$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa File: b01d2239-7b24-3ca6-9965-8de122cf4593.roa (raw, json) Hash identifier: uCxLL6t2eTGI/PQVN1jrplAhc0txO7I4OEFhrrKbtsw= Subject key identifier: 5C:C6:35:AD:46:49:CC:7C:5D:E9:B9:C2:33:40:73:B1:EF:25:3A:AE Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F9FB5FA9527ACB75AC00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f9:fb:5f:a9:52:7a:cb:75:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=322a0e9f-ce6d-443d-8f70-9521885c150c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:dc:85:fa:5e:6c:71:6e:5f:52:06:36:56: 98:de:94:19:99:d5:16:ca:7f:df:ac:ed:75:45:27: cf:0f:23:21:d8:b2:0f:50:19:d2:fb:8b:f0:95:90: 51:21:6b:8b:41:2f:c3:66:f5:a8:ee:68:8c:e5:7f: ed:1e:7c:80:b2:9f:8b:e7:83:71:fb:0e:0d:0b:e7: 4f:24:4c:2e:8c:7b:68:92:c2:72:41:cb:07:de:a5: 11:90:5d:25:89:7e:fd:a1:eb:0b:ff:41:d3:ab:7a: 66:e1:1d:7e:aa:62:a2:07:2c:ea:e0:ba:7d:3b:b0: 25:22:fb:5e:2c:9a:b6:59:d1:bb:66:3f:75:b6:33: 99:47:e3:84:e9:4a:b6:11:a0:e4:27:44:1e:eb:ac: b2:67:ce:21:cd:df:38:c9:a1:4c:75:1b:85:54:5a: 74:6f:a5:e6:cc:88:45:dc:f8:fe:83:21:50:19:ca: 41:df:17:8a:49:34:fd:df:30:1e:ac:57:bb:8f:a4: 75:3a:e9:8a:f7:6b:ff:86:ed:5b:b8:00:24:72:f2: cf:5e:40:ea:89:df:1f:e3:29:94:35:42:76:58:16: 9d:8b:20:1b:91:96:ea:76:56:a6:42:80:ae:c2:e2: dc:30:8f:b7:73:66:56:51:e8:85:f8:45:0d:d7:f5: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:35:AD:46:49:CC:7C:5D:E9:B9:C2:33:40:73:B1:EF:25:3A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d4:35:53:3d:ba:f8:c1:f1:5d:b4:0c:d0:88:f9:dc:d8:5e: 60:fc:d1:83:39:6f:28:ef:ba:5b:af:a0:c4:fc:18:44:9e:5a: a5:20:3e:a6:4b:5b:e8:c9:93:6f:80:84:54:ce:18:74:3c:6b: 14:8a:7e:34:3d:c8:dc:c7:3e:4c:71:3a:65:08:4d:c3:b4:40: 6d:5a:17:45:24:d5:5e:ea:f8:a8:0c:a3:8d:10:cb:25:e5:16: c3:9c:5d:3c:44:b9:8d:3c:fa:8c:b3:1e:2b:98:b4:a9:db:ff: 3c:1b:95:f3:91:24:54:51:3b:ef:40:f7:79:c1:58:8c:bf:08: c5:f5:c3:e5:5f:b3:a9:cf:2a:90:f4:7b:ed:ad:a8:2e:a9:af: 2e:01:f0:b0:06:97:a8:5b:4e:ad:7d:de:39:91:e3:18:55:07: 9a:bb:ed:9d:d2:ce:f6:df:40:20:29:e0:c6:68:94:32:81:fd: 52:8f:15:1e:6e:0b:24:30:3e:dc:aa:7e:6a:ed:d5:2e:29:fa: 45:ed:70:76:81:7a:f7:8f:a8:74:db:bf:5e:0c:fa:ff:f9:ae: 65:4d:ba:49:1e:83:7c:22:49:94:cc:6c:49:69:bb:0c:f7:e9: a0:f4:d7:96:b6:39:ae:f7:75:4b:6a:a7:e2:18:15:1d:db:bc: ba:18:89:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufn7X6lSest1rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzIyYTBlOWYtY2U2ZC00NDNkLThmNzAtOTUyMTg4NWMxNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPzchfpebHFuX1IGNlaY3pQZmdUWyn/frO11 RSfPDyMh2LIPUBnS+4vwlZBRIWuLQS/DZvWo7miM5X/tHnyAsp+L54Nx+w4NC+dP JEwujHtoksJyQcsH3qURkF0liX79oesL/0HTq3pm4R1+qmKiByzq4Lp9O7AlIvte LJq2WdG7Zj91tjOZR+OE6Uq2EaDkJ0Qe66yyZ84hzd84yaFMdRuFVFp0b6XmzIhF 3Pj+gyFQGcpB3xeKSTT93zAerFe7j6R1OumK92v/hu1buAAkcvLPXkDqid8f4ymU NUJ2WBadiyAbkZbqdlamQoCuwuLcMI+3c2ZWUeiF+EUN1/UiNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzGNa1GScx8Xem5wjNAc7HvJTquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYjAxZDIyMzktN2IyNC0z Y2E2LTk5NjUtOGRlMTIyY2Y0NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPUNVM9uvjB8V20DNCI+dzYXmD80YM5byjvuluvoMT8GESeWqUgPqZL W+jJk2+AhFTOGHQ8axSKfjQ9yNzHPkxxOmUITcO0QG1aF0Uk1V7q+KgMo40QyyXl FsOcXTxEuY08+oyzHiuYtKnb/zwblfORJFRRO+9A93nBWIy/CMX1w+Vfs6nPKpD0 e+2tqC6pry4B8LAGl6hbTq193jmR4xhVB5q77Z3SzvbfQCAp4MZolDKB/VKPFR5u CyQwPtyqfmrt1S4p+kXtcHaBevePqHTbv14M+v/5rmVNukkeg3wiSZTMbElpuwz3 6aD015a2Oa73dUtqp+IYFR3bvLoYiXs= -----END CERTIFICATE-----Generated at Sun Apr 27 20:18:35 2025 by rpki-client