$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa File: 63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa (raw, json) Hash identifier: tx3VQvVtht8/sgkOTsrce7Ns16wF4ImOa2F06ZS46sw= Subject key identifier: 0E:79:2B:4F:9D:B9:D4:A3:64:08:4F:45:C3:9C:74:9F:BD:9B:41:03 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285848C4584F5A2F9DAE78180E6050 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa Signing time: Tue 04 Feb 2025 04:03:15 +0000 ROA not before: Tue 04 Feb 2025 04:03:15 +0000 ROA not after: Mon 05 May 2025 03:03:15 +0000 asID: 14813 IP address blocks: 72.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:58:4f:5a:2f:9d:ae:78:18:0e:60:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Feb 4 04:03:15 2025 GMT Not After : May 5 03:03:15 2025 GMT Subject: CN=3c3fc7bb-0274-42b2-9ffa-b2e396696680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:f6:aa:0f:6b:32:8d:66:f1:43:4f:a2:1e: 9b:98:1a:25:01:3c:32:27:e4:1c:c5:20:52:ff:f5: 49:df:22:e6:b8:1f:35:2e:c5:5d:ee:48:a8:c7:83: 7b:9c:68:ee:5f:c0:34:a3:da:43:9a:4b:bf:d2:13: 14:df:5f:19:d2:99:a3:99:3c:60:7c:c2:f2:b7:bd: f2:d7:a5:10:35:e4:95:18:01:3e:c3:4f:2e:4d:49: 6e:89:d4:38:cb:ff:03:b3:31:f2:9f:f2:0b:9f:e4: ab:cd:37:21:b0:93:52:17:6c:38:c2:dd:5f:4f:2f: df:75:54:64:3e:3e:f6:e3:cd:37:26:96:16:53:35: 41:aa:6b:9c:bd:b3:39:4c:23:69:c5:33:3b:7a:c0: 89:9b:92:26:6a:eb:0f:28:e9:fb:1b:32:3c:82:06: 3b:7d:70:1d:7c:67:db:c7:a7:4d:8d:6c:d7:23:1f: e8:1b:cd:8d:91:83:5c:ce:13:e3:70:c5:43:62:37: fb:1b:7d:f8:b5:89:c7:07:c6:62:10:66:dd:e5:81: 35:e1:3f:06:c8:14:79:3c:08:45:3e:31:f4:14:22: 89:89:6e:c5:d1:44:a4:37:33:04:15:82:7c:98:3c: 6f:53:55:a7:ea:86:1c:23:94:62:17:07:f8:02:f0: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:79:2B:4F:9D:B9:D4:A3:64:08:4F:45:C3:9C:74:9F:BD:9B:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:cb:60:72:ac:0f:7a:eb:08:9b:95:ca:54:3c:44:bf:74:c3: 76:16:2b:9b:f0:fb:48:b1:12:b8:6b:de:41:b2:5b:fb:10:af: 01:30:8a:af:83:a8:68:45:4e:12:4d:ca:5f:57:cb:f3:69:80: cb:4f:75:71:00:28:99:e4:73:0f:f0:3b:b2:56:87:e1:2e:2d: 5e:d0:be:3d:a1:68:7c:13:51:1d:71:bf:4f:de:7d:6a:81:25: 49:5a:f5:98:f8:5a:b5:5e:44:4a:be:32:cf:e9:ee:df:d0:5f: f3:e2:79:30:8a:63:a1:97:2b:c7:e2:41:e6:40:31:f4:4d:68: f4:a9:2b:7e:52:0b:ce:9b:63:88:95:f7:87:9e:a7:ee:8f:67: ec:71:67:ae:bc:90:3f:e1:30:c7:7e:ef:23:b1:2e:12:ea:eb: 48:6f:0a:72:79:50:ce:55:45:12:2d:02:27:09:e0:ec:8e:5e: 52:7f:55:af:4d:fd:43:b2:7e:04:6c:28:39:0d:e2:19:f5:1a: c1:e1:8e:d0:db:6b:11:2f:01:68:6c:1a:cd:88:62:86:4c:09: d0:61:19:98:61:a8:d5:f9:b2:7a:7b:30:d2:de:6f:fd:41:c1: 56:dd:ba:86:89:21:48:5f:1c:a1:14:1b:64:1f:fe:8c:dc:c9: b8:0c:6b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEWE9aL52ueBgOYFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDIwNDA0MDMxNVoXDTI1MDUwNTAzMDMxNVowLzEtMCsGA1UEAxMk M2MzZmM3YmItMDI3NC00MmIyLTlmZmEtYjJlMzk2Njk2NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoH2qg9rMo1m8UNPoh6bmBolATwyJ+QcxSBS //VJ3yLmuB81LsVd7kiox4N7nGjuX8A0o9pDmku/0hMU318Z0pmjmTxgfMLyt73y 16UQNeSVGAE+w08uTUluidQ4y/8DszHyn/ILn+SrzTchsJNSF2w4wt1fTy/fdVRk Pj724803JpYWUzVBqmucvbM5TCNpxTM7esCJm5ImausPKOn7GzI8ggY7fXAdfGfb x6dNjWzXIx/oG82NkYNczhPjcMVDYjf7G334tYnHB8ZiEGbd5YE14T8GyBR5PAhF PjH0FCKJiW7F0USkNzMEFYJ8mDxvU1Wn6oYcI5RiFwf4AvDpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA55K0+dudSjZAhPRcOcdJ+9m0EDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNjNlNWYxZTQtMzdlNi0z Y2EyLTliYTYtNmI4NmRiM2NhNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/LYHKsD3rrCJuVylQ8RL90w3YWK5vw+0ixErhr3kGyW/sQrwEwiq+D qGhFThJNyl9Xy/NpgMtPdXEAKJnkcw/wO7JWh+EuLV7Qvj2haHwTUR1xv0/efWqB JUla9Zj4WrVeREq+Ms/p7t/QX/PieTCKY6GXK8fiQeZAMfRNaPSpK35SC86bY4iV 94eep+6PZ+xxZ668kD/hMMd+7yOxLhLq60hvCnJ5UM5VRRItAicJ4OyOXlJ/Va9N /UOyfgRsKDkN4hn1GsHhjtDbaxEvAWhsGs2IYoZMCdBhGZhhqNX5snp7MNLeb/1B wVbduoaJIUhfHKEUG2Qf/ozcybgMa74= -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:45 2025 by rpki-client