$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ae3e98b7-564e-39bd-881b-d1d31dd80185.roa File: ae3e98b7-564e-39bd-881b-d1d31dd80185.roa (raw, json) Hash identifier: q2WUJTXThilWI2Me2lbmWasRmefPl9IJzC14D6jkQlQ= Subject key identifier: 34:7A:8A:4B:E6:DB:96:93:06:18:9F:E7:23:B9:9C:88:09:75:9F:64 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9FC045C443F90D2BE8500 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ae3e98b7-564e-39bd-881b-d1d31dd80185.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.51.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fc:04:5c:44:3f:90:d2:be:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c8c415c8-a22a-40cc-9b7d-497ba3b64dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:82:3b:62:d7:e3:17:7d:51:f9:23:99:9b: bc:86:20:82:d8:ab:ef:fb:83:b9:66:01:eb:72:bb: de:8b:c6:ad:11:bd:27:e3:d1:4e:5a:12:ff:7d:fd: e4:9e:1d:90:2f:a0:a8:c4:74:55:a6:e5:a5:2f:a2: 20:87:d3:98:ef:ec:ba:0f:8c:0e:3e:0d:45:4d:96: 3d:bd:fc:a9:4f:f8:aa:e1:4b:60:58:ea:8e:75:80: 48:23:fe:11:0b:c1:21:2e:8d:e0:ab:31:23:a7:a3: 59:ec:94:12:01:c4:ad:b5:9f:b9:69:8b:22:c6:3a: af:17:44:e2:bc:8f:a3:9a:37:7c:1c:9c:a4:b4:d1: ea:b2:5d:c7:24:c9:ea:0d:be:87:7b:94:4c:3c:85: 79:cf:56:28:4c:0b:20:d8:ba:dd:32:bc:b1:c6:95: 8d:dd:f1:7e:ce:c8:28:06:f5:ac:32:9c:58:c5:6c: 69:99:d2:ec:33:48:e3:b9:50:37:26:ef:9b:25:e0: e6:38:ee:3b:36:10:23:35:fe:52:8c:41:4a:d7:ef: d7:f0:f1:f8:31:6f:e5:98:d4:d8:8b:1b:ad:8b:1a: 32:a0:91:29:80:e3:55:95:a9:f4:6b:ab:e3:72:0f: e9:8e:f6:3f:03:22:a0:5d:78:ca:c8:13:1a:62:0e: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7A:8A:4B:E6:DB:96:93:06:18:9F:E7:23:B9:9C:88:09:75:9F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ae3e98b7-564e-39bd-881b-d1d31dd80185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b2:7b:ff:0c:6e:da:e6:d6:96:5c:54:00:d5:6c:7e:0d:6a: 3b:38:b1:71:3d:66:ae:f3:f1:61:4b:00:43:19:8d:71:c5:0c: df:13:0f:f3:38:bb:43:1b:9e:70:c3:c0:d6:d9:a7:fc:fe:51: 73:90:b4:c5:34:5d:40:9e:0a:dd:9b:38:f2:e8:a4:95:61:da: e5:ac:45:39:45:0b:42:d8:f4:43:7c:39:e1:0d:bd:d9:f5:1c: a9:bf:d6:03:c7:cd:27:d9:b2:71:ae:8a:61:26:93:0a:fa:54: 5d:11:85:6c:bb:53:43:f9:93:6e:5e:fe:94:c7:21:2a:ca:8d: 39:af:51:14:ab:da:70:3f:73:ec:40:11:46:43:0c:79:73:ce: 15:31:f0:ad:3e:bc:de:be:26:3b:e7:29:6a:df:be:79:45:ca: c8:f9:3c:3b:f1:15:30:9c:bf:31:7d:e5:39:d9:8b:ff:bf:3a: db:04:de:2b:0c:ab:f7:aa:e8:53:07:a7:b1:00:d1:af:ac:4b: ac:d2:06:60:57:82:9b:62:95:c8:19:0a:f2:6e:f4:51:a7:ac: c9:d6:c1:e6:81:a0:61:4c:52:fe:dd:9e:fd:f7:1c:6e:da:a7: ae:62:10:75:dd:60:3d:e4:fe:82:64:71:b2:dd:90:6b:07:75: 1d:af:74:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufwEXEQ/kNK+hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzhjNDE1YzgtYTIyYS00MGNjLTliN2QtNDk3YmEzYjY0ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsuCO2LX4xd9UfkjmZu8hiCC2Kvv+4O5ZgHr crvei8atEb0n49FOWhL/ff3knh2QL6CoxHRVpuWlL6Igh9OY7+y6D4wOPg1FTZY9 vfypT/iq4UtgWOqOdYBII/4RC8EhLo3gqzEjp6NZ7JQSAcSttZ+5aYsixjqvF0Ti vI+jmjd8HJyktNHqsl3HJMnqDb6He5RMPIV5z1YoTAsg2LrdMryxxpWN3fF+zsgo BvWsMpxYxWxpmdLsM0jjuVA3Ju+bJeDmOO47NhAjNf5SjEFK1+/X8PH4MW/lmNTY ixutixoyoJEpgONVlan0a6vjcg/pjvY/AyKgXXjKyBMaYg7U2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR6ikvm25aTBhif5yO5nIgJdZ9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYWUzZTk4YjctNTY0ZS0z OWJkLTg4MWItZDFkMzFkZDgwMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSDNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyye/8Mbtrm1pZcVADVbH4Najs4sXE9Zq7z8WFLAEMZjXHFDN8TD/M4 u0MbnnDDwNbZp/z+UXOQtMU0XUCeCt2bOPLopJVh2uWsRTlFC0LY9EN8OeENvdn1 HKm/1gPHzSfZsnGuimEmkwr6VF0RhWy7U0P5k25e/pTHISrKjTmvURSr2nA/c+xA EUZDDHlzzhUx8K0+vN6+JjvnKWrfvnlFysj5PDvxFTCcvzF95TnZi/+/OtsE3isM q/eq6FMHp7EA0a+sS6zSBmBXgptilcgZCvJu9FGnrMnWweaBoGFMUv7dnv33HG7a p65iEHXdYD3k/oJkcbLdkGsHdR2vdL8= -----END CERTIFICATE-----Generated at Mon Apr 28 00:01:13 2025 by rpki-client