$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa File: 871ae4b0-a747-399d-90cc-9f91678c7d4e.roa (raw, json) Hash identifier: MqGzKMGuHKQq27xVksrkTuHCpcBWkNcU51Zunx9EKR0= Subject key identifier: 5B:62:74:09:10:2B:D1:04:60:A6:23:C1:72:4B:92:6C:E3:56:B0:16 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F71537182BB568ED4229F080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.96.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:37:18:2b:b5:68:ed:42:29:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=ea76854a-7bbe-44f7-9448-73e59aed5d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:20:d6:4b:d1:a4:a5:6b:bd:bf:80:2f:c2:fd: 3e:1d:11:e9:4d:16:ce:a4:1b:13:34:b4:7c:87:88: 6f:bc:49:16:82:5d:bf:f5:d6:34:0e:f8:f7:7c:8c: 8b:85:a9:88:9f:30:3f:e4:ad:2d:ad:9d:88:e3:94: 9d:5b:0a:e0:84:ef:b7:4f:94:b5:3d:41:12:ab:00: 31:25:ef:4d:14:cf:a3:44:a6:ee:ae:b2:d6:92:e4: 00:a4:20:b1:9a:08:8b:aa:bf:32:81:17:7e:7c:f7: 67:3a:7a:29:fd:2b:9b:d7:10:a4:cc:a9:59:b7:b0: 96:c5:22:f6:3d:54:c9:da:56:b5:cf:73:1b:41:67: 9c:a6:a6:5c:7c:06:0e:fc:3f:cb:09:81:f8:65:d0: 63:37:d3:f2:4b:74:4a:f9:77:f1:74:3e:13:d5:b0: 73:ca:60:53:88:a2:2c:89:d9:2e:e3:2b:5e:23:00: be:e5:55:58:0a:4a:7f:65:67:be:4b:4c:09:33:fd: 3b:96:c8:2f:d1:54:8d:3c:39:90:52:1a:4d:a6:9c: 6b:20:8f:9f:43:e4:aa:cc:5f:bc:cf:f6:2f:0b:18: ef:17:5c:1b:4a:e6:b4:20:ec:39:63:47:8f:11:ec: 40:58:65:bc:6d:4f:12:93:69:0e:ea:f4:78:78:62: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:74:09:10:2B:D1:04:60:A6:23:C1:72:4B:92:6C:E3:56:B0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1b:fa:27:54:8f:f0:58:2c:03:23:8d:bc:a7:92:ab:2e:6a: 08:ed:4f:3b:f5:77:19:cf:5e:c2:f5:5a:43:cd:54:29:fa:9d: 7e:73:80:cd:6e:aa:26:e0:d6:1b:a9:c4:15:72:ee:55:34:89: 5c:44:a7:b3:51:17:57:82:aa:51:48:f4:13:61:4e:de:2c:3a: cb:75:73:5a:14:9d:e3:9d:46:d3:38:19:c8:63:02:5a:48:a3: f1:63:73:04:3b:c0:93:01:bf:fb:62:90:39:41:2c:00:ad:53: 98:c7:eb:c5:d2:04:72:03:09:0b:45:24:91:df:ba:60:4e:3b: bb:d1:5f:d9:53:05:5b:8e:0a:a3:cc:28:e3:81:a8:34:60:f9: ad:27:18:1e:ca:5d:a3:19:f0:5c:3a:c8:2e:60:3d:10:83:9a: f6:1f:4e:b0:e3:c2:d3:f3:5f:e9:23:69:40:06:97:ec:9a:b5: 92:8d:a7:07:65:1d:a9:f4:1e:0f:38:f9:ca:10:e1:df:96:d4: 94:a0:fb:ff:5a:19:e8:e6:4c:ca:c9:6f:18:1b:39:77:8a:4b: 29:9d:89:d6:b5:11:9b:d2:e3:d2:39:2f:de:d8:70:9d:63:3d: de:6c:94:93:01:f3:2d:1a:7f:f6:68:46:a9:69:20:cc:fd:90: 18:42:17:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTcYK7Vo7UIp8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWE3Njg1NGEtN2JiZS00NGY3LTk0NDgtNzNlNTlhZWQ1ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCDWS9GkpWu9v4Avwv0+HRHpTRbOpBsTNLR8 h4hvvEkWgl2/9dY0Dvj3fIyLhamInzA/5K0trZ2I45SdWwrghO+3T5S1PUESqwAx Je9NFM+jRKburrLWkuQApCCxmgiLqr8ygRd+fPdnOnop/Sub1xCkzKlZt7CWxSL2 PVTJ2la1z3MbQWecpqZcfAYO/D/LCYH4ZdBjN9PyS3RK+XfxdD4T1bBzymBTiKIs idku4yteIwC+5VVYCkp/ZWe+S0wJM/07lsgv0VSNPDmQUhpNppxrII+fQ+SqzF+8 z/YvCxjvF1wbSua0IOw5Y0ePEexAWGW8bU8Sk2kO6vR4eGIrywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtidAkQK9EEYKYjwXJLkmzjVrAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcxYWU0YjAtYTc0Ny0z OTlkLTkwY2MtOWY5MTY3OGM3ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAb+idUj/BYLAMjjbynkqsuagjtTzv1dxnPXsL1WkPNVCn6nX5zgM1u qibg1hupxBVy7lU0iVxEp7NRF1eCqlFI9BNhTt4sOst1c1oUneOdRtM4GchjAlpI o/FjcwQ7wJMBv/tikDlBLACtU5jH68XSBHIDCQtFJJHfumBOO7vRX9lTBVuOCqPM KOOBqDRg+a0nGB7KXaMZ8Fw6yC5gPRCDmvYfTrDjwtPzX+kjaUAGl+yatZKNpwdl Han0Hg84+coQ4d+W1JSg+/9aGejmTMrJbxgbOXeKSymdida1EZvS49I5L97YcJ1j Pd5slJMB8y0af/ZoRqlpIMz9kBhCF8Q= -----END CERTIFICATE-----Generated at Mon Jun 16 16:02:12 2025 by rpki-client