$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa File: 888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json) Hash identifier: 7QUqvA0uJRH5HGnR2nNYuwznpyzeM2ru0cAv3Pp1RbA= Subject key identifier: 83:BB:84:1B:C8:EF:6D:CA:55:D3:0C:86:59:F9:44:01:35:26:DF:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F7152B08E4E491381907E580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.97.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2b:08:e4:e4:91:38:19:07:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=d4471169-84c4-4865-8548-cbacee18172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:83:60:74:29:7a:5b:85:f0:6b:54:b0:10: 65:0e:a2:87:60:53:24:09:9f:f2:41:5f:ac:67:9e: 0c:24:5f:b9:8b:f0:7a:be:0a:96:d0:2b:8f:05:34: 68:c3:67:ab:69:38:51:9e:45:5c:4d:a8:8e:37:ad: 51:ea:8b:63:70:fe:57:f5:98:e0:98:73:a6:5a:e8: a7:20:ef:95:fd:13:bd:11:f3:1c:ce:f8:66:62:83: c1:19:f0:f9:2b:2f:ae:68:f6:10:3e:f3:7a:a9:65: 4b:51:d5:9e:29:ee:59:9b:90:f2:4d:e3:95:82:77: 55:fc:93:6a:83:f7:26:c8:00:d7:bd:f9:71:48:c7: 51:bf:96:f9:ac:c1:b8:29:1a:3d:21:18:e9:c0:59: 53:df:61:71:c9:bd:31:cf:c7:7b:32:12:46:b7:ec: ca:4e:c5:ff:8f:b5:f4:8a:b6:e9:12:37:da:b2:e8: 00:a3:96:45:84:ae:f8:c3:e0:cd:8a:b0:72:3f:00: 2a:3b:ae:72:2e:49:24:c9:95:fb:19:03:4a:bf:81: 29:39:c6:40:d0:6a:3e:d0:77:b2:52:da:4a:0b:1d: 36:59:af:dd:b3:ed:d8:a6:55:ed:81:ba:a1:3e:96: 81:c8:55:c9:1f:72:ab:16:80:7b:ff:e9:8b:4d:ad: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BB:84:1B:C8:EF:6D:CA:55:D3:0C:86:59:F9:44:01:35:26:DF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:31:e0:83:9e:8b:45:0f:27:9f:8b:79:55:92:20:35:ec:e8: ee:d8:ef:3b:10:ea:d9:c8:4c:99:47:00:3c:fd:6d:9f:fc:84: 9f:fe:57:91:2c:c0:21:b7:1c:11:bd:ce:42:ad:ec:aa:f7:94: 64:06:18:de:17:ee:eb:21:cf:af:74:af:3d:fe:50:6b:59:1e: f2:ea:e6:3e:74:b8:a3:e0:c8:32:f8:50:31:f2:ea:d3:02:a3: fa:01:bd:63:be:f9:81:1e:a1:cf:b6:57:e4:a4:ef:01:43:ef: df:b8:24:eb:6f:ad:55:12:4b:cb:00:79:41:87:31:30:71:ba: cb:5e:2c:c9:13:3e:07:f8:8d:28:92:8c:ff:a8:ab:96:15:2b: 66:d4:3e:1f:c0:f0:05:73:2e:9e:19:8d:c2:f8:62:88:20:4b: 56:b8:c3:f4:fe:0b:2e:c6:07:af:97:72:c0:5b:8a:f1:c9:e2: ab:4a:bc:ff:32:c6:21:f2:87:7d:be:f4:ef:92:c1:52:12:eb: c5:e1:58:88:7a:eb:86:5f:51:e8:65:4d:df:2c:00:67:5a:ab: 7d:82:26:66:58:44:11:50:3f:01:ed:39:15:0b:4d:27:25:8a: c7:e3:08:7b:09:28:93:27:88:2e:59:c1:a2:be:23:8e:f4:43: fb:41:24:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSsI5OSROBkH5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDQ0NzExNjktODRjNC00ODY1LTg1NDgtY2JhY2VlMTgxNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsWDYHQpeluF8GtUsBBlDqKHYFMkCZ/yQV+s Z54MJF+5i/B6vgqW0CuPBTRow2eraThRnkVcTaiON61R6otjcP5X9ZjgmHOmWuin IO+V/RO9EfMczvhmYoPBGfD5Ky+uaPYQPvN6qWVLUdWeKe5Zm5DyTeOVgndV/JNq g/cmyADXvflxSMdRv5b5rMG4KRo9IRjpwFlT32Fxyb0xz8d7MhJGt+zKTsX/j7X0 irbpEjfasugAo5ZFhK74w+DNirByPwAqO65yLkkkyZX7GQNKv4EpOcZA0Go+0Hey UtpKCx02Wa/ds+3YplXtgbqhPpaByFXJH3KrFoB7/+mLTa2epQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO7hBvI723KVdMMhln5RAE1Jt/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg4Y2I5YjYtNjkzMi0z MjVlLWJhOWQtNmY2MDgwMzQzYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEx4IOei0UPJ5+LeVWSIDXs6O7Y7zsQ6tnITJlHADz9bZ/8hJ/+V5Es wCG3HBG9zkKt7Kr3lGQGGN4X7ushz690rz3+UGtZHvLq5j50uKPgyDL4UDHy6tMC o/oBvWO++YEeoc+2V+Sk7wFD79+4JOtvrVUSS8sAeUGHMTBxusteLMkTPgf4jSiS jP+oq5YVK2bUPh/A8AVzLp4ZjcL4YoggS1a4w/T+Cy7GB6+XcsBbivHJ4qtKvP8y xiHyh32+9O+SwVIS68XhWIh664ZfUehlTd8sAGdaq32CJmZYRBFQPwHtORULTScl isfjCHsJKJMniC5ZwaK+I470Q/tBJCE= -----END CERTIFICATE-----Generated at Wed Jun 18 07:02:45 2025 by rpki-client