$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa File: 4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa (raw, json) Hash identifier: /Fup5qqqnezeFTx2tPD6ufvBqoVYolZbbf/jkH+S6qc= Subject key identifier: 78:E7:97:F9:5F:92:CB:A2:FE:E3:FE:34:B7:4F:2C:04:49:EE:FB:08 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9FA485CEDCF0401B9AD80 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fa:48:5c:ed:cf:04:01:b9:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dcd8b218-8dd9-4a97-b99c-79407a696f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:e7:91:14:23:2a:78:48:73:21:8a:0c:1a: 43:f9:1e:af:7d:65:c9:c7:16:69:ba:6f:dd:78:c4: cf:6e:67:05:ff:bb:95:7d:1e:68:4f:9c:1c:af:64: 53:12:e8:b5:e0:3f:6b:cf:1a:97:fc:ae:2a:20:a7: 73:c7:2a:0c:ff:2c:03:6f:c7:a0:72:ac:c4:28:13: c6:18:b1:40:9d:2c:6a:fa:3a:4e:67:7b:73:cd:b1: 89:11:2d:63:65:52:b4:c5:96:87:ac:44:ca:ee:99: 82:79:ff:93:16:6a:22:c0:a3:e8:05:76:45:8d:0a: 9e:46:ec:97:21:c6:a3:18:e0:b5:eb:00:cd:69:9a: 28:66:a7:8e:52:35:a3:d9:f8:b6:14:ff:cf:29:4b: 03:1f:7f:39:21:c9:eb:52:d9:d3:ad:95:02:9c:fb: f6:ac:73:97:a6:8a:0c:64:ec:d3:62:b1:53:5c:b0: 05:45:94:00:46:4e:43:eb:6e:a1:53:12:a1:fb:58: 35:0a:f9:86:6b:bd:b2:ed:8c:e8:6d:b3:84:33:d5: d3:e4:4c:1f:15:e3:19:87:d7:92:a4:a5:f7:21:ca: ad:ed:07:d1:1b:b0:cb:98:b2:c3:00:60:3f:e9:98: 86:0c:eb:64:f8:e4:e4:d8:a6:7b:3a:fb:69:c1:d6: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E7:97:F9:5F:92:CB:A2:FE:E3:FE:34:B7:4F:2C:04:49:EE:FB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6d:f9:fa:34:80:90:5c:32:c0:58:88:d6:28:d3:89:92:46: 0c:88:dd:ca:bc:97:7f:b6:01:78:8a:da:ef:60:6c:bb:be:cc: ca:6d:2e:e1:bb:3a:10:38:11:37:02:f1:05:36:bd:eb:82:fe: e3:31:13:55:08:67:4e:c6:12:04:05:f4:a7:f7:53:21:8d:19: 20:bd:17:0e:66:36:5b:2c:49:5f:88:da:02:37:5a:b2:aa:1b: 66:99:3e:20:68:d5:fc:5c:3c:74:ce:8b:71:ef:c8:ad:83:89: 27:d7:c5:8f:b1:5c:03:6f:7e:94:f9:08:41:ed:d8:16:63:19: 4f:dd:19:35:9a:50:27:5c:8e:db:56:2b:90:54:9b:e5:6b:cf: a5:8d:68:63:d4:93:db:52:65:1a:64:50:7e:49:71:7f:3c:36: ca:ee:4d:ac:71:d9:ae:02:d7:1b:8d:79:c6:dd:cf:a2:be:ad: 01:cb:13:ec:ed:0b:0f:71:74:52:e6:4e:66:2b:9b:93:65:ab: 07:79:11:01:ee:29:4a:45:78:47:c1:88:d5:81:00:ff:2d:10: 9f:e4:8d:c0:6d:25:88:44:ec:71:38:a2:1b:55:e3:91:ef:a2: 3a:54:58:d1:ea:06:25:85:f6:ba:b9:a6:fb:1d:b4:41:68:fd: da:6e:6c:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufpIXO3PBAG5rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGNkOGIyMTgtOGRkOS00YTk3LWI5OWMtNzk0MDdhNjk2ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDXnkRQjKnhIcyGKDBpD+R6vfWXJxxZpum/d eMTPbmcF/7uVfR5oT5wcr2RTEui14D9rzxqX/K4qIKdzxyoM/ywDb8egcqzEKBPG GLFAnSxq+jpOZ3tzzbGJES1jZVK0xZaHrETK7pmCef+TFmoiwKPoBXZFjQqeRuyX IcajGOC16wDNaZooZqeOUjWj2fi2FP/PKUsDH385IcnrUtnTrZUCnPv2rHOXpooM ZOzTYrFTXLAFRZQARk5D626hUxKh+1g1CvmGa72y7YzobbOEM9XT5EwfFeMZh9eS pKX3Icqt7QfRG7DLmLLDAGA/6ZiGDOtk+OTk2KZ7OvtpwdZNBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjnl/lfksui/uP+NLdPLARJ7vsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNGYzMmJkZDYtYzg2Mi0z OWM5LWJmYmUtMGYwYzcxNzFhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtt+fo0gJBcMsBYiNYo04mSRgyI3cq8l3+2AXiK2u9gbLu+zMptLuG7 OhA4ETcC8QU2veuC/uMxE1UIZ07GEgQF9Kf3UyGNGSC9Fw5mNlssSV+I2gI3WrKq G2aZPiBo1fxcPHTOi3HvyK2DiSfXxY+xXANvfpT5CEHt2BZjGU/dGTWaUCdcjttW K5BUm+Vrz6WNaGPUk9tSZRpkUH5JcX88NsruTaxx2a4C1xuNecbdz6K+rQHLE+zt Cw9xdFLmTmYrm5Nlqwd5EQHuKUpFeEfBiNWBAP8tEJ/kjcBtJYhE7HE4ohtV45Hv ojpUWNHqBiWF9rq5pvsdtEFo/dpubNw= -----END CERTIFICATE-----Generated at Sun Apr 27 15:32:29 2025 by rpki-client