$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa File: 6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa (raw, json) Hash identifier: aR8UlVSReRStRq1axHMdigMeEUdPpiNE7XEhQ6aibVE= Subject key identifier: 17:12:5B:51:D0:03:D3:3D:5D:00:9C:16:80:FB:60:60:97:CB:5D:5A Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F8D13468E57774FB8228 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f8:d1:34:68:e5:77:74:fb:82:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8a6f3657-48c1-47bc-bb9c-d0eb795d6bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:51:37:f2:aa:c7:49:71:d7:d3:8a:40:c3: 0a:32:6d:2e:02:4e:f2:77:b4:59:9c:01:e8:22:2b: 79:1c:d2:7c:0d:34:52:9b:26:05:3a:40:a1:f5:b9: 25:5a:c8:19:ac:7d:56:73:6c:ff:ff:67:89:b7:86: 37:cc:29:f7:a2:ae:74:bd:d0:47:96:ea:58:d6:2b: 92:18:3e:0a:32:42:8a:43:af:32:9f:aa:19:2e:a6: e0:64:d0:2d:e7:d9:4c:31:f5:4e:2f:d7:50:63:45: 7f:15:58:b1:bf:ae:3a:5e:cc:7d:a1:c1:2a:ef:1a: b2:d9:44:1c:dc:11:48:d3:7e:df:1e:51:d0:ce:50: 91:73:57:3f:00:0d:89:79:55:50:a5:1d:1c:e9:84: aa:27:f8:b7:af:f4:e4:58:8d:ec:b8:f0:ac:ae:cc: a0:59:57:f3:c9:5f:f1:72:4e:5e:57:e0:ee:da:91: 6a:b7:9e:3f:90:fa:cd:c5:60:a2:21:e0:c0:42:2a: aa:8d:b0:f8:99:a5:b6:fd:97:f2:aa:16:c4:81:18: 76:3f:02:8f:8f:3f:71:2b:c8:36:d1:bb:0b:dc:ee: d7:f9:e5:5e:b5:29:ae:c9:2e:04:bc:77:c1:63:a3: 53:02:33:59:24:9f:f7:d3:11:e7:ea:2f:59:6a:1b: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:5B:51:D0:03:D3:3D:5D:00:9C:16:80:FB:60:60:97:CB:5D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:31:87:76:c2:9d:26:20:70:7a:15:21:f6:e6:77:56:fd:40: 4c:03:48:d9:ee:3a:05:7a:6d:d5:6a:77:af:fd:91:2a:9f:23: d7:c0:ec:19:7a:dc:36:20:45:42:c0:fb:73:d2:92:73:ba:e4: f8:f8:19:d0:8b:b3:3c:bc:41:fe:83:e9:2b:e9:8a:05:2e:91: 00:81:80:71:e9:a0:03:df:63:d9:ea:59:4d:ad:92:ab:8a:60: 5e:85:3a:54:b0:45:bb:64:ad:80:a2:3c:57:f6:36:54:b3:6c: c1:34:20:05:df:af:d1:5f:33:90:69:b2:3a:f5:22:ac:39:fc: 1b:03:21:e2:51:d5:66:80:d0:e9:34:19:c4:47:6c:44:b9:8c: 3a:03:95:de:84:03:14:19:61:22:d2:e5:0c:c4:f8:8a:2c:70: 8e:f8:5a:15:e1:64:38:9e:08:e0:8d:4c:7e:88:6e:5c:af:0a: 14:5f:bb:ef:72:8e:e8:9f:60:11:b9:7a:3a:bd:28:79:e2:1b: 17:75:80:23:60:65:d2:e7:5f:20:55:06:bd:71:0b:8d:f7:2c: b9:0a:6c:8d:1b:f7:23:9b:3a:4b:12:e5:37:47:a7:9d:12:6a: 4c:be:45:c3:e9:3f:aa:2d:4f:e5:6b:1c:8d:ee:e9:9f:26:d3: d5:51:63:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufjRNGjld3T7gigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGE2ZjM2NTctNDhjMS00N2JjLWJiOWMtZDBlYjc5NWQ2YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFFRN/Kqx0lx19OKQMMKMm0uAk7yd7RZnAHo Iit5HNJ8DTRSmyYFOkCh9bklWsgZrH1Wc2z//2eJt4Y3zCn3oq50vdBHlupY1iuS GD4KMkKKQ68yn6oZLqbgZNAt59lMMfVOL9dQY0V/FVixv646Xsx9ocEq7xqy2UQc 3BFI037fHlHQzlCRc1c/AA2JeVVQpR0c6YSqJ/i3r/TkWI3suPCsrsygWVfzyV/x ck5eV+Du2pFqt54/kPrNxWCiIeDAQiqqjbD4maW2/ZfyqhbEgRh2PwKPjz9xK8g2 0bsL3O7X+eVetSmuyS4EvHfBY6NTAjNZJJ/30xHn6i9ZahuOlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcSW1HQA9M9XQCcFoD7YGCXy11aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNmQ2ODRjYmYtNWRjNy0z NTllLWJhYjItZDViOTJkNWVlZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcxh3bCnSYgcHoVIfbmd1b9QEwDSNnuOgV6bdVqd6/9kSqfI9fA7Bl6 3DYgRULA+3PSknO65Pj4GdCLszy8Qf6D6SvpigUukQCBgHHpoAPfY9nqWU2tkquK YF6FOlSwRbtkrYCiPFf2NlSzbME0IAXfr9FfM5Bpsjr1Iqw5/BsDIeJR1WaA0Ok0 GcRHbES5jDoDld6EAxQZYSLS5QzE+IoscI74WhXhZDieCOCNTH6IblyvChRfu+9y juifYBG5ejq9KHniGxd1gCNgZdLnXyBVBr1xC433LLkKbI0b9yObOksS5TdHp50S aky+RcPpP6otT+VrHI3u6Z8m09VRY3I= -----END CERTIFICATE-----Generated at Sun Apr 27 19:05:29 2025 by rpki-client