$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa File: ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa (raw, json) Hash identifier: EZFimEKCTHI3ARUZ/2rgvh1wKhzARX8dWIMnSx0BEFs= Subject key identifier: 81:DE:31:C7:49:23:31:4F:E2:61:D9:1A:87:CC:C8:07:7D:7B:9E:D7 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285848D520B743113CB494ED983980 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa Signing time: Mon 10 Feb 2025 04:19:59 +0000 ROA not before: Mon 10 Feb 2025 04:19:59 +0000 ROA not after: Sun 11 May 2025 03:19:59 +0000 asID: 151872 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d5:20:b7:43:11:3c:b4:94:ed:98:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Feb 10 04:19:59 2025 GMT Not After : May 11 03:19:59 2025 GMT Subject: CN=745495a2-b793-4606-b796-1d7e226eabcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:00:ba:fc:93:ab:34:c3:f5:68:2e:ca:43: 98:8a:7b:e6:e4:9c:a5:9e:bf:c0:a8:f7:ae:46:4b: 14:93:19:67:b7:1d:b4:ac:35:df:66:15:32:19:10: f2:b1:6e:b9:4c:64:07:8e:f8:15:c8:d6:fd:f3:6b: e4:a2:04:52:d2:17:6b:df:54:ab:9d:ba:dd:08:aa: 31:1e:55:69:3b:64:e2:c7:39:33:98:11:5a:98:e4: 01:18:30:43:a5:07:01:6b:2a:e3:9e:bf:c4:26:8d: eb:35:60:65:23:23:2e:e0:09:2a:bc:60:0b:f1:b2: c1:60:7a:f6:3a:fb:77:24:4e:4d:69:0d:83:3d:ea: 08:e7:ba:15:e0:0b:97:60:5d:7d:eb:78:17:00:42: 64:f1:2e:37:5c:b7:9d:ff:3e:f4:c5:7a:e5:bb:cf: 0e:48:11:cb:47:cc:72:76:16:2a:10:6d:37:4a:e8: 49:c2:d5:db:7a:67:d2:85:04:c7:14:b4:bf:87:42: 50:30:ac:44:b6:7e:ac:d9:a2:f6:23:cb:fa:4c:3b: dc:17:7f:ce:29:62:89:bc:ff:ca:2e:2b:13:a5:f6: 98:e1:e6:29:ed:1d:c6:04:3c:9f:19:00:eb:ae:7b: c3:f4:c4:b3:33:16:9e:80:5c:ec:cb:34:40:30:b4: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DE:31:C7:49:23:31:4F:E2:61:D9:1A:87:CC:C8:07:7D:7B:9E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:12:dc:62:3b:c5:80:ee:1f:7c:62:9a:44:3b:79:ae:29:06: de:4b:53:ea:fb:b0:d2:92:00:fe:5f:3a:25:5c:5b:0d:89:e8: 3d:e9:37:ec:79:6b:1a:62:fc:e5:50:33:d0:76:aa:6d:2e:6a: 08:da:f4:d8:46:20:1c:6d:2b:74:d6:a5:ee:f9:d8:86:b3:a0: 61:9c:9b:ed:d7:72:79:c9:3d:c0:69:3b:70:5f:ae:c3:fa:78: c9:34:66:d2:05:41:88:1c:62:80:f3:35:90:48:d9:5d:bc:a8: f4:78:a0:a7:27:9d:4a:96:a3:e9:21:74:b8:e2:99:3d:f6:1e: f9:25:37:04:a4:c5:be:dc:eb:0f:21:ec:42:01:e5:bf:be:c6: 60:72:e4:98:44:3a:5e:a0:88:1a:76:22:8e:c3:82:e1:7a:8f: 92:e2:a1:5d:4f:76:f7:92:8b:4c:f3:7d:f2:f6:b7:23:20:92: 8e:7d:ea:70:8e:74:0e:3c:9a:02:fc:af:38:73:84:cc:b0:48: eb:2e:b0:c9:3d:fe:94:eb:bf:e1:f3:21:17:02:79:a8:1a:51: c3:48:78:10:fd:a3:34:40:29:36:4e:14:1c:01:62:c0:40:c3: 84:5d:b0:3c:0c:86:57:e5:e7:90:33:43:d1:65:24:c5:de:92: 8a:4c:b5:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjVILdDETy0lO2YOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDIxMDA0MTk1OVoXDTI1MDUxMTAzMTk1OVowLzEtMCsGA1UEAxMk NzQ1NDk1YTItYjc5My00NjA2LWI3OTYtMWQ3ZTIyNmVhYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN8AuvyTqzTD9WguykOYinvm5Jylnr/AqPeu RksUkxlntx20rDXfZhUyGRDysW65TGQHjvgVyNb982vkogRS0hdr31SrnbrdCKox HlVpO2TixzkzmBFamOQBGDBDpQcBayrjnr/EJo3rNWBlIyMu4AkqvGAL8bLBYHr2 Ovt3JE5NaQ2DPeoI57oV4AuXYF1963gXAEJk8S43XLed/z70xXrlu88OSBHLR8xy dhYqEG03SuhJwtXbemfShQTHFLS/h0JQMKxEtn6s2aL2I8v6TDvcF3/OKWKJvP/K LisTpfaY4eYp7R3GBDyfGQDrrnvD9MSzMxaegFzsyzRAMLTYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHeMcdJIzFP4mHZGofMyAd9e57XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmY0MzAxYTQtNGE0Yi0z MzBhLTlmMDMtZTg2YmM5ZWI0ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcS3GI7xYDuH3ximkQ7ea4pBt5LU+r7sNKSAP5fOiVcWw2J6D3pN+x5 axpi/OVQM9B2qm0uagja9NhGIBxtK3TWpe752IazoGGcm+3XcnnJPcBpO3BfrsP6 eMk0ZtIFQYgcYoDzNZBI2V28qPR4oKcnnUqWo+khdLjimT32HvklNwSkxb7c6w8h 7EIB5b++xmBy5JhEOl6giBp2Io7DguF6j5LioV1PdveSi0zzffL2tyMgko596nCO dA48mgL8rzhzhMywSOsusMk9/pTrv+HzIRcCeagaUcNIeBD9ozRAKTZOFBwBYsBA w4RdsDwMhlfl55AzQ9FlJMXekopMtfg= -----END CERTIFICATE-----Generated at Mon Mar 17 03:53:08 2025 by rpki-client