$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c07a0abd-8db6-3572-a509-8f6e30618599.roa File: c07a0abd-8db6-3572-a509-8f6e30618599.roa (raw, json) Hash identifier: ATlk95PtwaSVAWp2VV0YLwKukZg12ZQuMqE3T5Tv5+I= Subject key identifier: 36:1E:D9:23:74:62:90:1E:83:2C:E7:0E:E8:D9:97:7F:95:24:73:A6 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F78098D4A03D928A5F00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c07a0abd-8db6-3572-a509-8f6e30618599.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f7:80:98:d4:a0:3d:92:8a:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=81390bb7-7481-401e-880e-c7cc35c13358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:f6:94:8f:f1:6b:41:c6:ed:74:59:05:30: b1:09:bc:32:45:2b:a9:cf:e5:b5:4f:80:bd:0e:2d: 19:9f:ca:cd:bd:bf:da:9d:67:84:98:29:95:c7:11: e9:9f:6d:95:86:ec:78:17:e5:35:d8:64:40:72:55: 3d:70:e9:aa:d9:bc:a3:85:49:0e:d9:02:da:2b:1d: 86:6d:d5:c2:e1:50:64:29:c1:d5:36:9d:ba:4c:a9: 88:20:d5:a5:e3:e0:11:27:49:23:8f:15:40:43:cc: b1:a5:45:fe:0f:28:32:78:10:94:e1:b4:f2:91:c4: 89:c3:a9:fc:89:a0:49:6a:2d:a3:ac:c3:98:d9:2c: ae:6b:47:58:fe:36:0a:f9:3d:8f:4a:b4:0a:1c:8e: 0e:9b:c5:c2:10:95:0b:15:b2:fb:29:3d:b5:d1:74: 02:19:d3:90:7b:31:2b:6a:12:7e:b3:8c:0e:b2:d1: 95:d7:13:48:86:68:55:1c:16:59:92:63:08:eb:ca: 96:d1:a4:44:20:59:cc:85:8d:c9:3b:55:5e:35:db: 3a:f3:66:e8:4d:a1:40:d5:47:91:cd:c1:10:42:dc: 79:75:de:e4:52:03:9b:21:50:2c:6e:bf:f4:06:13: bd:df:63:ac:4d:74:70:8d:12:43:71:3c:19:40:33: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:D9:23:74:62:90:1E:83:2C:E7:0E:E8:D9:97:7F:95:24:73:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/c07a0abd-8db6-3572-a509-8f6e30618599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1f:26:30:6c:ad:16:82:53:ea:cb:10:b1:4a:c5:a9:44:41: 65:c2:81:e3:6b:b0:c0:81:c5:d3:4f:b0:4c:75:d8:25:9b:fb: bc:75:cf:2f:bc:34:c5:28:a2:00:74:97:34:45:15:77:b3:a5: 56:09:2d:9a:1b:d3:e6:39:80:16:d4:eb:4a:21:07:51:dd:23: 19:20:42:51:91:97:05:52:c1:9c:2a:7a:6a:d2:4e:7a:8e:4e: 41:b2:32:b2:84:5a:9d:f1:47:13:52:79:32:86:c8:f6:61:67: af:df:66:34:51:fa:59:60:63:c7:6f:08:5e:c7:b3:96:76:51: c4:9f:5c:9b:64:eb:13:99:90:da:48:ae:13:07:81:0d:6b:e1: fb:2f:5e:52:81:59:2f:42:63:a0:d1:ca:b6:02:dd:c6:d0:91: bc:90:9d:e9:fd:51:45:b5:a9:4c:24:7f:51:6f:b5:88:ea:e4: b9:e3:84:c0:42:a3:48:e8:1c:c2:cf:4d:e3:89:ce:d5:74:94: ad:96:3f:76:61:8c:a1:20:f5:09:9c:93:78:6b:d4:14:b7:a2: 78:a2:a0:10:ff:b8:cc:ad:cc:68:53:a1:0c:09:7a:35:f8:2d: b8:13:0a:c6:9d:7d:14:8d:6f:73:d4:2e:b2:12:3c:f3:be:04: 24:03:43:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufeAmNSgPZKKXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODEzOTBiYjctNzQ4MS00MDFlLTg4MGUtYzdjYzM1YzEzMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3j2lI/xa0HG7XRZBTCxCbwyRSupz+W1T4C9 Di0Zn8rNvb/anWeEmCmVxxHpn22Vhux4F+U12GRAclU9cOmq2byjhUkO2QLaKx2G bdXC4VBkKcHVNp26TKmIINWl4+ARJ0kjjxVAQ8yxpUX+DygyeBCU4bTykcSJw6n8 iaBJai2jrMOY2Syua0dY/jYK+T2PSrQKHI4Om8XCEJULFbL7KT210XQCGdOQezEr ahJ+s4wOstGV1xNIhmhVHBZZkmMI68qW0aREIFnMhY3JO1VeNds682boTaFA1UeR zcEQQtx5dd7kUgObIVAsbr/0BhO932OsTXRwjRJDcTwZQDPS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYe2SN0YpAegyznDujZl3+VJHOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYzA3YTBhYmQtOGRiNi0z NTcyLWE1MDktOGY2ZTMwNjE4NTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4fJjBsrRaCU+rLELFKxalEQWXCgeNrsMCBxdNPsEx12CWb+7x1zy+8 NMUoogB0lzRFFXezpVYJLZob0+Y5gBbU60ohB1HdIxkgQlGRlwVSwZwqemrSTnqO TkGyMrKEWp3xRxNSeTKGyPZhZ6/fZjRR+llgY8dvCF7Hs5Z2UcSfXJtk6xOZkNpI rhMHgQ1r4fsvXlKBWS9CY6DRyrYC3cbQkbyQnen9UUW1qUwkf1FvtYjq5LnjhMBC o0joHMLPTeOJztV0lK2WP3ZhjKEg9Qmck3hr1BS3oniioBD/uMytzGhToQwJejX4 LbgTCsadfRSNb3PULrISPPO+BCQDQ78= -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:48 2025 by rpki-client