$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa File: 91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa (raw, json) Hash identifier: Pf1glXs2wjqo1GZN9j8vKh5Qwt0AZIeSka8JFgeCjyI= Subject key identifier: 68:23:31:C4:58:72:AD:07:28:0E:F7:75:E3:AD:C4:B6:DF:2B:2D:AF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F4D8A3611820224AF980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 72.70.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f4:d8:a3:61:18:20:22:4a:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=4a8bcbed-ee00-423d-b831-32152c2d693b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:93:a5:2c:ea:a4:a0:48:73:94:3c:b7:12: 22:85:5b:a5:32:27:f1:b4:2c:a7:fc:bf:19:77:f3: b1:48:95:a8:b0:96:17:88:cf:ea:c4:ec:a8:f0:fb: b5:f0:5b:60:6b:51:98:ce:1f:32:13:18:1f:de:19: 53:21:e3:c7:ed:d9:e9:57:1d:c6:aa:31:5c:ca:fa: 1f:17:3e:db:c1:8b:ac:24:ca:e6:f8:b8:5e:cb:7d: e3:e3:06:8a:73:2c:c9:c3:b5:9b:d8:6b:0d:45:8e: 8c:f0:3b:44:f1:5d:97:9e:f1:71:14:50:87:3b:aa: 92:61:09:45:55:1f:48:b8:06:e8:e1:66:79:6c:c2: 5e:e2:0a:c6:e3:c0:6d:c5:2c:c6:a1:bf:04:c8:8b: 4b:09:e8:cf:d4:c3:d7:df:c6:5e:a5:d6:41:3b:14: c5:f6:db:89:7f:66:25:38:fb:be:81:33:24:75:34: 82:e0:0a:6d:26:de:9e:50:05:72:f8:f1:6e:c1:16: f8:65:51:11:48:3f:10:22:ba:80:99:3f:83:40:8f: d6:b7:90:ef:9c:a9:74:c2:03:a8:95:59:b0:18:19: c2:d0:e0:98:63:ac:e1:a0:c3:91:fc:f2:f0:28:5d: d6:da:6d:e2:1c:87:cb:50:76:a0:5a:db:f9:b1:7b: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:31:C4:58:72:AD:07:28:0E:F7:75:E3:AD:C4:B6:DF:2B:2D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.70.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:9b:d9:2c:d1:0b:b7:3f:84:5b:1d:b0:0d:fe:5c:34:70:56: a0:cb:66:64:24:63:b9:ac:cc:e8:34:3e:3c:d7:b0:be:00:07: 3a:1a:73:ce:59:57:39:d0:53:18:cb:87:6c:8d:6a:fc:ad:d4: 26:a2:49:bb:50:c9:35:50:38:28:6d:a2:55:3c:d0:23:95:86: a8:11:52:e0:1f:d6:f3:46:89:28:82:c2:d0:1c:1f:a8:5d:44: be:b2:4a:3c:e6:f5:76:23:55:e5:33:70:c5:02:e9:8b:3b:9a: 95:b2:36:72:ed:0c:b5:3b:49:a6:8f:b0:fe:6a:09:01:22:cc: 46:63:f8:1a:f6:8f:e6:7d:f7:b6:4e:da:77:c6:79:b7:58:5c: 66:1b:8f:02:18:ef:ec:e4:a1:cb:f9:39:20:e1:f2:34:ec:86: 3a:d6:dc:06:77:2b:e9:1c:b4:e7:8e:5e:15:4b:0d:6e:d6:9f: 05:6c:e9:c6:da:44:47:49:15:3f:02:69:6c:b1:30:39:d3:80: 50:58:9b:e8:c7:3c:43:e2:47:dd:94:9e:d0:6d:71:f8:72:18: 7f:00:02:40:33:a0:90:b3:eb:82:63:90:07:fd:a1:5c:8a:d7: 83:21:23:16:18:f8:66:28:f3:94:7d:ac:e7:0f:66:34:6c:74: 18:7d:70:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPTYo2EYICJK+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGE4YmNiZWQtZWUwMC00MjNkLWI4MzEtMzIxNTJjMmQ2OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeuTpSzqpKBIc5Q8txIihVulMifxtCyn/L8Z d/OxSJWosJYXiM/qxOyo8Pu18Ftga1GYzh8yExgf3hlTIePH7dnpVx3GqjFcyvof Fz7bwYusJMrm+Lhey33j4waKcyzJw7Wb2GsNRY6M8DtE8V2XnvFxFFCHO6qSYQlF VR9IuAbo4WZ5bMJe4grG48BtxSzGob8EyItLCejP1MPX38ZepdZBOxTF9tuJf2Yl OPu+gTMkdTSC4AptJt6eUAVy+PFuwRb4ZVERSD8QIrqAmT+DQI/Wt5DvnKl0wgOo lVmwGBnC0OCYY6zhoMOR/PLwKF3W2m3iHIfLUHagWtv5sXvjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgjMcRYcq0HKA73deOtxLbfKy2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTFlZmNiZjAtMjA1ZS0z NTU2LTljZTMtNWI3YjhkZmU2ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSEbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOb2SzRC7c/hFsdsA3+XDRwVqDLZmQkY7mszOg0PjzXsL4ABzoac85Z VznQUxjLh2yNavyt1CaiSbtQyTVQOChtolU80COVhqgRUuAf1vNGiSiCwtAcH6hd RL6ySjzm9XYjVeUzcMUC6Ys7mpWyNnLtDLU7SaaPsP5qCQEizEZj+Br2j+Z997ZO 2nfGebdYXGYbjwIY7+zkocv5OSDh8jTshjrW3AZ3K+kctOeOXhVLDW7WnwVs6cba REdJFT8CaWyxMDnTgFBYm+jHPEPiR92UntBtcfhyGH8AAkAzoJCz64JjkAf9oVyK 14MhIxYY+GYo85R9rOcPZjRsdBh9cJU= -----END CERTIFICATE-----Generated at Sat Aug 9 10:36:20 2025 by rpki-client