$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa File: d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa (raw, json) Hash identifier: gSvZAqgHl6rDGAVmow4j4aEGTBGobBaq6WIfbdYpFh8= Subject key identifier: A4:FB:87:32:14:8E:04:66:70:25:D6:45:DB:AF:1D:9A:AE:BD:14:8A Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F73CD4220DAAFC6ED080 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 72.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f7:3c:d4:22:0d:aa:fc:6e:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e6274aea-7a5d-47cb-b016-2eb5d0dd9bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:a2:c4:3e:fc:bb:cf:49:2f:c6:85:2c:d8: 98:5a:81:6c:d0:84:c4:23:54:5b:c8:aa:00:25:70: a0:aa:c2:63:e2:00:a8:42:3a:94:db:89:0d:8d:03: 30:d3:71:47:a7:1a:e3:e0:b2:de:3a:95:4b:6a:25: a1:de:3c:8e:88:38:86:ec:8b:86:54:c5:09:a4:84: b5:f2:35:5e:13:8e:ee:80:f8:4b:24:51:da:44:4b: ff:3e:83:38:1d:28:06:73:13:49:60:22:a2:b0:2a: fd:43:73:84:42:32:d7:77:e2:7e:31:97:b7:ae:c9: 65:07:54:ce:6c:4f:e1:d6:0e:66:ab:e0:01:7f:01: c1:1c:d6:c5:1a:74:0d:2e:72:90:fe:d6:5b:ac:15: 9a:61:a5:5f:7b:6b:35:7c:13:65:88:6a:4a:d9:af: b1:ad:ed:82:17:af:7e:ee:65:bf:e0:9b:2e:31:06: c0:ef:6a:4e:b7:2e:19:ac:6c:71:db:73:61:bd:f5: 05:76:d5:05:fb:16:78:ee:5b:e9:88:fa:03:5c:ce: c7:60:91:c2:67:1b:91:23:cb:13:ec:1e:14:ec:9f: 1e:ab:4a:c5:6e:5d:e9:3e:43:d0:d6:6b:b5:ef:07: 03:c6:c5:57:bc:7f:41:b4:d0:be:f4:b0:bf:a2:7b: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:87:32:14:8E:04:66:70:25:D6:45:DB:AF:1D:9A:AE:BD:14:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:05:1f:79:b6:87:06:a8:d5:6d:32:da:26:8d:52:5c:d6:2a: fa:04:e7:8e:96:b3:cd:47:4c:69:0a:e4:41:15:12:fd:59:a1: 02:e2:0f:06:b9:c6:fb:c9:d7:09:62:e9:4a:20:c1:ff:6e:43: 11:6a:2d:fe:b6:ba:7f:5a:26:62:a5:c7:b7:25:28:9b:7e:83: 0d:b7:b4:b4:cd:21:cc:8c:33:da:e2:0c:2b:5d:1c:10:48:0a: 8c:2e:80:76:1a:53:14:14:a6:a5:c5:b2:2e:ea:f1:fa:04:42: f1:73:1d:da:9b:9b:da:eb:aa:66:46:00:42:54:d4:d9:2c:55: a0:c6:05:9f:56:95:0a:66:1c:9e:cc:17:1d:21:64:09:6b:14: ea:4c:a1:65:5a:52:e5:0a:a3:5a:ac:2a:fa:ae:25:07:9a:10: 17:a5:9e:f2:27:67:79:af:a4:8a:0a:c0:d4:b3:45:a4:20:1b: fb:03:05:bb:d9:e8:c3:0e:3b:50:1f:0e:0f:6c:00:bb:e8:fb: 01:bc:f4:75:5d:51:04:1e:ad:ae:f7:06:96:12:cb:d2:1d:97: 41:48:3d:a2:0e:59:1c:ea:88:7a:3a:2b:c3:32:51:af:f5:04: b8:95:1d:85:83:6c:49:ea:6a:17:c2:43:b4:32:60:a8:f7:e6: 02:32:bf:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufc81CINqvxu0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTYyNzRhZWEtN2E1ZC00N2NiLWIwMTYtMmViNWQwZGQ5YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv6ixD78u89JL8aFLNiYWoFs0ITEI1RbyKoA JXCgqsJj4gCoQjqU24kNjQMw03FHpxrj4LLeOpVLaiWh3jyOiDiG7IuGVMUJpIS1 8jVeE47ugPhLJFHaREv/PoM4HSgGcxNJYCKisCr9Q3OEQjLXd+J+MZe3rsllB1TO bE/h1g5mq+ABfwHBHNbFGnQNLnKQ/tZbrBWaYaVfe2s1fBNliGpK2a+xre2CF69+ 7mW/4JsuMQbA72pOty4ZrGxx23NhvfUFdtUF+xZ47lvpiPoDXM7HYJHCZxuRI8sT 7B4U7J8eq0rFbl3pPkPQ1mu17wcDxsVXvH9BtNC+9LC/ontUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT7hzIUjgRmcCXWRduvHZquvRSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZDZlNDBhMDctMTk2OC0z YzEwLTllNDItYWE4ZDg2YjlmNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEFH3m2hwao1W0y2iaNUlzWKvoE546Ws81HTGkK5EEVEv1ZoQLiDwa5 xvvJ1wli6Uogwf9uQxFqLf62un9aJmKlx7clKJt+gw23tLTNIcyMM9riDCtdHBBI CowugHYaUxQUpqXFsi7q8foEQvFzHdqbm9rrqmZGAEJU1NksVaDGBZ9WlQpmHJ7M Fx0hZAlrFOpMoWVaUuUKo1qsKvquJQeaEBelnvInZ3mvpIoKwNSzRaQgG/sDBbvZ 6MMOO1AfDg9sALvo+wG89HVdUQQera73BpYSy9Idl0FIPaIOWRzqiHo6K8MyUa/1 BLiVHYWDbEnqahfCQ7QyYKj35gIyvxU= -----END CERTIFICATE-----Generated at Sun Apr 27 15:43:57 2025 by rpki-client