$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa File: cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa (raw, json) Hash identifier: gx+Wejll3Mi1IFLBEXvOxIoaCWWCVZqQrqH/Fm5q5S0= Subject key identifier: 7D:49:6D:12:CB:CB:81:1F:03:96:B5:E6:F8:DD:5E:E3:91:2A:EA:6E Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9FA5B54B9F9D02EE40340 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fa:5b:54:b9:f9:d0:2e:e4:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6a2dd566-c8f3-423f-afb2-0f9143b45ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:0c:78:bf:b8:12:26:d5:58:d7:7a:5c:4a: 1f:af:d4:28:e1:76:8d:65:45:22:ca:b8:07:9b:28: 28:31:1a:f0:c5:18:da:ce:a9:50:db:87:10:47:6d: 39:3c:86:3c:aa:d7:a1:53:8f:4f:f7:dc:83:0d:99: 22:1c:ea:af:3c:3d:1f:80:39:64:e0:6b:9a:5f:a9: f2:d5:d8:c7:3c:4f:ad:f7:b6:71:43:db:56:b2:40: e6:fc:d4:4c:01:ef:4b:cf:02:60:04:37:f7:d0:5b: 5e:e7:a2:fe:04:fb:e1:7a:49:00:d6:51:a3:47:c7: be:39:f2:21:2e:bc:a6:cc:87:d6:20:8e:ee:d5:a2: 74:bd:74:7e:b1:e8:f9:d7:d0:7e:a4:b2:28:3d:09: 8a:71:9e:7f:ad:6d:eb:c6:8f:4e:5c:46:ae:57:18: 00:02:fc:d5:a8:08:1c:c7:90:25:6d:15:4a:2a:64: ba:15:7b:8a:62:5a:11:b8:33:a6:17:68:b6:3b:3d: aa:3f:c1:a8:f0:19:5a:0e:72:e3:e3:16:06:ac:16: 07:90:35:68:b0:fc:e8:97:c3:05:45:44:2b:86:33: 91:a8:a8:51:f5:e1:91:16:eb:8a:1a:d1:4d:da:81: fc:60:04:d1:65:a3:4e:9d:f3:30:37:17:86:dd:da: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:49:6D:12:CB:CB:81:1F:03:96:B5:E6:F8:DD:5E:E3:91:2A:EA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b7:24:d4:28:c6:26:2b:79:f1:70:5f:04:31:ca:3c:e6:30: 42:45:88:0e:73:43:ed:92:62:a3:c4:60:9d:db:7f:77:e1:f8: 4e:b4:89:5e:61:47:e5:cc:00:c2:86:2d:a9:6d:c3:c9:11:8c: 78:55:3e:06:48:e4:45:19:6a:22:13:c6:69:fd:64:02:a3:6c: b8:b4:57:24:9f:bf:a9:ba:0e:b1:ad:f7:ca:a7:e4:be:cf:61: f3:d6:fa:ba:b9:68:83:73:77:64:1d:b9:e7:98:56:10:50:45: 09:11:d2:e6:c7:8d:df:2c:56:21:26:93:14:a1:9d:fe:89:11: 05:e5:26:8f:ca:6a:8e:f8:4c:d3:49:df:ab:5e:a9:30:12:e6: 56:5b:df:4c:cc:48:3c:04:a8:12:a6:a1:c4:4c:0e:a1:8f:5a: 9f:02:bf:09:a4:ed:98:f4:f1:3b:82:f6:88:8f:cd:69:e2:10: 22:9c:e8:30:7d:03:c9:34:0d:1c:57:b9:79:76:58:21:56:86: 0c:47:cc:8a:64:2b:13:07:8a:87:a7:1f:ca:b7:90:fe:3f:4d: 29:8c:6f:fa:3c:1b:7a:7e:2f:c5:15:31:26:84:3a:e2:0e:b2: c8:e7:6b:bb:2b:29:7d:bb:24:2b:91:55:3a:06:ca:b4:14:e3: 49:30:1e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufpbVLn50C7kA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmEyZGQ1NjYtYzhmMy00MjNmLWFmYjItMGY5MTQzYjQ1ZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFIMeL+4EibVWNd6XEofr9Qo4XaNZUUiyrgH mygoMRrwxRjazqlQ24cQR205PIY8qtehU49P99yDDZkiHOqvPD0fgDlk4GuaX6ny 1djHPE+t97ZxQ9tWskDm/NRMAe9LzwJgBDf30Fte56L+BPvhekkA1lGjR8e+OfIh LrymzIfWII7u1aJ0vXR+sej519B+pLIoPQmKcZ5/rW3rxo9OXEauVxgAAvzVqAgc x5AlbRVKKmS6FXuKYloRuDOmF2i2Oz2qP8Go8BlaDnLj4xYGrBYHkDVosPzol8MF RUQrhjORqKhR9eGRFuuKGtFN2oH8YATRZaNOnfMwNxeG3dofTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1JbRLLy4EfA5a15vjdXuORKupuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2I0ZjliOWYtNjQ0Ni0z NjAzLTgyYjUtM2NhM2Q4MGI0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm3JNQoxiYrefFwXwQxyjzmMEJFiA5zQ+2SYqPEYJ3bf3fh+E60iV5h R+XMAMKGLaltw8kRjHhVPgZI5EUZaiITxmn9ZAKjbLi0VySfv6m6DrGt98qn5L7P YfPW+rq5aINzd2QdueeYVhBQRQkR0ubHjd8sViEmkxShnf6JEQXlJo/Kao74TNNJ 36teqTAS5lZb30zMSDwEqBKmocRMDqGPWp8Cvwmk7Zj08TuC9oiPzWniECKc6DB9 A8k0DRxXuXl2WCFWhgxHzIpkKxMHioenH8q3kP4/TSmMb/o8G3p+L8UVMSaEOuIO ssjna7srKX27JCuRVToGyrQU40kwHqg= -----END CERTIFICATE-----Generated at Mon Apr 28 07:51:36 2025 by rpki-client