$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d513e38d-4854-37b5-9fa6-99777594a21a.roa File: d513e38d-4854-37b5-9fa6-99777594a21a.roa (raw, json) Hash identifier: IAs8ml/7x+nuDkykEjcpYznho5qEMM5CvTghmpGaoP4= Subject key identifier: E1:99:07:39:57:99:D9:67:0D:A3:23:0C:3E:50:67:CD:BD:01:38:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A1E2ABA2B5F0D1E6A12279CA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d513e38d-4854-37b5-9fa6-99777594a21a.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.97.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:ba:2b:5f:0d:1e:6a:12:27:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=7197ab5e-45c1-4303-a20c-b1244b3238be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:6f:67:8b:95:fc:50:78:22:6a:c8:6f:2b: a8:93:66:76:26:64:c9:96:97:f5:00:f7:b6:65:61: 6c:94:a7:81:90:50:76:28:23:64:a0:de:d6:db:97: 14:72:5f:26:c8:05:6f:e3:77:45:63:4e:4e:f5:27: c9:c3:13:4b:07:cc:75:54:f0:d9:c2:b6:bf:3e:fc: 7a:ac:43:dd:f4:d5:39:e4:38:a8:35:1c:52:fe:e8: c5:8d:de:6a:a9:85:d0:2b:5b:38:eb:10:70:76:78: 5e:bb:d2:72:fd:10:3b:8a:a1:1e:70:be:47:9b:26: 65:6f:17:09:47:85:db:a6:80:5d:95:18:ca:ef:e8: 66:b3:19:02:f3:9c:75:64:c7:42:d1:5d:e3:51:6b: fc:a6:6c:2c:c2:a9:92:dd:dc:c1:66:ef:7f:42:c8: c3:26:f7:8b:4d:11:1d:58:b8:3c:26:95:60:41:45: 0b:fe:35:da:96:ec:fe:cb:f7:95:7d:ab:bb:3f:98: 0e:84:8c:a8:f2:75:8f:a8:bd:94:16:be:53:85:9c: 3b:be:cb:b6:67:a1:d1:61:a1:d2:b5:49:b1:33:23: ce:5b:8e:7c:e3:84:85:25:56:6a:2c:0c:d9:b1:c2: ef:0e:56:a6:8a:8b:26:ac:dd:42:d0:f9:5f:3c:90: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:99:07:39:57:99:D9:67:0D:A3:23:0C:3E:50:67:CD:BD:01:38:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d513e38d-4854-37b5-9fa6-99777594a21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:77:31:b0:96:48:93:a2:dd:4c:c4:3e:4e:ee:83:8d:17:49: dc:5a:bd:eb:a5:59:fc:0e:44:77:1f:2d:cb:db:ae:d2:48:6a: 8c:56:06:86:fd:fa:35:db:2a:d6:a2:1a:03:2c:0b:62:e0:f7: 90:17:1d:37:9b:4e:cf:86:45:60:b7:a9:fb:1c:63:51:53:7c: e9:b2:76:52:d5:a1:77:5d:9e:73:4a:85:40:24:17:2f:a0:f3: 32:64:f4:97:dc:04:b7:90:8f:8f:f5:30:9c:07:6e:04:36:01: 54:50:11:20:0d:8b:43:9a:e8:21:cf:65:62:91:87:c1:39:1e: a1:7e:0e:70:2e:b3:20:c7:25:f4:d2:5c:75:4e:b4:76:a9:bf: 6d:2e:2e:36:2f:90:b9:04:0d:ac:e4:64:88:d2:00:35:18:3b: bb:6b:b2:9d:95:30:26:62:8b:bd:72:11:67:a1:0a:ef:ea:20: ba:9b:b5:7b:57:4c:42:d0:6f:7c:18:cc:02:3c:47:75:39:c5: 02:d2:f5:07:f1:19:ed:20:07:35:92:85:c5:e2:c3:88:70:8d: 0b:68:d2:38:db:70:a9:07:73:b7:ba:98:8d:ee:07:16:d7:91: d5:b0:37:1e:d1:09:66:68:e2:fd:9c:a5:71:f8:5a:6b:9a:5c: 1d:1a:2c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrorXw0eahInnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NzE5N2FiNWUtNDVjMS00MzAzLWEyMGMtYjEyNDRiMzIzOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU1vZ4uV/FB4ImrIbyuok2Z2JmTJlpf1APe2 ZWFslKeBkFB2KCNkoN7W25cUcl8myAVv43dFY05O9SfJwxNLB8x1VPDZwra/Pvx6 rEPd9NU55DioNRxS/ujFjd5qqYXQK1s46xBwdnheu9Jy/RA7iqEecL5HmyZlbxcJ R4XbpoBdlRjK7+hmsxkC85x1ZMdC0V3jUWv8pmwswqmS3dzBZu9/QsjDJveLTREd WLg8JpVgQUUL/jXaluz+y/eVfau7P5gOhIyo8nWPqL2UFr5ThZw7vsu2Z6HRYaHS tUmxMyPOW45844SFJVZqLAzZscLvDlamiosmrN1C0PlfPJA7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGZBzlXmdlnDaMjDD5QZ829AThlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUxM2UzOGQtNDg1NC0z N2I1LTlmYTYtOTk3Nzc1OTRhMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ3MbCWSJOi3UzEPk7ug40XSdxaveulWfwORHcfLcvbrtJIaoxWBob9 +jXbKtaiGgMsC2Lg95AXHTebTs+GRWC3qfscY1FTfOmydlLVoXddnnNKhUAkFy+g 8zJk9JfcBLeQj4/1MJwHbgQ2AVRQESANi0Oa6CHPZWKRh8E5HqF+DnAusyDHJfTS XHVOtHapv20uLjYvkLkEDazkZIjSADUYO7trsp2VMCZii71yEWehCu/qILqbtXtX TELQb3wYzAI8R3U5xQLS9QfxGe0gBzWShcXiw4hwjQto0jjbcKkHc7e6mI3uBxbX kdWwNx7RCWZo4v2cpXH4WmuaXB0aLEQ= -----END CERTIFICATE-----Generated at Tue Jun 17 20:26:22 2025 by rpki-client