$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa File: 384bb31c-f694-300f-aef5-7e993598c12e.roa (raw, json) Hash identifier: 1svM1Dox15ymJVHosBPc+yEVKHoqxcD6cmd5eWfvpC4= Subject key identifier: 8E:AF:C5:3F:7C:CB:EA:D3:08:D7:53:74:2C:FB:BA:47:4E:EA:5D:9B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F715377D02E95CA4F5AA3F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.97.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:37:7d:02:e9:5c:a4:f5:aa:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=667e7139-1c11-4a6d-9aa3-d97709071172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:ee:dc:c0:b1:bb:d1:8f:ff:5f:38:f7:50: 41:ea:87:d5:f9:f7:30:1e:96:e2:fa:04:9c:eb:2e: 2b:2d:91:ef:78:10:05:fa:a1:d9:d9:93:f7:f4:8a: 1c:72:d3:3e:d9:c9:7b:d0:ed:b4:92:1d:72:f7:5d: 30:e6:6d:82:cf:18:45:0e:71:19:f0:74:0d:35:18: cf:d6:45:00:6c:ac:f8:34:65:62:54:5a:99:c1:82: 73:22:03:d3:a6:06:ba:f0:02:e2:cc:7f:0c:aa:55: 3f:f4:a7:ed:2e:bb:41:30:3c:63:4a:db:d0:fe:c3: 5a:e4:d2:bc:d5:29:32:e9:5c:0b:b4:be:dc:55:16: a2:9a:f4:9e:72:f6:af:72:ab:a7:96:cc:15:3f:85: c9:82:c1:83:11:d9:2f:b4:39:5b:60:d2:04:15:74: 45:77:fc:4a:83:97:40:ab:7a:da:ea:20:95:ae:2c: 6a:71:46:db:c1:a2:0c:ad:ee:0f:c9:ec:26:8a:3c: 51:bb:e6:15:e4:19:e0:dc:4d:a5:fc:2d:ee:55:69: e0:2f:a8:e3:ef:70:e3:6d:0b:bb:9f:18:10:f5:5e: 53:b9:29:dc:2d:f7:46:ea:8f:95:cd:8d:37:87:e3: 51:ea:c4:66:9d:f3:0e:c2:85:83:0d:e9:bb:4e:16: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:C5:3F:7C:CB:EA:D3:08:D7:53:74:2C:FB:BA:47:4E:EA:5D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:46:88:1d:6d:a9:ff:ca:fd:05:45:1f:a5:ac:7e:27:85:c1: 3f:d4:5d:0b:8f:c1:76:04:f8:87:67:d0:3a:d7:4b:f5:28:03: b5:57:ef:53:59:18:8d:65:05:5c:53:b2:0b:e0:8d:3f:21:04: 38:61:b4:31:68:7c:af:47:54:38:0f:ef:20:77:4b:c7:14:95: 32:d1:dc:15:de:e8:a8:4a:e5:4f:55:46:85:ee:a8:cc:18:27: 1f:f3:15:44:17:ce:02:98:ca:7e:88:3e:39:da:7b:e1:cf:c4: e5:ce:c3:39:04:05:0e:e2:09:f8:b3:d5:f0:1f:09:1a:af:b3: ef:41:93:9a:52:b6:da:6c:73:5b:36:1b:ec:7d:4f:90:42:48: 3e:e3:cc:9c:26:27:31:ac:9a:04:3f:5b:e6:82:9d:ba:64:96: f0:58:a1:d4:24:5a:18:3d:d4:b0:5b:0c:8d:12:fa:a7:6f:e4: 05:d6:0e:1e:6f:0a:a2:7b:a1:ed:f9:93:d0:f8:43:f0:a8:da: 34:43:6c:d3:d6:42:83:42:85:89:fa:10:6e:10:dc:5e:35:86: f3:bc:c3:a0:0e:d6:b4:05:16:99:f3:af:f8:09:2e:a6:57:a2: 68:bb:dc:d3:1c:b1:0d:0e:71:d5:24:78:a0:e6:d5:7a:0e:d6: 7d:86:ad:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTd9AulcpPWqPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NjY3ZTcxMzktMWMxMS00YTZkLTlhYTMtZDk3NzA5MDcxMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFnu3MCxu9GP/18491BB6ofV+fcwHpbi+gSc 6y4rLZHveBAF+qHZ2ZP39IocctM+2cl70O20kh1y910w5m2CzxhFDnEZ8HQNNRjP 1kUAbKz4NGViVFqZwYJzIgPTpga68ALizH8MqlU/9KftLrtBMDxjStvQ/sNa5NK8 1Sky6VwLtL7cVRaimvSecvavcqunlswVP4XJgsGDEdkvtDlbYNIEFXRFd/xKg5dA q3ra6iCVrixqcUbbwaIMre4PyewmijxRu+YV5Bng3E2l/C3uVWngL6jj73DjbQu7 nxgQ9V5TuSncLfdG6o+VzY03h+NR6sRmnfMOwoWDDem7Thb6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6vxT98y+rTCNdTdCz7ukdO6l2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg0YmIzMWMtZjY5NC0z MDBmLWFlZjUtN2U5OTM1OThjMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRGiB1tqf/K/QVFH6WsfieFwT/UXQuPwXYE+Idn0DrXS/UoA7VX71NZ GI1lBVxTsgvgjT8hBDhhtDFofK9HVDgP7yB3S8cUlTLR3BXe6KhK5U9VRoXuqMwY Jx/zFUQXzgKYyn6IPjnae+HPxOXOwzkEBQ7iCfiz1fAfCRqvs+9Bk5pSttpsc1s2 G+x9T5BCSD7jzJwmJzGsmgQ/W+aCnbpklvBYodQkWhg91LBbDI0S+qdv5AXWDh5v CqJ7oe35k9D4Q/Co2jRDbNPWQoNChYn6EG4Q3F41hvO8w6AO1rQFFpnzr/gJLqZX omi73NMcsQ0OcdUkeKDm1XoO1n2GrQU= -----END CERTIFICATE-----Generated at Tue Jul 1 09:36:09 2025 by rpki-client