$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa File: 25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa (raw, json) Hash identifier: LWUJv9F+sAO+XPgaBYIXyPJmRj1s3vjNwcXBlAromeg= Subject key identifier: 96:76:90:4B:0A:CF:58:F8:EB:5C:83:CD:F9:B8:6E:40:82:ED:B2:F7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D139F2232F8A1F0A044400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.97.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:39:f2:23:2f:8a:1f:0a:04:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=69052ed6-65ca-428d-b3cd-b6a085690f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:f7:b4:7c:0e:2c:46:4d:d4:61:b1:a5:4a: 35:61:78:4d:40:81:8c:a9:34:3d:1a:5b:41:4f:83: a7:9f:15:61:d0:de:d0:2d:9d:9c:f1:c1:85:4c:2b: c4:88:1e:18:f2:9f:0b:37:48:83:05:9f:51:12:9a: 83:f3:24:b8:81:21:f0:03:44:56:d4:cc:ea:52:a0: 0a:bf:16:ce:e8:fa:80:20:e1:f6:b0:c9:ed:a4:db: e5:f2:83:fe:45:5e:b5:7c:9c:0d:a7:df:06:12:88: c7:9b:80:2f:95:8c:7f:94:25:5f:81:c8:5d:df:df: fb:04:a8:6d:3f:c0:16:dd:2c:d1:55:96:ad:05:c2: 16:e2:dd:a4:d3:24:3d:d4:e8:1e:c9:52:c0:0d:80: 9d:f3:8a:e3:3d:42:6f:aa:05:e5:31:06:ae:dc:d3: f3:c6:55:e6:0a:e5:ec:6f:69:49:6f:fa:24:1c:0d: a7:aa:39:92:07:b2:32:6d:22:c1:0b:0d:00:63:61: c4:6a:a9:1b:f1:a5:8d:5d:71:be:97:4b:0e:a6:4f: 32:c5:be:e9:af:77:8a:35:24:65:f2:6c:85:f0:88: a0:03:0c:1f:ba:c2:a8:52:2e:34:98:11:67:50:6f: 9f:12:48:2a:2c:99:44:4a:b5:13:e8:88:80:41:25: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:76:90:4B:0A:CF:58:F8:EB:5C:83:CD:F9:B8:6E:40:82:ED:B2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c7:cb:04:2b:cd:43:e0:bf:c1:9b:5f:38:9e:87:64:9a:0e: cf:0e:61:e1:8a:f8:7d:b5:a5:87:30:36:40:8e:1d:3b:b9:bc: 35:3f:d5:a3:0b:e4:97:00:20:3b:df:b2:aa:1e:a4:60:b6:67: 27:5a:ef:9b:eb:01:8f:87:5d:42:99:e8:b4:49:bf:be:17:9d: e3:03:27:b9:7f:48:cf:09:c0:de:74:63:f3:27:9f:4b:ce:7f: e6:38:79:b5:dc:82:b1:bf:a8:0f:a9:9a:07:04:3e:a2:7f:a2: c3:7f:2e:10:b4:3c:7e:43:17:15:45:ad:f5:3d:77:c4:f1:1f: 65:43:4d:23:b2:c0:88:30:fd:26:b1:69:90:69:ea:14:c3:69: cf:46:d1:2b:ba:85:31:4f:25:48:61:97:18:f7:cb:93:7f:bf: 69:fb:db:8a:f7:18:f2:2d:77:8f:d5:3c:6a:bc:c4:49:c4:51: 7c:eb:7b:76:f0:44:8a:4d:ab:09:cd:d5:cb:91:c1:fc:a2:7f: bc:58:0b:4a:7c:17:e5:4e:ea:8b:b0:ce:e7:7c:ba:1c:04:e7: 79:01:2a:b0:07:94:e4:90:82:11:b0:0c:bd:e0:97:9d:11:86: 70:35:90:a9:bc:b4:19:bf:19:6e:d7:e2:27:ef:72:aa:dc:11: 1f:15:39:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TnyIy+KHwoERAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NjkwNTJlZDYtNjVjYS00MjhkLWIzY2QtYjZhMDg1NjkwZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/f3tHwOLEZN1GGxpUo1YXhNQIGMqTQ9GltB T4OnnxVh0N7QLZ2c8cGFTCvEiB4Y8p8LN0iDBZ9REpqD8yS4gSHwA0RW1MzqUqAK vxbO6PqAIOH2sMntpNvl8oP+RV61fJwNp98GEojHm4AvlYx/lCVfgchd39/7BKht P8AW3SzRVZatBcIW4t2k0yQ91OgeyVLADYCd84rjPUJvqgXlMQau3NPzxlXmCuXs b2lJb/okHA2nqjmSB7IybSLBCw0AY2HEaqkb8aWNXXG+l0sOpk8yxb7pr3eKNSRl 8myF8IigAwwfusKoUi40mBFnUG+fEkgqLJlESrUT6IiAQSWS+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ2kEsKz1j461yDzfm4bkCC7bL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVhYWVkZWQtMDdhZS0z MWQwLTliOTUtM2M1MzFiZWM3YzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLHywQrzUPgv8GbXzieh2SaDs8OYeGK+H21pYcwNkCOHTu5vDU/1aML 5JcAIDvfsqoepGC2Zyda75vrAY+HXUKZ6LRJv74XneMDJ7l/SM8JwN50Y/Mnn0vO f+Y4ebXcgrG/qA+pmgcEPqJ/osN/LhC0PH5DFxVFrfU9d8TxH2VDTSOywIgw/Sax aZBp6hTDac9G0Su6hTFPJUhhlxj3y5N/v2n724r3GPItd4/VPGq8xEnEUXzre3bw RIpNqwnN1cuRwfyif7xYC0p8F+VO6ouwzud8uhwE53kBKrAHlOSQghGwDL3gl50R hnA1kKm8tBm/GW7X4ifvcqrcER8VOas= -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:25 2025 by rpki-client