$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa File: 127f2590-aa16-3529-ac5f-be5897bf0b7e.roa (raw, json) Hash identifier: XozSO4hFQYI5k+RoNThqVjrMu0PHDgGKbiPcEaQif7w= Subject key identifier: 45:2A:C3:ED:18:FE:10:3C:9D:4A:FD:8E:2F:CD:5B:70:44:22:FF:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE196A3B8EFA71E673D55FF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 6167 IP address blocks: 97.133.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:a3:b8:ef:a7:1e:67:3d:55:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=7cc99290-8c81-4585-99a4-256be9b0bcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:93:ce:42:08:04:32:24:b0:95:91:ad:dc: 08:6f:90:ff:ed:b7:45:f8:b8:20:38:8b:de:94:23: 40:97:cd:70:38:dd:ab:35:fb:6e:5c:5d:6a:b4:1d: 60:85:ea:9a:15:c0:0b:34:dc:12:2f:9a:99:b6:e2: 03:a0:49:e0:ef:26:ae:ad:cf:3c:38:d3:f8:b9:ef: c7:46:51:3b:ce:86:0e:a9:20:ac:ca:3a:43:35:13: f6:70:a0:46:fd:16:aa:18:41:61:ec:8d:f9:e0:62: a7:da:23:27:3b:80:d6:5d:9a:18:05:31:75:5b:17: 59:85:44:7b:4f:34:4e:77:bb:3f:c5:5c:c6:5b:51: 5b:7c:64:b1:93:c8:8d:94:5b:bf:17:b2:c0:33:50: 5e:8c:52:6e:69:fe:58:96:16:70:96:43:70:54:0e: b6:9f:f5:2b:e8:3a:65:ae:c0:e1:10:4a:93:ed:fe: 4c:d0:6f:27:91:d1:4b:05:90:80:82:e7:c3:c2:5c: 1f:1e:74:1a:2f:6d:5b:0c:d6:a8:ce:2e:8c:d4:d7: fc:43:d4:ec:74:4e:75:1e:9e:2a:61:29:69:eb:50: 51:f6:f8:6d:7a:e9:1c:dd:97:f7:6e:cb:63:19:51: 8f:49:c4:02:a4:c7:16:2e:ea:5e:11:9a:91:0a:45: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2A:C3:ED:18:FE:10:3C:9D:4A:FD:8E:2F:CD:5B:70:44:22:FF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.133.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c2:94:43:d4:77:90:56:a1:6e:97:cc:b2:04:a9:c1:ce:e4: b8:90:2c:49:52:ec:43:ff:02:cb:f7:5a:ed:65:e0:56:12:66: 22:f3:ff:6b:d3:a8:64:36:ce:ab:85:8c:f6:15:3f:c3:81:2a: ce:7c:9f:ad:d8:1b:ae:0d:07:75:b3:23:6e:52:2c:fd:d0:5b: 60:7b:c2:a8:ad:14:20:17:07:be:69:8b:37:33:be:a8:d3:34: 96:de:fa:6c:55:82:3a:b3:45:7f:29:18:22:ab:8b:8f:67:b1: b4:08:5c:70:15:fe:60:a6:2f:9c:ca:56:ad:02:ea:63:15:a1: c7:8d:2f:12:1f:62:d8:14:75:46:9e:d4:17:f0:95:21:ed:70: d9:86:22:1f:3f:92:0b:73:bd:d4:99:49:b9:48:28:08:1a:c3: 93:41:10:82:47:04:d2:5d:bf:c9:c9:24:69:78:66:6f:c8:eb: 8d:06:72:62:ac:45:36:80:a8:41:5d:a1:ba:36:5a:43:0f:15: e5:ba:b7:07:0c:29:c4:f9:50:33:d2:b0:6a:8a:3b:b5:5b:1f: c3:99:92:13:44:55:a8:db:88:d3:47:e0:3b:9b:b5:9a:c8:5e: 50:04:8a:c1:18:0b:4a:44:a4:47:0f:d5:10:c3:ae:e5:d9:e6: 80:f0:29:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlqO476ceZz1V/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk N2NjOTkyOTAtOGM4MS00NTg1LTk5YTQtMjU2YmU5YjBiY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCiTzkIIBDIksJWRrdwIb5D/7bdF+LggOIve lCNAl81wON2rNftuXF1qtB1gheqaFcALNNwSL5qZtuIDoEng7yaurc88ONP4ue/H RlE7zoYOqSCsyjpDNRP2cKBG/RaqGEFh7I354GKn2iMnO4DWXZoYBTF1WxdZhUR7 TzROd7s/xVzGW1FbfGSxk8iNlFu/F7LAM1BejFJuaf5YlhZwlkNwVA62n/Ur6Dpl rsDhEEqT7f5M0G8nkdFLBZCAgufDwlwfHnQaL21bDNaozi6M1Nf8Q9TsdE51Hp4q YSlp61BR9vhteukc3Zf3bstjGVGPScQCpMcWLupeEZqRCkWJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUqw+0Y/hA8nUr9ji/NW3BEIv/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTI3ZjI1OTAtYWExNi0z NTI5LWFjNWYtYmU1ODk3YmYwYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYYVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfClEPUd5BWoW6XzLIEqcHO5LiQLElS7EP/Asv3Wu1l4FYSZiLz/2vT qGQ2zquFjPYVP8OBKs58n63YG64NB3WzI25SLP3QW2B7wqitFCAXB75pizczvqjT NJbe+mxVgjqzRX8pGCKri49nsbQIXHAV/mCmL5zKVq0C6mMVoceNLxIfYtgUdUae 1BfwlSHtcNmGIh8/kgtzvdSZSblIKAgaw5NBEIJHBNJdv8nJJGl4Zm/I640GcmKs RTaAqEFdobo2WkMPFeW6twcMKcT5UDPSsGqKO7VbH8OZkhNEVajbiNNH4DubtZrI XlAEisEYC0pEpEcP1RDDruXZ5oDwKaI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:40 2025 by rpki-client