$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e5f1779-bb52-3684-b017-3066fef6903c.roa File: 4e5f1779-bb52-3684-b017-3066fef6903c.roa (raw, json) Hash identifier: 9ydkh1GxrIJQ47TYleYNltddOmH5zH+IVVk0Q2QamcI= Subject key identifier: F6:9A:02:69:13:E2:FD:E3:C7:8F:43:01:7C:82:23:C8:06:D8:B2:12 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D12D0BAB6934494CF50600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e5f1779-bb52-3684-b017-3066fef6903c.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.96.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2d:0b:ab:69:34:49:4c:f5:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=7217836f-7d8c-4ead-852f-02086fa5cb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:a3:13:36:2a:16:c8:f2:1b:a0:08:e4:62: 86:4b:63:82:9f:75:b2:4c:ce:f2:9c:a2:47:13:63: 40:d1:f4:c1:48:15:29:62:78:37:18:ff:94:27:3e: e0:e2:d6:be:2a:13:99:3e:5d:69:37:62:b7:6b:af: e8:3a:cf:1d:7d:51:3f:49:23:1b:c3:d3:1d:2a:d8: c1:72:23:cd:14:a4:53:59:16:11:a3:c9:19:a5:8a: fd:77:37:c5:3f:90:3c:65:39:50:73:60:d7:05:3b: 8d:9d:7c:f2:21:98:39:9b:42:9c:dc:66:08:81:e8: dd:52:eb:7f:26:89:71:7b:dc:d1:de:cc:a6:0d:01: 1f:39:2a:de:e5:2b:ca:89:9c:73:dd:d0:73:36:7c: 10:d6:9d:06:ba:8f:0a:c3:18:50:63:9c:b0:11:cf: 9a:44:29:e9:5f:6a:db:aa:33:d8:45:0c:43:2d:33: b4:83:48:9a:7c:54:99:e7:45:e6:a9:b3:32:70:40: 74:a4:ea:68:65:a8:ed:5c:0b:67:4f:e0:be:85:02: be:38:ca:c4:dd:f6:a3:a3:d6:ef:4e:7e:ac:69:71: 76:3a:bb:bc:3a:9e:71:4a:c2:33:d6:b8:18:c5:51: 5e:2f:b8:93:67:69:10:5e:9d:0c:d4:30:5b:b1:df: 4f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:02:69:13:E2:FD:E3:C7:8F:43:01:7C:82:23:C8:06:D8:B2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e5f1779-bb52-3684-b017-3066fef6903c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:42:68:21:58:aa:c2:d4:02:31:54:28:fa:9a:59:45:81:66: 04:b2:45:5a:d5:a3:a8:5c:82:5e:89:1f:a7:38:40:bc:d8:50: 09:85:b5:7e:55:f5:5a:fb:e8:06:50:6d:71:b6:e0:36:4b:ac: 25:0d:e2:ef:6e:36:88:39:ce:f7:6f:b7:7f:58:30:e6:fe:6e: bd:95:3e:d8:7b:90:0a:9b:12:52:50:4c:72:29:95:60:49:72: a6:0f:63:da:92:ce:97:bf:c1:f8:78:bc:5d:f7:0f:89:88:4d: 27:fb:08:30:5c:66:2e:6f:c2:16:2d:0a:2d:3d:36:ab:74:bb: 00:da:d4:19:10:10:3e:81:51:84:da:cf:87:b3:73:44:0b:c4: 6f:c7:ac:a1:00:5e:2f:8a:0f:89:94:d6:8c:a5:13:91:5d:81: 9b:ec:11:14:cf:23:ae:32:d7:d6:84:0e:76:24:88:96:a2:ba: 07:92:83:b0:02:47:c8:b5:a6:3a:1e:a7:53:76:b9:19:59:3b: 36:89:11:8b:0f:b4:30:f0:6e:d4:54:da:83:00:5c:e4:1b:1d: cb:c0:0a:68:38:75:ab:46:96:20:76:05:50:92:ac:bb:8d:01: dc:17:95:39:2e:01:e0:ca:f3:c0:6b:a0:d5:ca:d4:6d:c1:10: 33:11:49:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S0Lq2k0SUz1BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzIxNzgzNmYtN2Q4Yy00ZWFkLTg1MmYtMDIwODZmYTVjYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRKjEzYqFsjyG6AI5GKGS2OCn3WyTM7ynKJH E2NA0fTBSBUpYng3GP+UJz7g4ta+KhOZPl1pN2K3a6/oOs8dfVE/SSMbw9MdKtjB ciPNFKRTWRYRo8kZpYr9dzfFP5A8ZTlQc2DXBTuNnXzyIZg5m0Kc3GYIgejdUut/ Jolxe9zR3symDQEfOSre5SvKiZxz3dBzNnwQ1p0Guo8KwxhQY5ywEc+aRCnpX2rb qjPYRQxDLTO0g0iafFSZ50XmqbMycEB0pOpoZajtXAtnT+C+hQK+OMrE3fajo9bv Tn6saXF2Oru8Op5xSsIz1rgYxVFeL7iTZ2kQXp0M1DBbsd9PnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaaAmkT4v3jx49DAXyCI8gG2LISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU1ZjE3NzktYmI1Mi0z Njg0LWIwMTctMzA2NmZlZjY5MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdCaCFYqsLUAjFUKPqaWUWBZgSyRVrVo6hcgl6JH6c4QLzYUAmFtX5V 9Vr76AZQbXG24DZLrCUN4u9uNog5zvdvt39YMOb+br2VPth7kAqbElJQTHIplWBJ cqYPY9qSzpe/wfh4vF33D4mITSf7CDBcZi5vwhYtCi09Nqt0uwDa1BkQED6BUYTa z4ezc0QLxG/HrKEAXi+KD4mU1oylE5FdgZvsERTPI64y19aEDnYkiJaiugeSg7AC R8i1pjoep1N2uRlZOzaJEYsPtDDwbtRU2oMAXOQbHcvACmg4datGliB2BVCSrLuN AdwXlTkuAeDK88BroNXK1G3BEDMRSeI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:32 2025 by rpki-client