$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa File: 25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa (raw, json) Hash identifier: qpPGkWU5vFQDQy9dDSHkZ1wMOTJqTHAKcrxbTfcDV1I= Subject key identifier: 85:F8:34:EF:8F:32:A4:C9:16:12:CD:A9:A7:9D:BF:CB:DE:E6:6F:5D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F71535DCAAF2A5F3AEBE2A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.97.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:35:dc:aa:f2:a5:f3:ae:be:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=15e8096a-6f69-40e4-baed-93a646644452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:70:d7:ec:74:36:c1:10:00:ad:9e:46:1f: 26:bf:73:7c:7b:30:5f:37:3e:5f:35:13:08:31:5f: b4:e8:e7:ff:b4:8c:e3:46:4e:88:cb:bb:32:ab:d6: 4a:7c:92:4b:e7:7e:d3:8e:b9:85:97:49:77:3e:5f: b9:c9:14:d1:c1:ae:e5:53:17:19:c7:60:98:1a:21: f0:97:74:95:f3:e6:c3:2d:fc:14:97:00:bb:53:ae: ca:91:9a:c9:2e:ac:0e:7d:c4:09:4c:8b:c4:a9:8f: dc:0e:33:30:2b:84:3a:f4:0a:cd:ec:88:e4:28:4b: 18:71:91:7b:c2:98:e2:77:2f:aa:e3:9e:c2:7d:0d: f9:ee:c4:cb:04:68:a8:56:f4:2a:31:64:81:9c:80: 9a:de:da:92:3c:09:f5:ea:cc:c4:65:6e:52:ae:af: bb:20:ea:41:bc:ea:ff:6c:4b:b1:63:92:7a:ca:2d: 8f:29:91:ff:ed:42:65:fd:5e:cc:7a:d5:6a:9f:63: 48:12:a1:46:89:0f:35:ae:e5:ff:46:f1:3c:ad:ed: 16:26:22:75:66:b9:60:f9:a4:e7:70:ae:cb:64:d0: be:a0:40:51:ea:83:55:b2:66:fa:37:d7:9a:e6:e2: 5f:4d:ca:76:b6:9b:86:d2:60:9e:e4:38:39:d6:55: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F8:34:EF:8F:32:A4:C9:16:12:CD:A9:A7:9D:BF:CB:DE:E6:6F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25aaeded-07ae-31d0-9b95-3c531bec7c1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:61:a8:f0:1c:ca:4a:de:9a:c4:8f:a6:a9:68:10:07:48:7a: 51:84:d8:47:7a:c2:9d:db:2f:94:57:a0:07:a7:2e:8e:1b:e9: 13:f1:dd:bc:89:58:61:bd:00:1d:56:dc:6a:c2:ba:14:0d:0c: 3f:8e:e8:38:4f:2c:8c:9e:38:5e:35:c3:76:db:56:1b:d3:2b: ab:1f:7c:82:59:ba:4b:dd:15:2f:9b:41:49:f1:4e:bd:23:97: e6:c1:1b:01:5c:7f:9b:09:ea:5e:a6:1f:60:6e:cd:35:97:18: 4c:4d:d7:b0:a2:c4:f4:37:dc:e2:ed:dd:05:85:86:d6:f8:47: 22:40:91:36:0e:fc:70:e7:c8:d2:11:cf:d4:1f:ac:c1:e3:8a: 8b:6d:67:21:47:2c:1a:14:d1:13:bc:7d:ef:b9:5a:e1:39:57: 6a:47:b8:2d:c6:b3:96:5b:c6:b7:2a:f8:13:9a:a2:51:85:88: 5f:a9:84:c7:34:f5:a7:4d:10:bd:00:be:ca:0e:d2:7e:ff:3d: 83:6d:a7:c2:02:d5:e7:be:99:fd:f1:59:ac:b4:ab:01:be:28: 57:8f:78:57:eb:34:0f:2d:51:c6:28:aa:33:b1:8b:cf:1a:92: a6:d0:77:0b:2c:71:16:3a:e7:34:64:a5:39:c0:f3:83:ad:34: 29:38:21:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTXcqvKl866+KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MTVlODA5NmEtNmY2OS00MGU0LWJhZWQtOTNhNjQ2NjQ0NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w1w1+x0NsEQAK2eRh8mv3N8ezBfNz5fNRMI MV+06Of/tIzjRk6Iy7syq9ZKfJJL537TjrmFl0l3Pl+5yRTRwa7lUxcZx2CYGiHw l3SV8+bDLfwUlwC7U67KkZrJLqwOfcQJTIvEqY/cDjMwK4Q69ArN7IjkKEsYcZF7 wpjidy+q457CfQ357sTLBGioVvQqMWSBnICa3tqSPAn16szEZW5Srq+7IOpBvOr/ bEuxY5J6yi2PKZH/7UJl/V7MetVqn2NIEqFGiQ81ruX/RvE8re0WJiJ1Zrlg+aTn cK7LZNC+oEBR6oNVsmb6N9ea5uJfTcp2tpuG0mCe5Dg51lX54QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX4NO+PMqTJFhLNqaedv8ve5m9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVhYWVkZWQtMDdhZS0z MWQwLTliOTUtM2M1MzFiZWM3YzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9hqPAcykremsSPpqloEAdIelGE2Ed6wp3bL5RXoAenLo4b6RPx3byJ WGG9AB1W3GrCuhQNDD+O6DhPLIyeOF41w3bbVhvTK6sffIJZukvdFS+bQUnxTr0j l+bBGwFcf5sJ6l6mH2BuzTWXGExN17CixPQ33OLt3QWFhtb4RyJAkTYO/HDnyNIR z9QfrMHjiottZyFHLBoU0RO8fe+5WuE5V2pHuC3Gs5Zbxrcq+BOaolGFiF+phMc0 9adNEL0AvsoO0n7/PYNtp8IC1ee+mf3xWay0qwG+KFePeFfrNA8tUcYoqjOxi88a kqbQdwsscRY65zRkpTnA84OtNCk4IRs= -----END CERTIFICATE-----Generated at Tue Jul 1 14:07:30 2025 by rpki-client