$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa File: c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa (raw, json) Hash identifier: ToVfBBjgPElxIQBy1nLO9mfQ5N/Oq5ChQxfdR1zOhYc= Subject key identifier: E2:05:CF:19:96:6F:49:61:AD:D6:0A:BB:10:39:EE:3B:A7:42:B2:5E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB410769C8D7BCFFB4ABDD80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 72.86.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:07:69:c8:d7:bc:ff:b4:ab:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c8552cfe-3951-4f5a-a67d-70698ce5c3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:d3:13:a5:3e:16:86:4b:ed:52:89:6a:89: 1e:df:a4:7b:f2:1e:53:f8:b2:4c:3d:58:13:46:95: 09:b0:b5:d1:d4:aa:0c:43:56:d6:f5:10:6c:2a:1f: 68:e8:da:6a:1b:f6:9f:2d:13:fc:b9:19:26:de:f6: e1:a3:92:b0:e8:05:63:52:6f:76:1d:87:cf:fc:e1: b8:a4:0b:48:a5:c2:d3:8a:30:9c:4a:eb:a8:04:2f: ce:5d:1f:d8:b4:a5:a8:6d:2b:44:4e:ed:82:99:b4: 12:c2:ec:6d:1b:5a:c2:a0:e7:09:24:7e:cd:0c:e9: 51:c0:c0:28:5c:cf:b8:09:6a:9b:f9:d2:fb:d8:bd: 50:45:7a:81:73:54:b4:a9:b5:57:a8:2f:b5:bf:9a: ca:25:80:23:bf:b9:63:c0:65:d6:e0:f5:9a:17:1b: 20:ac:66:79:74:ac:f6:d6:22:89:0a:2c:df:4d:29: 96:ab:4a:f2:19:ab:54:4e:e3:50:25:e8:73:7e:93: 72:7c:4c:ea:1d:9c:55:30:45:4f:09:77:d0:f5:8b: ce:0d:b9:7d:f7:dd:83:ea:1e:74:75:b1:19:8d:bc: 54:0b:46:f2:1e:41:46:91:71:5e:bc:24:8b:ad:e3: 0a:90:8e:33:30:60:df:88:ee:b2:e7:aa:b4:37:dc: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:CF:19:96:6F:49:61:AD:D6:0A:BB:10:39:EE:3B:A7:42:B2:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.86.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:20:3a:58:89:51:ae:6a:9a:28:d6:d5:41:36:ea:19:3b:e1: a3:93:99:62:ac:2d:e5:4a:3f:15:fc:04:fe:07:ba:27:e9:95: ed:74:69:f1:fa:49:83:4b:fd:47:2b:66:4a:c8:08:9d:38:75: 66:11:49:0c:a5:d8:94:82:7f:63:1d:1c:6e:85:f3:2a:a5:3e: 83:ce:c7:b3:a6:c2:77:a9:33:61:68:fe:ed:ef:f2:07:b4:3b: e0:77:46:07:1d:1f:1c:e5:0c:48:b7:7f:6d:88:49:74:23:70: 50:8b:53:01:b5:79:d6:7e:90:ef:8b:f1:e4:b7:5a:0b:d8:32: f8:ae:73:70:b4:a2:1e:68:d4:7a:38:c9:f0:80:7c:71:ad:b9: 28:92:08:6f:76:26:21:3d:54:0a:69:e4:08:17:34:94:86:cb: cf:5d:bb:8e:25:6a:68:67:e5:68:62:f5:21:b2:cd:92:a0:70: 18:a8:18:00:2c:f4:23:19:3a:df:df:29:97:cf:d5:2b:32:d3: 78:9d:07:71:4e:3a:9a:21:1c:5b:6e:4b:bd:f9:83:d1:68:d3: bd:af:10:19:ac:76:79:30:a6:a3:29:d7:2a:29:8a:a6:e7:f7: 32:8f:6b:c1:56:aa:bc:4f:97:7b:0e:a0:d4:af:d2:52:9c:26: f7:37:3b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQdpyNe8/7Sr3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk Yzg1NTJjZmUtMzk1MS00ZjVhLWE2N2QtNzA2OThjZTVjM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7TTE6U+FoZL7VKJaoke36R78h5T+LJMPVgT RpUJsLXR1KoMQ1bW9RBsKh9o6NpqG/afLRP8uRkm3vbho5Kw6AVjUm92HYfP/OG4 pAtIpcLTijCcSuuoBC/OXR/YtKWobStETu2CmbQSwuxtG1rCoOcJJH7NDOlRwMAo XM+4CWqb+dL72L1QRXqBc1S0qbVXqC+1v5rKJYAjv7ljwGXW4PWaFxsgrGZ5dKz2 1iKJCizfTSmWq0ryGatUTuNQJehzfpNyfEzqHZxVMEVPCXfQ9YvODbl9992D6h50 dbEZjbxUC0byHkFGkXFevCSLreMKkI4zMGDfiO6y56q0N9wJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIFzxmWb0lhrdYKuxA57junQrJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzQ1ZGM1M2QtOGQwMS0z MjU1LWEwOGMtNDQyOGZiYjlhOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESFYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcgOliJUa5qmijW1UE26hk74aOTmWKsLeVKPxX8BP4Huifple10afH6 SYNL/UcrZkrICJ04dWYRSQyl2JSCf2MdHG6F8yqlPoPOx7OmwnepM2Fo/u3v8ge0 O+B3RgcdHxzlDEi3f22ISXQjcFCLUwG1edZ+kO+L8eS3WgvYMviuc3C0oh5o1Ho4 yfCAfHGtuSiSCG92JiE9VApp5AgXNJSGy89du44lamhn5Whi9SGyzZKgcBioGAAs 9CMZOt/fKZfP1Ssy03idB3FOOpohHFtuS735g9Fo072vEBmsdnkwpqMp1yopiqbn 9zKPa8FWqrxPl3sOoNSv0lKcJvc3O1E= -----END CERTIFICATE-----Generated at Sat Aug 9 10:31:56 2025 by rpki-client