$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d65f21f3-3522-3289-bb8f-42da32183101.roa File: d65f21f3-3522-3289-bb8f-42da32183101.roa (raw, json) Hash identifier: h6vbUozCfu7sXMTXVn0+Q5wbHo5vJscXA8xPYXvCYXw= Subject key identifier: 30:C0:09:DE:3E:62:1E:E6:9B:04:AB:12:61:0A:13:FD:B6:FC:90:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A1E2AB31DA5650A7340207900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d65f21f3-3522-3289-bb8f-42da32183101.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.108.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:b3:1d:a5:65:0a:73:40:20:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=16ec1b87-ee67-4493-bde3-4e3d2c697054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:64:b0:bd:8d:93:82:bf:96:52:07:7c:2f: 1b:38:58:8c:f2:c8:c8:32:5d:3c:6d:6c:a1:0f:65: 42:56:ba:88:db:08:c0:fc:a2:01:28:89:ca:d7:b6: d5:f7:e1:88:88:63:5b:71:33:ee:02:af:c9:17:21: 71:73:41:a1:7f:13:b7:48:37:21:c2:2a:d1:09:ce: 82:d4:21:35:7e:4e:17:8d:73:7d:f6:e1:6c:ff:9e: 60:43:27:21:2c:14:a8:b4:6e:91:76:e2:07:90:b7: cb:8e:18:ea:3f:9f:60:be:1d:7b:bc:8b:27:ee:3e: 15:c6:e9:de:8e:ae:9d:a0:47:51:01:c6:34:0a:34: c9:4e:98:10:04:ec:cb:3f:11:a1:c1:32:f5:76:20: 31:41:cd:77:23:2d:17:4d:e7:84:f8:81:84:15:1e: 64:4b:7a:6d:ea:1f:a6:e2:7b:7b:3f:85:07:13:09: ce:1f:82:73:77:62:e1:44:9f:f0:00:22:01:d3:0b: a9:16:ea:b8:1c:1b:2e:1d:4c:38:c3:96:2f:ba:da: 39:4c:c1:ca:23:05:42:b3:72:41:05:87:6b:08:14: b1:bb:d4:c8:d4:31:b6:14:03:85:0f:b8:e1:c2:18: 23:c0:ad:03:37:0d:d2:f1:a6:57:f6:f6:b7:a8:e4: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C0:09:DE:3E:62:1E:E6:9B:04:AB:12:61:0A:13:FD:B6:FC:90:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d65f21f3-3522-3289-bb8f-42da32183101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d6:7f:5d:b8:5e:bc:97:b9:34:f5:f1:96:55:89:45:65:e1: f3:55:0d:78:47:85:dd:e7:05:a0:6c:62:a5:69:a5:fd:d8:e6: a3:e9:a6:33:5f:f3:83:31:fa:6d:45:cd:97:e1:e0:04:b1:8d: 3b:35:c0:1f:1b:5f:23:8b:98:6e:91:72:19:92:35:b9:68:1e: b1:e1:d2:43:6b:7f:3e:46:24:be:57:30:04:7f:0f:1f:63:b2: 03:f2:50:e6:f8:c6:01:21:a4:05:61:6c:b8:ae:08:56:2c:b7: e0:62:c5:f8:e1:9e:a4:c1:05:dd:1b:65:01:78:6a:88:29:51: f0:49:f9:65:84:63:cc:59:1d:ad:2d:6e:96:a7:0d:64:43:86: dc:ad:a3:66:ea:a6:39:b8:e3:de:4a:d1:98:80:8d:c3:33:01: 42:0b:a6:31:84:1c:dd:52:73:77:7d:32:9f:bc:5d:e2:47:42: 21:99:c3:f4:81:67:ce:06:09:2e:9b:f7:ea:f4:01:f5:3a:5a: 96:1e:56:a7:8f:cd:7c:69:6d:c2:4f:da:8e:2a:d3:9c:92:8d: f4:b6:b0:9c:d6:d8:b9:f1:e3:0a:38:ff:a5:f3:00:9f:d4:17: c9:55:dd:7d:12:c8:01:a7:1d:e2:4c:7c:5e:6e:21:b1:87:74: f4:2c:41:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrMdpWUKc0AgeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk MTZlYzFiODctZWU2Ny00NDkzLWJkZTMtNGUzZDJjNjk3MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj5ksL2Nk4K/llIHfC8bOFiM8sjIMl08bWyh D2VCVrqI2wjA/KIBKInK17bV9+GIiGNbcTPuAq/JFyFxc0GhfxO3SDchwirRCc6C 1CE1fk4XjXN99uFs/55gQychLBSotG6RduIHkLfLjhjqP59gvh17vIsn7j4Vxune jq6doEdRAcY0CjTJTpgQBOzLPxGhwTL1diAxQc13Iy0XTeeE+IGEFR5kS3pt6h+m 4nt7P4UHEwnOH4Jzd2LhRJ/wACIB0wupFuq4HBsuHUw4w5Yvuto5TMHKIwVCs3JB BYdrCBSxu9TI1DG2FAOFD7jhwhgjwK0DNw3S8aZX9va3qOQtQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDACd4+Yh7mmwSrEmEKE/22/JAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDY1ZjIxZjMtMzUyMi0z Mjg5LWJiOGYtNDJkYTMyMTgzMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADWf124XryXuTT18ZZViUVl4fNVDXhHhd3nBaBsYqVppf3Y5qPppjNf 84Mx+m1FzZfh4ASxjTs1wB8bXyOLmG6RchmSNbloHrHh0kNrfz5GJL5XMAR/Dx9j sgPyUOb4xgEhpAVhbLiuCFYst+BixfjhnqTBBd0bZQF4aogpUfBJ+WWEY8xZHa0t bpanDWRDhtyto2bqpjm4495K0ZiAjcMzAUILpjGEHN1Sc3d9Mp+8XeJHQiGZw/SB Z84GCS6b9+r0AfU6WpYeVqePzXxpbcJP2o4q05ySjfS2sJzW2Lnx4wo4/6XzAJ/U F8lV3X0SyAGnHeJMfF5uIbGHdPQsQdU= -----END CERTIFICATE-----Generated at Mon Jun 16 09:57:07 2025 by rpki-client