$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c346a1a-0a0a-3ceb-b0de-69e9d843a61f.roa File: 4c346a1a-0a0a-3ceb-b0de-69e9d843a61f.roa (raw, json) Hash identifier: a1kEVpPxzuKkRb7kbNGMV5v9MhVJVGdHIgSAL01f6XI= Subject key identifier: 59:50:1B:80:B3:2A:2E:55:FC:1D:FE:0C:73:A5:B9:86:04:E9:FF:6C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853CDFDCC82733F9B9F500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c346a1a-0a0a-3ceb-b0de-69e9d843a61f.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 72.85.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3c:df:dc:c8:27:33:f9:b9:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=201838e0-0839-4d59-a831-331162596076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:90:53:5a:37:25:e0:b9:7e:d7:43:27:d7: 8c:eb:45:03:c4:b0:c1:88:d7:2e:ae:50:57:e8:37: 1e:00:6f:2c:ea:a5:67:d8:ce:ee:91:8c:83:7d:48: b9:de:b4:40:41:4b:11:48:8d:bd:80:a6:99:99:0a: a3:06:5a:ef:07:3d:99:e8:7d:57:96:c6:6d:6e:6d: 92:70:cb:62:70:85:d7:97:3b:c1:ad:1e:a8:2f:61: 5d:e6:0e:a1:2a:aa:8b:32:e5:0d:b2:45:2f:c2:e1: 3f:5d:f1:e6:97:b4:d6:cd:90:26:4b:5b:b4:b8:8f: f3:7e:ae:78:29:f4:f2:d8:1d:17:ca:08:c8:4c:9e: 28:66:7e:97:1a:d1:7b:dd:2c:84:d7:11:fd:6d:36: 39:0e:0b:e8:93:6e:fb:fe:c1:0c:40:15:f6:bb:06: 1b:0b:70:c7:75:67:db:60:9e:30:d0:62:7e:cd:e7: 6d:b7:4d:79:9c:f3:b9:4d:ea:52:44:37:17:f0:2d: 95:aa:9c:73:31:84:87:6d:83:bd:03:c0:e1:96:de: 52:7a:3b:16:39:b0:7b:3e:9d:ea:f7:c1:79:e2:36: 7c:4d:0a:97:8e:6a:36:43:bb:37:fa:68:27:a1:cb: 62:9f:cc:79:9c:f2:f6:a7:e9:d8:b5:f5:32:99:58: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:50:1B:80:B3:2A:2E:55:FC:1D:FE:0C:73:A5:B9:86:04:E9:FF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c346a1a-0a0a-3ceb-b0de-69e9d843a61f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.85.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:74:4d:e4:b4:48:15:8a:3d:ee:21:ef:79:b0:b9:41:37:cb: fb:01:9b:ad:a9:57:99:ee:e4:86:fb:39:a3:ba:1c:19:f0:df: 09:e4:c2:b7:55:2f:cd:31:ff:2f:67:4d:ca:3c:2d:fd:26:62: f5:be:2d:7e:37:33:2b:8b:90:de:9e:1b:ea:69:a8:ac:41:45: 6d:95:13:7e:0d:f3:a1:b0:73:d8:85:f3:ae:08:14:bb:41:54: 46:cc:71:58:f2:ff:15:82:20:d3:37:ac:d8:8d:2c:92:6f:82: 52:ee:f3:96:7a:c2:93:68:d4:28:91:d9:ef:e9:75:71:1a:c4: 28:aa:de:c5:95:18:3e:67:1c:c1:51:d0:e0:90:25:10:d2:bc: be:95:4c:49:6f:c1:dc:28:76:c8:29:7f:f7:00:c3:ff:4f:3d: b1:a4:47:30:ff:6b:26:9f:a2:a8:2a:b2:90:d4:70:47:fb:13: 8f:f0:74:23:54:9e:1c:43:87:0c:c3:92:f6:71:80:3e:f4:e4: 84:e4:7e:d8:77:11:dc:d9:a1:a0:c8:57:0c:78:a4:c8:42:a2: a9:93:0c:72:e0:0c:25:88:3e:ed:b3:fb:1a:ce:f0:bf:47:79: 8f:11:bf:52:d6:c4:01:cd:fd:07:b8:47:d3:72:8b:53:bd:a0: f0:d7:62:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTzf3MgnM/m59QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MjAxODM4ZTAtMDgzOS00ZDU5LWE4MzEtMzMxMTYyNTk2MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLuQU1o3JeC5ftdDJ9eM60UDxLDBiNcurlBX 6DceAG8s6qVn2M7ukYyDfUi53rRAQUsRSI29gKaZmQqjBlrvBz2Z6H1XlsZtbm2S cMticIXXlzvBrR6oL2Fd5g6hKqqLMuUNskUvwuE/XfHml7TWzZAmS1u0uI/zfq54 KfTy2B0XygjITJ4oZn6XGtF73SyE1xH9bTY5Dgvok277/sEMQBX2uwYbC3DHdWfb YJ4w0GJ+zedtt015nPO5TepSRDcX8C2VqpxzMYSHbYO9A8Dhlt5SejsWObB7Pp3q 98F54jZ8TQqXjmo2Q7s3+mgnoctin8x5nPL2p+nYtfUymViC9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlQG4CzKi5V/B3+DHOluYYE6f9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGMzNDZhMWEtMGEwYS0z Y2ViLWIwZGUtNjllOWQ4NDNhNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR0TeS0SBWKPe4h73mwuUE3y/sBm62pV5nu5Ib7OaO6HBnw3wnkwrdV L80x/y9nTco8Lf0mYvW+LX43MyuLkN6eG+ppqKxBRW2VE34N86Gwc9iF864IFLtB VEbMcVjy/xWCINM3rNiNLJJvglLu85Z6wpNo1CiR2e/pdXEaxCiq3sWVGD5nHMFR 0OCQJRDSvL6VTElvwdwodsgpf/cAw/9PPbGkRzD/ayafoqgqspDUcEf7E4/wdCNU nhxDhwzDkvZxgD705ITkfth3EdzZoaDIVwx4pMhCoqmTDHLgDCWIPu2z+xrO8L9H eY8Rv1LWxAHN/Qe4R9Nyi1O9oPDXYsM= -----END CERTIFICATE-----Generated at Tue Jul 1 16:44:22 2025 by rpki-client