$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa File: 15579d4a-f809-324a-a127-7f002dd6963c.roa (raw, json) Hash identifier: Vfgz12KIsFamnZUbhamt44SHKE21xOnZ6CG1nIBoHoQ= Subject key identifier: 76:09:25:3E:7A:51:90:E8:C8:D2:6B:3C:14:9D:FA:00:8C:CF:FE:0C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D13BD41636A568A50D2400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.96.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:3b:d4:16:36:a5:68:a5:0d:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=3d180550-f67f-4029-be44-8d8e02ebdb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:ed:0a:17:91:31:60:a9:af:7d:d2:47:f1: 31:8e:a1:f5:41:ec:87:64:16:fc:19:73:86:35:b0: 5a:9a:b7:74:81:a6:44:3d:b0:40:e3:d9:7c:28:21: cf:29:e3:97:07:8a:50:a1:46:80:e0:fb:aa:9f:19: 86:94:e6:14:1e:31:64:6f:f8:ad:cc:ea:23:1a:df: 0e:75:cd:59:c4:dc:d8:83:1f:bd:d4:08:3e:36:70: e4:9c:7b:e5:9a:19:78:99:95:4e:db:63:7b:59:ac: f0:34:c6:53:ef:67:53:ef:1a:74:e9:63:fe:d3:80: 53:8a:93:05:35:19:eb:1a:3f:59:9f:95:6d:35:1f: d5:5a:49:fe:b9:62:18:2e:e5:15:fa:df:e0:1d:f3: 28:98:b7:ef:4d:b8:59:52:c4:03:14:6f:21:dd:59: 78:d3:81:6e:db:cb:fc:30:b7:28:76:1b:db:7b:7c: b7:c7:da:45:23:0c:74:ce:6f:0d:40:c3:ca:64:d4: 9d:ab:4f:ab:ff:9d:87:63:7c:3e:ef:c3:84:fc:71: dc:e1:3f:4d:3d:d4:5e:ec:96:67:95:97:e0:64:cc: e3:b1:3e:0f:a5:ca:0a:6b:d6:46:83:55:0e:8c:90: cd:9a:bd:9a:90:64:04:ac:14:f0:ff:d6:99:33:97: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:09:25:3E:7A:51:90:E8:C8:D2:6B:3C:14:9D:FA:00:8C:CF:FE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:63:96:80:78:4d:99:03:8a:6a:1f:43:b6:92:66:5f:88:e6: e0:3c:f7:1f:a0:52:08:b3:42:19:23:4a:38:9d:00:fd:a1:1e: 1d:da:56:fd:5d:13:cc:3f:5c:d7:be:4c:cf:d7:4f:42:e0:1e: 5e:15:06:16:12:d3:35:25:69:9b:64:8e:49:33:45:f8:c9:8e: e3:29:b6:0f:5e:33:23:fb:25:fd:93:6c:27:05:0a:db:21:e6: 40:66:c0:d4:ba:9b:e4:fc:fe:a6:47:de:e6:fa:13:74:13:7a: 00:97:fe:54:b6:b7:37:8a:60:66:80:64:ed:4a:fb:e8:c9:59: 4c:67:07:cd:b0:47:ba:e1:fa:90:b0:0d:e7:b2:b5:bd:08:06: e7:e6:5e:18:f4:3f:92:65:e1:fc:b1:d4:09:b6:3d:5c:fa:d8: 98:69:91:03:17:4a:a9:4b:ea:29:b8:16:8f:6f:53:57:18:7f: 89:3d:0a:c3:13:99:b9:86:dc:1c:23:12:27:49:cc:ae:4e:09: 7e:2f:28:4b:a7:54:c5:c4:b9:b4:d7:76:ca:90:7e:af:f4:49: 21:19:50:b1:53:f5:66:05:0b:59:1b:2d:53:df:0d:00:91:7e: b0:71:fb:f2:21:9f:85:20:4b:a4:da:62:66:d5:f6:c5:2f:92: 92:90:49:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TvUFjalaKUNJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk M2QxODA1NTAtZjY3Zi00MDI5LWJlNDQtOGQ4ZTAyZWJkYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZTtCheRMWCpr33SR/ExjqH1QeyHZBb8GXOG NbBamrd0gaZEPbBA49l8KCHPKeOXB4pQoUaA4PuqnxmGlOYUHjFkb/itzOojGt8O dc1ZxNzYgx+91Ag+NnDknHvlmhl4mZVO22N7WazwNMZT72dT7xp06WP+04BTipMF NRnrGj9Zn5VtNR/VWkn+uWIYLuUV+t/gHfMomLfvTbhZUsQDFG8h3Vl404Fu28v8 MLcodhvbe3y3x9pFIwx0zm8NQMPKZNSdq0+r/52HY3w+78OE/HHc4T9NPdRe7JZn lZfgZMzjsT4PpcoKa9ZGg1UOjJDNmr2akGQErBTw/9aZM5dKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYJJT56UZDoyNJrPBSd+gCMz/4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTU1NzlkNGEtZjgwOS0z MjRhLWExMjctN2YwMDJkZDY5NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9jloB4TZkDimofQ7aSZl+I5uA89x+gUgizQhkjSjidAP2hHh3aVv1d E8w/XNe+TM/XT0LgHl4VBhYS0zUlaZtkjkkzRfjJjuMptg9eMyP7Jf2TbCcFCtsh 5kBmwNS6m+T8/qZH3ub6E3QTegCX/lS2tzeKYGaAZO1K++jJWUxnB82wR7rh+pCw Deeytb0IBufmXhj0P5Jl4fyx1Am2PVz62JhpkQMXSqlL6im4Fo9vU1cYf4k9CsMT mbmG3BwjEidJzK5OCX4vKEunVMXEubTXdsqQfq/0SSEZULFT9WYFC1kbLVPfDQCR frBx+/Ihn4UgS6TaYmbV9sUvkpKQSds= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:09 2025 by rpki-client