$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa File: 01c00e7f-6f75-39cf-8a6f-0e53566512de.roa (raw, json) Hash identifier: M/xrqpdE+VPlkamjZ9x6t4x/f7ck3ULPSiwRSHsgVA0= Subject key identifier: 09:F4:F0:1E:A3:A2:3E:92:1D:17:BD:81:09:5B:3B:62:56:3E:5C:F4 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285848C45CF1F9C5F4BA408A6B0880 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa Signing time: Tue 04 Feb 2025 04:12:36 +0000 ROA not before: Tue 04 Feb 2025 04:12:36 +0000 ROA not after: Mon 05 May 2025 03:12:36 +0000 asID: 14813 IP address blocks: 72.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:5c:f1:f9:c5:f4:ba:40:8a:6b:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Feb 4 04:12:36 2025 GMT Not After : May 5 03:12:36 2025 GMT Subject: CN=50340e8f-404a-4c59-88f1-5bdf3094a866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:99:3d:c7:83:84:9d:ff:47:c9:a7:34:69: f3:4c:c9:08:80:f9:64:03:12:2c:78:ba:f3:92:f7: ce:9f:2d:8b:ab:76:a2:c7:22:1f:09:d4:83:6d:89: 7d:4a:cb:b9:a2:6c:0a:5a:26:01:10:c2:79:69:fb: 9a:ad:59:49:d2:1b:4e:e7:b3:b5:1f:9c:16:d3:3f: c0:da:4b:17:ab:57:26:3e:f2:7d:09:f1:da:53:4c: 66:4b:fb:ac:57:ba:df:ae:47:31:b7:12:0f:29:98: 5d:7a:cd:ed:1a:14:14:5a:b7:d9:31:0d:23:75:0e: e8:29:1e:17:30:e2:8c:d5:c2:b7:62:59:94:d6:85: a3:98:72:45:8e:cf:21:b0:a1:19:bb:1c:a4:06:d1: b4:95:5a:fd:61:9c:87:64:d2:30:9d:1b:2a:dc:af: 9c:18:39:f7:b6:d0:ce:5f:81:94:7c:be:c1:57:ff: e2:03:1c:45:d0:25:e3:65:81:d7:f1:e4:59:6f:9d: 77:e2:72:65:12:70:1c:ab:93:ee:cf:36:7c:9c:79: ee:5d:b3:8d:5b:6e:c7:47:45:02:14:a9:8e:16:19: 00:62:04:64:30:a0:1d:1b:55:62:fa:ac:85:d1:d0: 1e:50:11:45:27:06:29:7a:5c:1e:f1:29:2c:82:49: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:F0:1E:A3:A2:3E:92:1D:17:BD:81:09:5B:3B:62:56:3E:5C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:66:dc:2e:c5:5f:61:68:6c:40:25:8b:d1:ee:f7:aa:6a:df: f1:f1:18:dc:67:b6:c6:30:93:1f:2b:3e:c9:42:b6:fc:3c:c4: 2f:c7:76:83:8e:a4:4f:84:e0:eb:f3:f6:12:5b:fd:c0:a9:ad: b0:9c:59:be:1d:aa:6e:ad:55:a9:5d:33:5e:2c:3f:17:8c:07: 10:fd:5b:be:ce:fa:cf:f5:42:4f:c5:ec:6f:24:cf:d0:96:64: b9:f6:77:04:81:6a:cb:44:fd:74:74:dd:fa:39:65:cb:7d:13: 55:2a:c6:fc:5e:d6:98:b7:1c:74:dc:43:78:da:76:a8:08:d2: f5:ec:0b:17:e2:52:29:67:af:45:39:1d:3c:ff:43:9d:06:43: c1:28:c9:31:de:aa:f6:8b:d6:7e:8f:4d:fe:08:c4:ea:38:75: d7:68:4a:aa:51:73:02:68:35:5e:f1:a6:3e:f2:f2:b4:57:74: 5a:25:5b:67:70:d1:58:b0:b2:55:97:c8:d2:8a:13:0b:a3:23: 39:04:58:8d:3f:e9:1d:8c:69:12:92:41:04:2a:cd:62:fc:b3: ac:ac:2c:3c:99:fe:5a:98:1b:73:61:0d:8e:6c:fe:0c:37:ee: b1:4f:72:30:93:97:2d:f0:35:b0:be:a3:18:8f:4f:47:4d:18: ec:7f:6f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEXPH5xfS6QIprCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDIwNDA0MTIzNloXDTI1MDUwNTAzMTIzNlowLzEtMCsGA1UEAxMk NTAzNDBlOGYtNDA0YS00YzU5LTg4ZjEtNWJkZjMwOTRhODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsqZPceDhJ3/R8mnNGnzTMkIgPlkAxIseLrz kvfOny2Lq3aixyIfCdSDbYl9Ssu5omwKWiYBEMJ5afuarVlJ0htO57O1H5wW0z/A 2ksXq1cmPvJ9CfHaU0xmS/usV7rfrkcxtxIPKZhdes3tGhQUWrfZMQ0jdQ7oKR4X MOKM1cK3YlmU1oWjmHJFjs8hsKEZuxykBtG0lVr9YZyHZNIwnRsq3K+cGDn3ttDO X4GUfL7BV//iAxxF0CXjZYHX8eRZb5134nJlEnAcq5PuzzZ8nHnuXbONW27HR0UC FKmOFhkAYgRkMKAdG1Vi+qyF0dAeUBFFJwYpelwe8Sksgkm0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn08B6joj6SHRe9gQlbO2JWPlz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDFjMDBlN2YtNmY3NS0z OWNmLThhNmYtMGU1MzU2NjUxMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZm3C7FX2FobEAli9Hu96pq3/HxGNxntsYwkx8rPslCtvw8xC/HdoOO pE+E4Ovz9hJb/cCprbCcWb4dqm6tValdM14sPxeMBxD9W77O+s/1Qk/F7G8kz9CW ZLn2dwSBastE/XR03fo5Zct9E1Uqxvxe1pi3HHTcQ3jadqgI0vXsCxfiUilnr0U5 HTz/Q50GQ8EoyTHeqvaL1n6PTf4IxOo4dddoSqpRcwJoNV7xpj7y8rRXdFolW2dw 0ViwslWXyNKKEwujIzkEWI0/6R2MaRKSQQQqzWL8s6ysLDyZ/lqYG3NhDY5s/gw3 7rFPcjCTly3wNbC+oxiPT0dNGOx/b3I= -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:42 2025 by rpki-client