$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa File: a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa (raw, json) Hash identifier: t39jZZrp9f3mZGHmZCz+goEeCF4Kff/OBzEe/AV+/yY= Subject key identifier: E9:1D:F5:BA:69:92:BF:27:EF:D1:E0:2C:F9:F1:F6:DF:CD:74:CA:45 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584A8575F08B936447443DD6C300 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 200017 IP address blocks: 72.14.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f0:8b:93:64:47:44:3d:d6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=1f854118-3105-409d-a619-acdf55b69526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:20:e9:79:f3:1a:f0:a7:e2:27:51:02:ed: 5f:ed:c6:32:77:0d:df:75:7c:c2:bd:6d:4f:78:fb: bb:8a:e9:6d:23:ab:59:d8:b5:fd:3e:26:c4:ea:da: 11:06:22:d1:6a:41:bf:18:78:fa:ca:0f:6c:24:12: 1c:3e:21:1c:3f:92:fe:8c:67:bf:ee:7b:72:20:98: 86:a8:34:08:14:86:3f:0b:50:62:ed:8e:72:87:74: ae:38:b7:1c:ae:1b:a4:21:86:06:e8:46:15:78:52: f5:a4:36:cf:24:3b:fc:d4:a8:58:8e:e3:1b:a4:2e: d2:c3:a0:61:cb:82:02:5f:ac:b6:71:2c:98:4a:3a: aa:6b:b9:5b:56:b8:f5:c3:dc:35:eb:22:00:59:4c: 99:13:d9:5a:77:ba:76:63:ba:a3:4b:44:88:9c:f3: a8:87:ce:0d:dd:48:8c:00:a3:7a:49:93:5e:ed:6e: 92:6a:d0:1a:d7:6a:9c:b3:a7:97:d9:68:e3:2b:fb: 50:3d:0c:eb:ab:07:a7:4c:d5:c1:56:e6:ae:71:55: 63:20:c0:2c:48:a4:4d:84:52:37:63:84:68:9c:0a: 68:d2:10:bb:a2:d4:7d:c7:81:1b:88:ad:c0:2b:27: ff:6a:a6:4e:e3:6b:18:39:93:15:90:bf:e2:36:3e: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:F5:BA:69:92:BF:27:EF:D1:E0:2C:F9:F1:F6:DF:CD:74:CA:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0f:b0:0d:ba:38:38:49:65:63:27:a4:3b:e6:5f:72:aa:42: fe:0e:9e:15:48:e2:05:a4:8f:48:62:0c:eb:a0:08:39:64:4a: e7:3b:20:c2:17:c2:58:22:1c:07:4e:d5:4a:ba:9d:45:cd:ca: 25:fd:bf:d1:24:18:24:26:5b:db:6c:43:29:ba:48:50:b7:ac: 49:de:c2:92:71:bf:61:e5:21:61:96:43:52:18:99:3e:42:43: 92:68:0a:10:e7:ef:5b:14:0e:eb:64:c2:0c:6f:53:ce:d4:0f: a6:22:77:ba:ba:89:b5:96:25:7d:cc:01:d5:f2:8a:29:ca:db: 5c:15:39:47:93:f5:d2:35:4e:19:7d:85:30:a9:c4:36:d9:ff: 75:4b:ea:77:76:66:ed:71:c3:d7:1b:d3:b0:ac:83:e0:29:d4: e1:70:78:0c:10:1f:83:be:c5:fb:d7:b5:a0:2c:77:55:19:47: 2d:8b:b1:a2:5e:80:3a:a9:9a:2a:26:1b:94:5e:6c:9f:37:80: 27:00:56:eb:18:52:03:60:8a:87:87:91:57:29:fb:fe:ce:06: dc:43:4b:7d:ef:f7:f0:1c:ab:36:13:c0:c2:2c:92:74:3f:58: 85:49:1a:b0:7a:b8:85:71:9c:ba:6b:fc:2c:87:7f:20:03:ac: ec:3e:bc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfCLk2RHRD3WwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MWY4NTQxMTgtMzEwNS00MDlkLWE2MTktYWNkZjU1YjY5NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqAg6XnzGvCn4idRAu1f7cYydw3fdXzCvW1P ePu7iultI6tZ2LX9PibE6toRBiLRakG/GHj6yg9sJBIcPiEcP5L+jGe/7ntyIJiG qDQIFIY/C1Bi7Y5yh3SuOLccrhukIYYG6EYVeFL1pDbPJDv81KhYjuMbpC7Sw6Bh y4ICX6y2cSyYSjqqa7lbVrj1w9w16yIAWUyZE9lad7p2Y7qjS0SInPOoh84N3UiM AKN6SZNe7W6SatAa12qcs6eX2WjjK/tQPQzrqwenTNXBVuaucVVjIMAsSKRNhFI3 Y4RonApo0hC7otR9x4EbiK3AKyf/aqZO42sYOZMVkL/iNj4KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkd9bppkr8n79HgLPnx9t/NdMpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTM4OWRiZDQtYTJkNy0z YWMxLTk0ODQtNWQxYjY0NzI4OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgPsA26ODhJZWMnpDvmX3KqQv4OnhVI4gWkj0hiDOugCDlkSuc7IMIX wlgiHAdO1Uq6nUXNyiX9v9EkGCQmW9tsQym6SFC3rEnewpJxv2HlIWGWQ1IYmT5C Q5JoChDn71sUDutkwgxvU87UD6Yid7q6ibWWJX3MAdXyiinK21wVOUeT9dI1Thl9 hTCpxDbZ/3VL6nd2Zu1xw9cb07Csg+Ap1OFweAwQH4O+xfvXtaAsd1UZRy2LsaJe gDqpmiomG5RebJ83gCcAVusYUgNgioeHkVcp+/7OBtxDS33v9/AcqzYTwMIsknQ/ WIVJGrB6uIVxnLpr/CyHfyADrOw+vEc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:17 2025 by rpki-client