$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40b4614e-698b-38aa-83ad-5365e1f87f31.roa File: 40b4614e-698b-38aa-83ad-5365e1f87f31.roa (raw, json) Hash identifier: 5LHA4MhU24MQYET4KNTU0ibkRdDtty0gQZpB0l7AHEQ= Subject key identifier: A5:EB:3A:7D:FE:E7:C7:2D:20:07:C6:8F:DE:7C:98:E6:EF:43:55:8B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F7152A1E23F050E3673B7000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40b4614e-698b-38aa-83ad-5365e1f87f31.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.97.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2a:1e:23:f0:50:e3:67:3b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=e91bf7f9-869e-4649-b7e0-b48c6367f66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:4f:44:5a:e2:a0:aa:29:b6:71:f7:0a:b7: 3f:85:e1:2f:17:ab:0b:0e:d6:c2:50:61:86:74:6c: 60:54:85:53:ae:76:21:2c:21:db:0b:37:a0:80:49: 46:ec:3c:c1:b3:f8:e1:02:64:8b:65:72:7f:13:76: 76:a2:e9:53:0a:d1:8d:bc:1d:b9:91:fe:61:00:89: 34:35:db:6e:8b:4b:13:c6:d1:21:54:98:44:f6:c2: 79:3b:de:4e:b9:74:58:51:97:4a:bb:2d:31:0f:66: b4:ad:04:f0:eb:ea:9b:d4:e4:09:e4:ad:72:10:dc: 3f:80:8d:8e:ac:8d:ab:70:b2:b0:53:9c:b7:23:14: 18:20:0a:b8:fa:62:d0:50:13:54:6a:60:7d:00:f5: 3a:08:a4:68:f7:49:b5:c2:4d:12:1a:a7:75:d5:07: d8:e3:37:3e:ec:90:eb:11:7b:3d:68:f6:00:47:13: 3f:c3:d3:06:52:5b:bd:d6:83:92:45:75:42:c2:13: 3b:67:f9:45:a7:9e:3a:cd:63:91:d1:95:69:5a:50: 30:ca:02:79:98:4c:f9:25:a8:be:22:d7:9c:55:df: e9:ea:09:37:80:83:56:b9:66:4d:a0:b6:1a:da:76: 13:df:06:f7:5f:5f:91:f1:a7:d0:5d:05:f8:8b:20: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EB:3A:7D:FE:E7:C7:2D:20:07:C6:8F:DE:7C:98:E6:EF:43:55:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40b4614e-698b-38aa-83ad-5365e1f87f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1c:9d:b2:84:87:49:9d:08:13:9e:d3:db:e4:5a:e3:d4:8f: 8f:48:d3:36:1d:ca:90:04:69:fb:3c:ef:10:8d:89:9c:3b:b8: a6:6d:a6:51:c2:0f:4a:42:81:32:54:8d:d8:7d:02:ad:78:84: c1:c1:90:67:37:d0:ba:a8:fa:a8:0f:ca:64:a6:b8:b2:64:d6: bb:b1:5a:96:0d:c1:b4:6e:2b:c1:5f:98:a2:6b:f8:e1:54:fc: bb:e5:8d:92:c8:4d:90:a3:0f:cf:35:d8:ad:34:ac:58:a0:3b: 11:67:ff:51:0e:28:2c:76:02:e7:46:76:0e:02:69:f5:15:c5: 3b:24:a4:72:9a:63:ed:d5:c9:0d:7c:09:ab:94:f9:77:38:c4: 6f:2e:ab:69:7f:9c:88:f3:29:fa:f1:bf:7b:ef:71:fb:75:0c: 08:b3:04:bf:d5:77:fe:26:58:0e:8f:a0:0b:f5:31:63:e5:9f: 0c:66:52:6c:28:5d:31:a9:af:7f:27:b4:de:44:11:f2:6b:16: 2f:1e:8b:f1:98:55:92:f6:e6:6c:7e:53:42:8c:cb:58:32:f6: 03:18:3e:4d:f4:94:c3:21:b6:b4:e5:18:46:aa:cd:dd:87:6e: 67:d9:13:06:2a:c1:1b:e1:b2:bc:d7:39:ab:ba:98:34:94:8d: 90:e6:54:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSoeI/BQ42c7cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTkxYmY3ZjktODY5ZS00NjQ5LWI3ZTAtYjQ4YzYzNjdmNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHdPRFrioKoptnH3Crc/heEvF6sLDtbCUGGG dGxgVIVTrnYhLCHbCzeggElG7DzBs/jhAmSLZXJ/E3Z2oulTCtGNvB25kf5hAIk0 Ndtui0sTxtEhVJhE9sJ5O95OuXRYUZdKuy0xD2a0rQTw6+qb1OQJ5K1yENw/gI2O rI2rcLKwU5y3IxQYIAq4+mLQUBNUamB9APU6CKRo90m1wk0SGqd11QfY4zc+7JDr EXs9aPYARxM/w9MGUlu91oOSRXVCwhM7Z/lFp546zWOR0ZVpWlAwygJ5mEz5Jai+ ItecVd/p6gk3gINWuWZNoLYa2nYT3wb3X1+R8afQXQX4iyDHYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXrOn3+58ctIAfGj958mObvQ1WLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDBiNDYxNGUtNjk4Yi0z OGFhLTgzYWQtNTM2NWUxZjg3ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4cnbKEh0mdCBOe09vkWuPUj49I0zYdypAEafs87xCNiZw7uKZtplHC D0pCgTJUjdh9Aq14hMHBkGc30Lqo+qgPymSmuLJk1ruxWpYNwbRuK8FfmKJr+OFU /LvljZLITZCjD8812K00rFigOxFn/1EOKCx2AudGdg4CafUVxTskpHKaY+3VyQ18 CauU+Xc4xG8uq2l/nIjzKfrxv3vvcft1DAizBL/Vd/4mWA6PoAv1MWPlnwxmUmwo XTGpr38ntN5EEfJrFi8ei/GYVZL25mx+U0KMy1gy9gMYPk30lMMhtrTlGEaqzd2H bmfZEwYqwRvhsrzXOau6mDSUjZDmVEk= -----END CERTIFICATE-----Generated at Tue Jun 17 12:23:03 2025 by rpki-client