$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa File: 3f3c30a3-734f-32db-96eb-b987d5448e8f.roa (raw, json) Hash identifier: ywXQwA8mVVvnXDP7aB8gR+MOqY+2e+VOKBz77uxbIhQ= Subject key identifier: 58:D9:9A:36:8A:B7:FC:82:0C:0C:23:A6:EA:23:89:14:58:E7:A2:C2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853D231CF47F91B50F0280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 72.88.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3d:23:1c:f4:7f:91:b5:0f:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d6afe804-dee5-4f56-b92e-cf931be44e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:5c:f4:0a:b5:00:a1:d9:49:90:63:6a:7a: 6b:42:64:df:34:6d:b8:e7:89:ef:66:10:40:09:4d: 1c:72:84:db:79:60:14:a0:ba:75:85:99:d5:96:ab: 3c:4b:4b:85:00:f7:69:6f:81:21:3d:91:90:12:8f: b3:ed:8b:12:92:b5:e7:01:f6:19:be:ba:e0:81:3d: 61:d3:5c:c5:ec:86:7b:29:3b:cf:8d:70:fc:1a:f3: d0:27:f0:ae:77:f1:56:02:6c:e1:0d:b0:e6:b9:27: c5:76:29:34:41:53:36:a7:82:03:63:56:f0:be:99: af:0e:fa:c0:0b:2c:8f:d5:95:24:75:92:43:54:14: 24:b2:79:fd:48:2d:20:bb:1f:5b:a7:76:e7:06:e8: 58:65:fb:6c:bd:fb:61:14:cc:68:d8:48:73:32:12: e7:93:64:b2:63:6e:58:8a:da:61:3f:40:b7:68:d1: 73:40:ef:56:13:a1:84:a6:93:e5:18:e8:4b:64:db: 5d:39:05:66:f7:b6:f9:11:a1:ff:1b:d2:50:6f:b8: 93:d6:7c:54:f0:5c:bf:49:2a:60:02:2e:f5:9d:c3: d6:c4:86:5b:3b:4f:35:ab:a9:48:ac:9e:82:6c:48: 1b:c8:66:0e:ca:2c:46:7e:3e:5a:9c:27:86:17:c8: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:9A:36:8A:B7:FC:82:0C:0C:23:A6:EA:23:89:14:58:E7:A2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.88.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:10:6a:69:25:36:7a:f9:d9:75:90:f4:7c:cb:48:d7:91:e1: 7c:7c:da:1d:4d:9b:e4:15:ff:9c:eb:31:55:c7:6b:3d:43:25: a2:4b:d6:eb:7e:7a:5c:03:1b:35:dc:02:38:9e:ef:3a:7f:fa: 00:a1:1e:25:25:64:18:d6:d5:1f:90:3e:c2:71:fa:6e:da:b8: b6:50:e1:e6:bd:44:97:0e:75:81:6a:73:2a:b6:34:b2:c7:80: ae:03:fd:df:67:b7:63:eb:0b:53:10:d3:ea:71:8a:fb:5e:42: d1:d1:ca:aa:6f:87:c4:47:da:cd:e0:8a:2a:8b:d8:4f:bc:c7: 23:60:cd:bc:8a:65:f7:8c:4b:db:52:5f:b4:7e:74:13:a1:ba: 31:48:e2:3c:19:b9:1c:94:7b:ad:af:dc:78:62:2a:29:de:ed: 8b:3b:38:b4:3c:56:1a:ee:69:43:19:f6:28:dd:dc:bf:80:21: 05:f9:8b:87:3f:f8:e2:68:d0:61:a1:74:2b:82:99:7a:17:48: fd:33:77:f8:29:74:fa:b0:72:f4:e1:d1:5f:fe:b8:c8:13:5d: 5f:69:38:c3:e6:06:97:b0:bd:61:7a:e5:09:ae:2b:a4:1c:d2: 58:63:d4:43:4b:40:1f:60:d1:04:9e:8a:a8:b3:ab:77:7d:73: ec:9f:e0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhT0jHPR/kbUPAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDZhZmU4MDQtZGVlNS00ZjU2LWI5MmUtY2Y5MzFiZTQ0ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulpc9Aq1AKHZSZBjanprQmTfNG2454nvZhBA CU0ccoTbeWAUoLp1hZnVlqs8S0uFAPdpb4EhPZGQEo+z7YsSkrXnAfYZvrrggT1h 01zF7IZ7KTvPjXD8GvPQJ/Cud/FWAmzhDbDmuSfFdik0QVM2p4IDY1bwvpmvDvrA CyyP1ZUkdZJDVBQksnn9SC0gux9bp3bnBuhYZftsvfthFMxo2EhzMhLnk2SyY25Y itphP0C3aNFzQO9WE6GEppPlGOhLZNtdOQVm97b5EaH/G9JQb7iT1nxU8Fy/SSpg Ai71ncPWxIZbO081q6lIrJ6CbEgbyGYOyixGfj5anCeGF8g2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjZmjaKt/yCDAwjpuojiRRY56LCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2YzYzMwYTMtNzM0Zi0z MmRiLTk2ZWItYjk4N2Q1NDQ4ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMQamklNnr52XWQ9HzLSNeR4Xx82h1Nm+QV/5zrMVXHaz1DJaJL1ut+ elwDGzXcAjie7zp/+gChHiUlZBjW1R+QPsJx+m7auLZQ4ea9RJcOdYFqcyq2NLLH gK4D/d9nt2PrC1MQ0+pxivteQtHRyqpvh8RH2s3giiqL2E+8xyNgzbyKZfeMS9tS X7R+dBOhujFI4jwZuRyUe62v3HhiKine7Ys7OLQ8VhruaUMZ9ijd3L+AIQX5i4c/ +OJo0GGhdCuCmXoXSP0zd/gpdPqwcvTh0V/+uMgTXV9pOMPmBpewvWF65QmuK6Qc 0lhj1ENLQB9g0QSeiqizq3d9c+yf4Bc= -----END CERTIFICATE-----Generated at Tue Jun 17 05:44:54 2025 by rpki-client