$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json) Hash identifier: 1V1QMXaCDWW4zllGsPRrwLRmZUEGYF4lUjwbwu11LF8= Subject key identifier: A1:7C:CA:B0:08:9D:37:02:09:9C:F2:EC:15:FC:0B:B0:92:AE:77:ED Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F432858491AA6BA2FD1DA50C1FE3718C0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 211373 IP address blocks: 72.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ba:2f:d1:da:50:c1:fe:37:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=a14e2e6f-5222-4708-b50f-af3cb563ec83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:a8:57:da:43:97:16:1f:5a:71:1c:ce:c7: 4d:c8:90:47:0b:48:8d:7d:cf:b9:ab:aa:b6:60:67: 98:2e:2f:42:61:33:52:35:36:ad:6f:11:5d:f4:74: 76:9a:aa:85:df:2e:8b:ce:78:35:37:e2:b2:2c:ad: b2:fb:39:19:75:1d:bc:59:ec:bc:fc:c6:06:5a:25: 7c:71:d4:0b:44:eb:47:ce:0f:d7:fc:11:14:d0:95: 17:cf:fe:8c:1e:ff:21:e9:3d:6a:37:1c:d5:88:36: 29:82:5c:62:4a:9d:14:92:75:cf:05:89:d3:f2:ab: 7a:93:3c:4c:a6:46:e3:d6:b9:ef:a0:f9:17:69:d3: 77:56:c7:c8:06:97:ba:57:c9:9f:a6:0a:04:39:ff: 17:18:06:ee:3d:4c:f5:91:01:70:0c:44:03:95:e1: 7d:86:55:3e:dc:90:05:75:54:78:76:c8:a6:e8:d2: b3:3c:dd:a9:67:cc:d8:ff:30:37:2f:87:83:47:58: fe:05:43:32:16:27:db:51:b8:29:40:2e:58:f5:94: 7c:0d:10:53:56:b7:5c:4a:6f:5c:65:3a:8a:dc:f3: e4:cd:a5:72:31:d9:ca:e6:56:91:07:0c:7a:f0:fa: b6:99:0e:4c:88:f1:98:04:b4:b8:ec:d5:1e:33:47: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:CA:B0:08:9D:37:02:09:9C:F2:EC:15:FC:0B:B0:92:AE:77:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:10:9e:53:e2:3e:16:a2:c9:23:ef:a8:54:bf:8c:b6:34:c9: d9:bb:ec:8c:9c:d9:3f:1e:d3:d5:99:3c:8d:b8:90:75:f0:6b: 67:fc:ff:ea:9a:57:4f:71:52:29:63:e3:1a:14:59:3c:02:51: 57:d0:80:e9:28:e6:30:6d:1e:23:8c:77:b2:c6:19:3e:48:68: 49:da:ec:47:4a:fc:50:59:49:81:4d:52:38:85:b4:22:cf:f1: cc:9f:f8:a5:92:2f:97:83:da:50:32:71:9b:dc:9a:93:1e:14: 61:3f:98:c6:dc:71:63:9f:2a:b9:68:4b:07:d5:7c:c3:a4:2c: 52:82:7e:83:de:a9:ca:5c:03:ea:43:b9:c3:24:11:65:6d:52: 59:0e:32:ed:7e:ba:1f:98:26:5d:cc:43:19:3b:d4:e6:e7:17: e9:3b:61:5c:f0:b0:a6:97:63:2f:dc:4f:7c:d6:42:1e:48:00: cc:cc:41:4a:aa:0a:d8:a1:bc:3f:47:6e:08:2a:08:54:a1:73: 51:ea:22:ba:7a:88:ae:c4:5b:4a:95:de:75:a7:60:aa:2d:ab: e7:be:44:6b:fb:19:d2:e9:95:5b:2a:29:84:df:bb:63:56:a9: f5:8a:b5:23:85:60:0c:42:30:27:cd:4d:9d:ad:a3:95:9f:44: d8:89:2c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprov0dpQwf43GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YTE0ZTJlNmYtNTIyMi00NzA4LWI1MGYtYWYzY2I1NjNlYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy6oV9pDlxYfWnEczsdNyJBHC0iNfc+5q6q2 YGeYLi9CYTNSNTatbxFd9HR2mqqF3y6Lzng1N+KyLK2y+zkZdR28Wey8/MYGWiV8 cdQLROtHzg/X/BEU0JUXz/6MHv8h6T1qNxzViDYpglxiSp0UknXPBYnT8qt6kzxM pkbj1rnvoPkXadN3VsfIBpe6V8mfpgoEOf8XGAbuPUz1kQFwDEQDleF9hlU+3JAF dVR4dsim6NKzPN2pZ8zY/zA3L4eDR1j+BUMyFifbUbgpQC5Y9ZR8DRBTVrdcSm9c ZTqK3PPkzaVyMdnK5laRBwx68Pq2mQ5MiPGYBLS47NUeM0dNUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF8yrAInTcCCZzy7BX8C7CSrnftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNzA4ZTA0MWYtNmVlYS0z MmM1LWI1ZWYtMjQzN2I4NmE0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQQnlPiPhaiySPvqFS/jLY0ydm77Iyc2T8e09WZPI24kHXwa2f8/+qa V09xUilj4xoUWTwCUVfQgOko5jBtHiOMd7LGGT5IaEna7EdK/FBZSYFNUjiFtCLP 8cyf+KWSL5eD2lAycZvcmpMeFGE/mMbccWOfKrloSwfVfMOkLFKCfoPeqcpcA+pD ucMkEWVtUlkOMu1+uh+YJl3MQxk71ObnF+k7YVzwsKaXYy/cT3zWQh5IAMzMQUqq CtihvD9HbggqCFShc1HqIrp6iK7EW0qV3nWnYKotq+e+RGv7GdLplVsqKYTfu2NW qfWKtSOFYAxCMCfNTZ2to5WfRNiJLA4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:12:24 2025 by rpki-client