$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa File: 45f3a6e0-3794-33ea-be25-eacad7465f67.roa (raw, json) Hash identifier: afMRS0PNoo1Wv7B8GvuEtgHzFN+GkmSSEn0LQkuOC1E= Subject key identifier: 74:CB:A3:AF:3A:72:46:70:4E:B2:0D:0E:99:FD:D8:30:D7:76:D4:2A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F7152AA2F9D66E5EFE52E580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.96.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2a:a2:f9:d6:6e:5e:fe:52:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=0ca009b8-2579-4a33-ad04-df59631ee91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:42:0c:d4:5f:4f:aa:c1:1a:46:da:27:cf: c0:96:36:37:02:e3:7f:4c:35:03:b6:38:14:8e:21: 3f:db:2e:a2:08:58:b8:e5:51:1a:15:28:99:11:ed: d0:6a:c3:8e:48:6b:14:40:ec:ac:34:08:92:57:f4: 0b:bd:cd:2f:b5:c3:f5:b2:a8:bf:ba:28:ae:86:32: 8c:10:da:a5:86:04:2a:f5:44:5c:fd:87:83:db:b2: 53:34:2a:bc:78:73:96:17:43:1c:52:71:98:3f:8e: a8:16:0d:07:b3:0e:2d:68:c7:38:bd:32:94:70:82: 33:1b:3a:91:69:89:c0:cb:d4:e5:09:a4:e6:cc:22: fd:e2:81:e7:3f:b2:8e:fd:a2:4f:44:4e:23:9d:66: 57:01:87:f0:bf:b5:93:d5:bf:46:d5:05:a9:70:a0: 04:ee:96:39:73:c2:6a:be:54:28:e1:ec:a7:52:4a: 62:97:62:cb:bb:b4:64:6f:9a:2d:a3:f2:f5:39:a6: e4:ee:37:c4:0e:00:a3:9b:38:84:60:ee:e5:86:95: e0:59:8b:6f:41:a3:7a:c1:dc:8c:3c:c4:3e:58:58: b2:9a:00:53:bb:01:26:19:1d:4f:8f:b3:c0:d5:af: 73:69:93:39:af:eb:80:03:0c:be:ed:39:89:0e:42: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CB:A3:AF:3A:72:46:70:4E:B2:0D:0E:99:FD:D8:30:D7:76:D4:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bf:68:86:f4:b5:9c:f4:e2:dd:e7:e0:63:05:75:9d:b8:df: 62:66:95:79:fd:5d:79:4a:dd:95:5e:6a:b9:f2:04:d5:b4:fb: a8:aa:75:b0:84:f3:c8:d7:5d:61:2c:b5:fc:a4:c6:e6:87:c2: d6:e4:04:9d:a2:21:e8:9e:d0:73:b4:a6:2f:23:57:78:20:f8: cc:0f:42:05:27:71:0f:a6:30:0f:60:8e:a0:3e:53:10:e0:e8: 11:ef:62:b1:0d:36:52:cc:b1:10:7c:97:b2:4e:16:05:42:a0: 24:db:a2:ec:e4:5e:5c:ef:8b:f8:ac:f6:51:ad:41:1d:9d:1b: 45:d1:b5:3a:ec:f4:2d:9d:13:11:64:6f:21:fd:98:36:d2:1a: 51:95:29:01:60:e6:45:0f:e2:dd:ea:db:c6:78:b3:b5:13:6d: 3e:15:54:55:2c:32:43:0f:6c:75:9e:db:8e:0e:da:06:ed:81: 35:90:9c:ed:a3:33:01:0b:f1:42:30:cd:35:3c:58:6e:19:45: 25:9e:ee:0e:8a:11:12:44:2d:ea:86:19:a3:1c:38:b9:61:6c: 6f:5e:09:ae:db:9d:48:c2:52:72:a6:00:b1:36:ee:ad:cd:c4: 39:e7:3f:88:8f:b0:25:84:0c:c3:f6:9a:bd:25:b5:75:03:24: 78:3d:77:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSqi+dZuXv5S5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MGNhMDA5YjgtMjU3OS00YTMzLWFkMDQtZGY1OTYzMWVlOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipxCDNRfT6rBGkbaJ8/AljY3AuN/TDUDtjgU jiE/2y6iCFi45VEaFSiZEe3QasOOSGsUQOysNAiSV/QLvc0vtcP1sqi/uiiuhjKM ENqlhgQq9URc/YeD27JTNCq8eHOWF0McUnGYP46oFg0Hsw4taMc4vTKUcIIzGzqR aYnAy9TlCaTmzCL94oHnP7KO/aJPRE4jnWZXAYfwv7WT1b9G1QWpcKAE7pY5c8Jq vlQo4eynUkpil2LLu7Rkb5oto/L1Oabk7jfEDgCjmziEYO7lhpXgWYtvQaN6wdyM PMQ+WFiymgBTuwEmGR1Pj7PA1a9zaZM5r+uAAwy+7TmJDkJP0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTLo686ckZwTrINDpn92DDXdtQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDVmM2E2ZTAtMzc5NC0z M2VhLWJlMjUtZWFjYWQ3NDY1ZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa/aIb0tZz04t3n4GMFdZ2432JmlXn9XXlK3ZVearnyBNW0+6iqdbCE 88jXXWEstfykxuaHwtbkBJ2iIeie0HO0pi8jV3gg+MwPQgUncQ+mMA9gjqA+UxDg 6BHvYrENNlLMsRB8l7JOFgVCoCTbouzkXlzvi/is9lGtQR2dG0XRtTrs9C2dExFk byH9mDbSGlGVKQFg5kUP4t3q28Z4s7UTbT4VVFUsMkMPbHWe244O2gbtgTWQnO2j MwEL8UIwzTU8WG4ZRSWe7g6KERJELeqGGaMcOLlhbG9eCa7bnUjCUnKmALE27q3N xDnnP4iPsCWEDMP2mr0ltXUDJHg9d4Q= -----END CERTIFICATE-----Generated at Thu Jun 19 11:08:41 2025 by rpki-client