$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15f954ca-9caa-344a-a89e-d91282544f15.roa File: 15f954ca-9caa-344a-a89e-d91282544f15.roa (raw, json) Hash identifier: fiesKS5ydEHkVTlNe2AMGfO0VvLf1nU9qDJqnvNxxbs= Subject key identifier: 57:E9:02:B8:A1:AE:FD:12:8D:05:BB:F3:89:14:47:3E:7F:28:E5:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F7153632DCD09A856A6A0600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15f954ca-9caa-344a-a89e-d91282544f15.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.96.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:36:32:dc:d0:9a:85:6a:6a:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=638d6746-47ca-4597-bb57-9800136c3f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:3b:11:80:2a:6c:e5:b7:67:12:ce:19:0c: a0:b6:48:cb:2e:4e:01:df:f5:23:7d:02:1b:76:25: a9:70:22:d6:b0:93:fb:c5:ae:81:e5:f4:32:61:0e: 33:aa:99:d0:ff:44:69:b9:eb:3d:d3:9f:40:c8:7f: 78:fa:fc:78:e5:7b:30:4b:75:4e:37:18:64:34:52: c1:9e:e9:91:51:e4:2d:91:b4:65:0a:e9:2b:73:26: ed:05:64:cc:af:89:1a:14:da:08:9b:b4:20:fa:9f: 8d:c9:ef:09:c6:06:83:84:4b:05:ae:59:e9:cb:31: 90:cb:6f:9c:b9:34:82:04:95:96:61:f5:46:c6:b0: e9:2d:2d:59:7c:16:c2:10:66:23:45:21:f0:96:fb: 26:de:1d:f4:13:9a:97:5f:eb:e4:85:76:61:92:cc: d3:8a:be:eb:9c:61:20:1e:bb:73:b4:e5:a6:6f:80: 71:a6:1b:47:14:c5:9a:9e:69:5d:9d:eb:62:56:08: d0:f5:0c:61:f8:f9:ef:09:bd:b8:69:5f:7c:b2:85: a6:1c:2a:6d:81:b1:65:02:82:1c:18:eb:1c:cd:04: 89:8e:9e:73:a8:ac:77:cb:c6:b7:16:4d:70:74:df: f5:6b:35:b2:47:42:77:e6:de:94:66:9a:f0:69:e4: 44:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:02:B8:A1:AE:FD:12:8D:05:BB:F3:89:14:47:3E:7F:28:E5:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15f954ca-9caa-344a-a89e-d91282544f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f4:04:1e:8c:5f:ce:5e:ea:f7:57:2a:cc:b2:07:e0:23:e3: ef:02:a9:20:87:9f:89:ed:3b:22:f6:a2:27:0b:0e:47:da:54: 7b:ef:f4:10:f2:c0:63:00:8e:0e:24:a8:37:93:f6:34:53:07: 05:50:f1:4d:df:a2:22:ec:44:fd:eb:d9:b2:38:42:e2:2b:e3: f2:ed:b8:f1:2e:b5:93:87:a9:4d:91:db:31:78:42:9d:44:dd: 40:38:f4:93:ce:f5:91:fd:b8:03:de:f9:d5:7d:7c:18:d5:9d: 76:be:6b:52:14:1e:8f:b4:bc:c9:02:24:5e:e5:eb:1e:00:cd: ac:0f:a8:f8:b4:d4:41:b1:b8:73:75:d0:b1:d3:97:83:ad:82: eb:48:a1:0d:22:49:c3:11:93:0e:9a:e6:30:62:80:3d:a5:e6: bb:c8:1f:87:e5:7c:b9:99:9a:92:b8:d8:a5:73:ba:a1:49:8e: df:51:f0:ac:85:ce:e5:6a:aa:cc:da:98:ef:a1:65:f8:49:7f: 2f:76:bb:60:90:49:d3:f5:54:a2:f4:83:c6:db:57:01:13:e6: b1:51:31:2e:2b:df:4f:7f:81:33:30:b0:88:23:70:fe:62:86: 8b:ab:27:e4:37:1d:a7:7b:de:f3:7f:9c:ff:41:48:f6:ce:c4: ed:e9:a1:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTYy3NCahWpqBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NjM4ZDY3NDYtNDdjYS00NTk3LWJiNTctOTgwMDEzNmMzZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrQ7EYAqbOW3ZxLOGQygtkjLLk4B3/UjfQIb diWpcCLWsJP7xa6B5fQyYQ4zqpnQ/0Rpues9059AyH94+vx45XswS3VONxhkNFLB numRUeQtkbRlCukrcybtBWTMr4kaFNoIm7Qg+p+Nye8JxgaDhEsFrlnpyzGQy2+c uTSCBJWWYfVGxrDpLS1ZfBbCEGYjRSHwlvsm3h30E5qXX+vkhXZhkszTir7rnGEg HrtztOWmb4BxphtHFMWanmldnetiVgjQ9Qxh+PnvCb24aV98soWmHCptgbFlAoIc GOsczQSJjp5zqKx3y8a3Fk1wdN/1azWyR0J35t6UZprwaeRESQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfpArihrv0SjQW784kURz5/KOXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTVmOTU0Y2EtOWNhYS0z NDRhLWE4OWUtZDkxMjgyNTQ0ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH0BB6MX85e6vdXKsyyB+Aj4+8CqSCHn4ntOyL2oicLDkfaVHvv9BDy wGMAjg4kqDeT9jRTBwVQ8U3foiLsRP3r2bI4QuIr4/LtuPEutZOHqU2R2zF4Qp1E 3UA49JPO9ZH9uAPe+dV9fBjVnXa+a1IUHo+0vMkCJF7l6x4AzawPqPi01EGxuHN1 0LHTl4OtgutIoQ0iScMRkw6a5jBigD2l5rvIH4flfLmZmpK42KVzuqFJjt9R8KyF zuVqqszamO+hZfhJfy92u2CQSdP1VKL0g8bbVwET5rFRMS4r309/gTMwsIgjcP5i hourJ+Q3Had73vN/nP9BSPbOxO3poXs= -----END CERTIFICATE-----Generated at Tue Jul 1 09:57:07 2025 by rpki-client