$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa File: 4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa (raw, json) Hash identifier: ls7r0Mr9sPDPjA16RvpXpWq9VFbhqpPzRpvGelYUv00= Subject key identifier: BD:0D:E4:F9:72:B6:15:82:81:73:08:E8:55:B1:38:BD:DA:B7:6E:F3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D12DBB48CA7D0D95F1A590 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.97.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2d:bb:48:ca:7d:0d:95:f1:a5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=d524ce6e-3731-4800-971b-dccc1ca4480e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:6e:32:35:e6:fd:70:4b:55:b8:eb:83:42: 38:c5:52:e7:f9:9e:68:62:1d:e7:95:ab:cd:40:e4: 14:a7:a0:60:52:74:56:9c:92:0a:16:9b:8d:22:d9: 77:08:99:e7:58:9d:36:f2:8a:fa:4b:c1:9a:cb:20: a1:b9:e0:db:ec:6d:71:9a:cb:d0:46:c1:65:a7:33: 79:ed:5d:09:bf:1a:27:57:31:e4:9b:ba:e3:7b:68: 30:03:ad:25:c2:20:da:24:25:17:ff:21:dc:aa:35: 0d:98:ea:88:10:52:88:bb:7f:ac:8a:a8:fd:a3:07: f0:de:ba:0a:3f:f9:a7:ea:e1:6c:e0:08:df:be:a2: 01:5b:71:76:92:06:db:fd:79:2b:d5:e7:24:be:21: bd:e8:3a:a1:3b:56:4c:2a:fb:a2:17:32:43:74:28: f0:20:2b:55:84:68:f6:c2:a2:c3:96:97:9c:62:d3: 6b:57:62:e5:d1:fe:57:5e:5a:58:17:e3:44:eb:4e: a3:f1:0b:ed:86:a7:dc:ba:e6:d8:00:bd:00:1b:bb: 65:7d:7b:5a:80:75:fc:e1:67:34:d4:04:5d:8c:74: 8c:09:8f:25:60:4c:0c:21:c2:11:8b:8d:25:1e:8c: 88:54:ab:fa:3d:63:01:e1:68:3d:f0:e0:f9:72:f1: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:E4:F9:72:B6:15:82:81:73:08:E8:55:B1:38:BD:DA:B7:6E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:36:18:db:4f:04:f5:72:ef:51:a7:ee:0c:05:20:bc:7b:e2: 72:3b:7b:ce:04:55:56:d8:b4:35:3a:63:cb:ad:59:1f:c5:02: 8e:cd:b4:c7:c3:d5:73:8f:55:61:f8:2e:29:47:44:2e:1a:ed: 4d:b1:7d:c5:9f:66:c7:36:0b:53:ba:ad:60:67:85:ca:02:78: 8e:2e:37:6e:67:37:ff:5f:34:cf:4e:9a:f4:43:cb:6c:42:32: 3f:93:6d:ba:e1:7f:51:c6:68:00:29:dc:64:b3:20:14:31:6c: be:2d:76:d0:f4:b7:6f:c9:5b:e9:be:6e:ca:83:38:52:aa:4f: 5e:6f:a9:59:c6:03:e4:b4:2b:ef:f5:85:2b:47:72:9a:02:e3: 33:19:3f:31:c5:04:c4:0d:49:21:db:6e:5a:51:f6:51:53:9e: 39:f9:96:98:63:c3:43:69:38:46:a4:e0:56:88:f1:ac:74:a4: e4:b9:7c:94:b9:44:d0:00:cb:80:54:39:25:76:01:c4:98:ee: 13:5b:21:d4:0e:be:8d:bd:07:9c:aa:57:cc:e5:b0:00:53:9a: da:e8:7f:91:2d:03:81:57:43:8e:5e:aa:07:c7:9e:c2:25:c3: 82:27:88:d1:8b:ae:40:3c:55:0e:e6:32:a3:d1:ce:93:d8:c1: e1:53:f4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S27SMp9DZXxpZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDUyNGNlNmUtMzczMS00ODAwLTk3MWItZGNjYzFjYTQ0ODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOJuMjXm/XBLVbjrg0I4xVLn+Z5oYh3nlavN QOQUp6BgUnRWnJIKFpuNItl3CJnnWJ028or6S8GayyChueDb7G1xmsvQRsFlpzN5 7V0JvxonVzHkm7rje2gwA60lwiDaJCUX/yHcqjUNmOqIEFKIu3+siqj9owfw3roK P/mn6uFs4AjfvqIBW3F2kgbb/Xkr1eckviG96DqhO1ZMKvuiFzJDdCjwICtVhGj2 wqLDlpecYtNrV2Ll0f5XXlpYF+NE606j8QvthqfcuubYAL0AG7tlfXtagHX84Wc0 1ARdjHSMCY8lYEwMIcIRi40lHoyIVKv6PWMB4Wg98OD5cvF2CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0N5PlythWCgXMI6FWxOL3at27zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGFlNWFiNmItNTIyYy0z MTc4LWIwNDItZDExY2MzY2RjMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw2GNtPBPVy71Gn7gwFILx74nI7e84EVVbYtDU6Y8utWR/FAo7NtMfD 1XOPVWH4LilHRC4a7U2xfcWfZsc2C1O6rWBnhcoCeI4uN25nN/9fNM9OmvRDy2xC Mj+Tbbrhf1HGaAAp3GSzIBQxbL4tdtD0t2/JW+m+bsqDOFKqT15vqVnGA+S0K+/1 hStHcpoC4zMZPzHFBMQNSSHbblpR9lFTnjn5lphjw0NpOEak4FaI8ax0pOS5fJS5 RNAAy4BUOSV2AcSY7hNbIdQOvo29B5yqV8zlsABTmtrof5EtA4FXQ45eqgfHnsIl w4IniNGLrkA8VQ7mMqPRzpPYweFT9PQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:46 2025 by rpki-client