$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa File: 458603c9-3531-346e-9347-36a9d0e900eb.roa (raw, json) Hash identifier: b8lmmZAvLJinLdnWL+QyMmyMKDdTehGA7CBwh7rom0A= Subject key identifier: B1:4D:38:88:28:42:E8:FD:9A:7F:D6:41:28:9D:A1:0A:DD:E0:02:FB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A1E2ABD61C750830ABA20E680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.107.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:bd:61:c7:50:83:0a:ba:20:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=fbe71d5e-8c88-4cc8-bda0-6bc626c2b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:ef:aa:ad:d3:58:40:29:c0:9c:c0:1c:bc: 3c:60:f0:64:07:9d:e4:6c:73:5f:ec:99:5a:42:50: 45:18:08:cd:db:5a:c7:1c:b9:e5:b3:6f:a5:aa:42: 4a:25:7b:94:c5:35:5f:23:2c:ba:b4:b4:9e:74:69: e7:f0:1e:c4:bb:7c:b6:a1:1d:17:ca:d4:98:56:39: 94:40:3e:ff:77:00:8c:fc:f9:70:6c:6e:1b:bc:da: c0:c5:f3:cd:a3:48:2e:c9:cb:52:06:66:f8:02:09: 79:2f:e6:b5:b9:51:69:4d:12:97:ce:a2:0c:cb:01: 43:db:21:ca:85:d3:da:95:23:b5:0d:21:20:1b:dc: 67:db:b5:84:1f:d6:b1:51:60:48:06:1e:38:3b:d2: fc:a6:d0:67:5a:fa:08:e8:bc:6d:94:f5:79:3d:f9: 81:11:3a:c3:6f:3e:df:b1:a1:d9:07:75:0e:26:41: 31:cb:39:41:82:10:98:6f:61:28:3e:79:f6:e3:51: 77:37:d8:bd:67:ac:0f:e6:ba:07:59:12:28:eb:c3: bf:b1:3a:a4:04:30:62:5f:e6:b6:f1:ae:01:5e:c0: f4:14:9b:89:55:7d:62:ae:f1:0a:ad:e1:98:fc:1f: 19:77:c3:fa:4e:bc:95:cc:d6:d0:a4:3a:ab:ce:8c: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:38:88:28:42:E8:FD:9A:7F:D6:41:28:9D:A1:0A:DD:E0:02:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b7:2e:dd:a9:69:be:6c:5a:df:30:8b:fa:d7:c0:cd:2a:5a: e1:5c:a1:c5:85:f5:13:ef:0a:73:c5:ce:4d:f2:81:33:56:34: 7b:3e:a5:ae:27:3c:d1:91:06:d0:f4:44:a4:94:81:ef:a6:5c: 25:5d:16:a4:9d:13:62:4f:db:b1:83:96:3d:16:21:27:e3:ae: 51:b7:ec:48:eb:1b:c4:fa:bd:9c:10:6f:03:10:a6:e0:b8:bc: ba:9a:34:71:d1:db:17:3b:04:35:0e:88:98:02:84:f1:5c:7f: f6:79:87:69:5f:38:e4:ad:42:d3:04:24:f2:61:f3:de:6e:a8: 76:ca:7f:e0:8d:17:d5:d6:83:f0:32:9d:9c:a1:88:e1:c6:55: 02:6a:97:cf:bd:a9:1e:cf:b1:64:85:33:12:71:e7:82:e2:8b: 72:f0:7d:36:bc:58:62:b8:a0:75:af:69:fd:db:e6:f3:8e:ec: 4f:65:f3:72:f1:1d:89:92:1a:79:60:25:2f:6b:b1:0e:76:dd: a2:b4:b2:c2:a2:ac:a3:f0:a1:5c:38:4e:02:d1:64:83:43:80: 36:b9:fd:71:6d:15:56:07:83:03:0c:8a:da:57:91:a6:23:e5: 50:ee:26:40:8b:c5:01:86:4d:fd:1e:0a:ed:1f:1b:77:2d:52: c2:43:ec:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKr1hx1CDCrog5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk ZmJlNzFkNWUtOGM4OC00Y2M4LWJkYTAtNmJjNjI2YzJiMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkPvqq3TWEApwJzAHLw8YPBkB53kbHNf7Jla QlBFGAjN21rHHLnls2+lqkJKJXuUxTVfIyy6tLSedGnn8B7Eu3y2oR0XytSYVjmU QD7/dwCM/PlwbG4bvNrAxfPNo0guyctSBmb4Agl5L+a1uVFpTRKXzqIMywFD2yHK hdPalSO1DSEgG9xn27WEH9axUWBIBh44O9L8ptBnWvoI6LxtlPV5PfmBETrDbz7f saHZB3UOJkExyzlBghCYb2EoPnn241F3N9i9Z6wP5roHWRIo68O/sTqkBDBiX+a2 8a4BXsD0FJuJVX1irvEKreGY/B8Zd8P6TryVzNbQpDqrzozHRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFNOIgoQuj9mn/WQSidoQrd4AL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDU4NjAzYzktMzUzMS0z NDZlLTkzNDctMzZhOWQwZTkwMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi3Lt2pab5sWt8wi/rXwM0qWuFcocWF9RPvCnPFzk3ygTNWNHs+pa4n PNGRBtD0RKSUge+mXCVdFqSdE2JP27GDlj0WISfjrlG37EjrG8T6vZwQbwMQpuC4 vLqaNHHR2xc7BDUOiJgChPFcf/Z5h2lfOOStQtMEJPJh895uqHbKf+CNF9XWg/Ay nZyhiOHGVQJql8+9qR7PsWSFMxJx54Lii3LwfTa8WGK4oHWvaf3b5vOO7E9l83Lx HYmSGnlgJS9rsQ523aK0ssKirKPwoVw4TgLRZINDgDa5/XFtFVYHgwMMitpXkaYj 5VDuJkCLxQGGTf0eCu0fG3ctUsJD7BI= -----END CERTIFICATE-----Generated at Tue Jul 1 16:58:38 2025 by rpki-client