$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3217339a-7198-33c0-aaac-e3b9f7fe82ae.roa File: 3217339a-7198-33c0-aaac-e3b9f7fe82ae.roa (raw, json) Hash identifier: Q2bKbnvbgvryNGZ3Y2YPDVJj47vzsKpSAlZPlK4AN78= Subject key identifier: B7:D9:E4:4B:70:4F:8D:AE:16:70:76:9D:64:A1:20:E7:6A:FF:31:B7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A1E2AAE3B96501D476E05E280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3217339a-7198-33c0-aaac-e3b9f7fe82ae.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.108.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:ae:3b:96:50:1d:47:6e:05:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=3e85085b-ab66-4959-91e9-d63158ecba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:7f:b6:60:a7:90:f1:89:31:f6:55:83:ba: 13:92:08:f8:ad:39:49:c9:00:af:91:9e:33:0e:6c: de:32:d8:32:90:f5:07:68:34:ff:2f:fc:d0:5f:77: c9:42:53:00:0d:c8:1a:90:c1:40:b0:42:fb:5b:3a: 7d:0b:12:73:62:d9:af:ab:9c:82:f2:80:0c:a1:6c: 5e:de:f4:e1:13:b5:11:08:62:5c:a8:17:16:4e:29: 33:2a:1c:02:35:9c:2d:09:00:02:e6:63:ed:69:25: d8:c5:b3:fc:70:9b:79:fe:70:fc:e8:41:55:30:33: 7d:7a:40:65:1a:4a:17:d6:3c:60:11:8b:b5:87:45: 87:e6:c2:3c:57:a5:bd:e6:51:eb:b6:f2:98:5d:9f: cf:cf:a3:bd:ac:94:1b:58:d2:1f:13:da:97:34:66: bf:e5:90:b5:a8:6a:02:b6:c6:82:ba:c7:9a:00:8d: 6f:34:a2:be:ff:a6:0c:a0:9e:54:01:f4:b9:e1:f8: 15:2e:83:29:13:71:de:bd:6f:0b:67:1f:6a:61:a2: a9:b7:36:95:cb:66:82:a1:6b:9f:e5:fc:50:88:f9: 9a:a8:d2:d2:68:51:2a:27:17:48:cc:d1:50:92:8a: f2:d0:47:92:43:ca:8d:1e:cd:77:ef:d9:22:23:58: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D9:E4:4B:70:4F:8D:AE:16:70:76:9D:64:A1:20:E7:6A:FF:31:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3217339a-7198-33c0-aaac-e3b9f7fe82ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ed:e3:3a:3c:95:9b:e5:80:2a:53:1b:8f:bb:8f:25:0a:2a: d0:01:f5:37:18:54:0b:9d:7b:e3:27:77:50:a8:8b:e7:9f:3f: d7:cd:34:b2:04:5f:aa:95:d9:c5:c4:4c:fd:22:cf:f4:37:95: 8c:35:e9:28:83:07:23:52:40:09:d7:02:c4:f9:8b:dd:a1:d5: bf:db:36:45:3d:73:e2:42:30:d5:1a:75:45:37:cb:9a:93:0f: a7:8f:74:64:d4:16:d7:37:37:dd:f8:13:8a:36:1a:36:d2:89: 07:fc:a1:50:65:10:5d:f3:6d:fc:81:66:25:b4:99:ed:c5:97: 4e:81:89:7c:e3:1b:a4:46:bd:99:45:ac:07:ca:0d:9f:0d:6e: 49:16:21:e5:0a:f9:b4:5f:fc:ae:ec:18:f6:15:41:df:5f:3e: 68:84:08:1b:9f:09:ee:c7:c2:6a:98:22:b2:7b:83:1b:11:ca: 4c:39:d4:fc:18:c3:2b:95:40:76:5b:fa:9a:d9:19:3c:1d:a1: dc:5a:03:c1:1a:00:55:b4:46:06:d3:3a:09:11:e1:7e:27:11: 17:bc:42:67:49:c9:f4:9d:f4:57:ae:4e:dc:9f:55:ff:f7:2b: 42:3b:00:72:5d:b6:6f:50:74:dc:b1:a2:ae:71:79:f0:3f:0f: 1a:de:67:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKq47llAdR24F4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk M2U4NTA4NWItYWI2Ni00OTU5LTkxZTktZDYzMTU4ZWNiYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQN/tmCnkPGJMfZVg7oTkgj4rTlJyQCvkZ4z DmzeMtgykPUHaDT/L/zQX3fJQlMADcgakMFAsEL7Wzp9CxJzYtmvq5yC8oAMoWxe 3vThE7URCGJcqBcWTikzKhwCNZwtCQAC5mPtaSXYxbP8cJt5/nD86EFVMDN9ekBl GkoX1jxgEYu1h0WH5sI8V6W95lHrtvKYXZ/Pz6O9rJQbWNIfE9qXNGa/5ZC1qGoC tsaCuseaAI1vNKK+/6YMoJ5UAfS54fgVLoMpE3HevW8LZx9qYaKptzaVy2aCoWuf 5fxQiPmaqNLSaFEqJxdIzNFQkory0EeSQ8qNHs1379kiI1gsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfZ5EtwT42uFnB2nWShIOdq/zG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzIxNzMzOWEtNzE5OC0z M2MwLWFhYWMtZTNiOWY3ZmU4MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDt4zo8lZvlgCpTG4+7jyUKKtAB9TcYVAude+Mnd1Coi+efP9fNNLIE X6qV2cXETP0iz/Q3lYw16SiDByNSQAnXAsT5i92h1b/bNkU9c+JCMNUadUU3y5qT D6ePdGTUFtc3N934E4o2GjbSiQf8oVBlEF3zbfyBZiW0me3Fl06BiXzjG6RGvZlF rAfKDZ8NbkkWIeUK+bRf/K7sGPYVQd9fPmiECBufCe7HwmqYIrJ7gxsRykw51PwY wyuVQHZb+prZGTwdodxaA8EaAFW0RgbTOgkR4X4nERe8QmdJyfSd9FeuTtyfVf/3 K0I7AHJdtm9QdNyxoq5xefA/DxreZys= -----END CERTIFICATE-----Generated at Tue Jun 17 10:21:13 2025 by rpki-client