:36:f6:fe:f8:40:ec:8e:db:f6:97:91:6c:aa:84: 5a:fe:86:28:67:ac:5a:d7:dc:7e:83:b1:0a:a6:1e: 33:44:30:e8:e0:8e:5e:f8:f3:e0:f5:34:8c:04:a0: c8:c2:9f:9c:52:03:50:d7:01:05:8d:cc:d8:9e:fc: 2f:c3:c1:8d:1a:c4:ba:65:f9:7f:67:d5:48:74:97: ad:80:d9:72:39:5c:54:de:1b:8a:98:d3:59:44:fc: 48:41:3d:5c:ca:0d:16:6f:32:a0:26:92:38:34:ba: 80:9e:15:79:a3:13:93:0a:84:99:4c:41:8d:aa:a4: c2:38:26:d3:c7:07:ec:85:2d:c7:ca:f0:94:31:38: 6d:0a:34:8c:b4:ef:6a:1d:0a:0d:ee:6d:b9:8f:b0: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:7B:05:9E:26:45:F0:B7:0D:04:52:C0:A1:BC:A0:1B:C6:EB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ce:cf:64:5c:53:c2:8a:ca:9f:9d:a8:d1:43:de:82:b9:4f: 40:7f:17:07:2c:58:82:c0:de:39:6a:97:70:5d:92:cc:fc:f8: f0:e8:9e:54:38:5b:ad:c2:47:a2:a3:7a:e8:13:51:f6:23:bc: 2b:22:c9:1c:b9:d7:cc:d0:89:b5:02:fd:28:db:bd:f9:db:8a: 81:97:15:b5:84:b0:30:ea:22:fb:db:e1:3d:25:ae:8e:e1:24: ad:f7:15:95:a9:79:21:4d:d8:f6:f5:4a:52:2d:1a:8e:ed:d4: a8:28:bb:0f:4d:1d:81:cf:54:de:93:30:ca:09:67:8c:54:f6: 78:8f:27:58:c2:64:e0:a8:e4:f6:74:d9:30:3a:d9:47:61:b0: ec:61:a0:cd:54:a5:34:d7:68:ec:2f:c0:72:fa:b0:90:77:81: 29:50:db:1d:18:09:7b:48:96:78:42:f0:4c:c4:07:a5:2d:0d: c3:33:d4:49:dc:53:ce:f1:2e:a4:9a:d0:f1:17:fe:10:f9:ce: ae:f6:87:c8:e2:f9:2f:9f:42:a7:96:b7:10:86:4e:87:cd:57: de:c2:a0:9f:e8:6e:c4:21:4b:ca:29:8b:26:c8:88:a8:cb:fa: 3c:43:1f:2c:d2:63:9b:49:fa:db:4a:7e:e8:c3:4f:af:2b:10: de:22:ac:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufrJXFb9bQluvNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmU3ZThmNjEtNGE4Zi00MmJkLWJlZWUtMGM2N2FhZDllZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+2VLcRwwRzJ2Ycu3EOdzvoTauq1tkQ99QiN MO48IAeBvfu2Hm/gEqYK5HVp7qB8jBJfzJIyIrHO0kb43oKPBsA+viKniw5PpJyz 7lCwRtfn6Co8lnzhJQZyDpU5RR8v4ZkOHIK1mhFXNvb++EDsjtv2l5FsqoRa/oYo Z6xa19x+g7EKph4zRDDo4I5e+PPg9TSMBKDIwp+cUgNQ1wEFjczYnvwvw8GNGsS6 Zfl/Z9VIdJetgNlyOVxU3huKmNNZRPxIQT1cyg0WbzKgJpI4NLqAnhV5oxOTCoSZ TEGNqqTCOCbTxwfshS3HyvCUMThtCjSMtO9qHQoN7m25j7D/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIipewWeJkXwtw0EUsChvKAbxuvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDk2N2Y1MzMtMzE0Yi0z MWZhLTlmMzctYjMzZGE1MDBkOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/Oz2RcU8KKyp+dqNFD3oK5T0B/FwcsWILA3jlql3Bdksz8+PDonlQ4 W63CR6KjeugTUfYjvCsiyRy518zQibUC/SjbvfnbioGXFbWEsDDqIvvb4T0lro7h JK33FZWpeSFN2Pb1SlItGo7t1Kgouw9NHYHPVN6TMMoJZ4xU9niPJ1jCZOCo5PZ0 2TA62UdhsOxhoM1UpTTXaOwvwHL6sJB3gSlQ2x0YCXtIlnhC8EzEB6UtDcMz1Enc U87xLqSa0PEX/hD5zq72h8ji+S+fQqeWtxCGTofNV97CoJ/obsQhS8opiybIiKjL +jxDHyzSY5tJ+ttKfujDT68rEN4irGg= -----END CERTIFICATE-----Generated at Sun Apr 27 19:09:43 2025 by rpki-client