$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa File: 54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa (raw, json) Hash identifier: W9hVlLoY2pU2Z5WhV+6U5liF+VtYnCsgXvoFktoEThE= Subject key identifier: 04:CA:B9:F6:57:11:65:5A:CA:53:3C:F5:4E:69:28:E4:7D:1C:5A:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D12D40CC24A2ACCBCE9980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.96.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2d:40:cc:24:a2:ac:cb:ce:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=4219cc4a-016f-4fb3-93df-73333fbd23c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:4f:96:f5:9e:4f:a9:15:c3:8c:6b:b1:67: e2:25:24:ff:0b:1d:fa:bb:51:1e:6d:9c:9a:9e:23: c3:72:18:48:e0:ce:9b:5e:36:e1:7d:4d:d0:a2:03: 18:ca:2a:e1:f3:33:7d:4b:c9:c9:7e:75:cb:64:a3: 6f:9b:d8:bb:a4:24:5e:54:6a:bc:cb:a0:75:ae:90: eb:ac:99:12:59:2d:b1:56:d7:c2:a5:5c:ef:03:79: 02:2d:62:b3:bf:2e:f8:ce:4e:9d:b3:f3:8d:83:8f: cd:1e:e0:4c:ea:84:08:3b:7b:97:8d:3a:b8:4d:08: ae:7f:a2:8b:f6:ce:fe:16:fa:d6:2c:5b:d1:2a:c4: 41:cd:36:f4:bc:04:c1:e4:97:b7:ff:54:e2:48:f0: d5:fa:86:23:0e:e4:a5:6d:ff:64:0d:09:37:5a:20: c6:2a:62:76:1d:98:4a:e1:32:1c:f3:83:6f:e0:a7: 6c:c6:d6:95:90:18:8c:96:e7:85:27:fe:4d:87:55: a9:42:e5:03:f5:d3:d1:4e:3e:30:98:92:87:e3:5d: c4:1f:ca:13:38:a5:02:88:0a:8e:25:02:74:70:64: 02:5d:5b:e3:9d:35:d4:73:8a:7b:54:ec:ee:b6:95: da:d1:4e:8a:92:19:12:e6:67:bd:22:a6:36:9c:2f: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:B9:F6:57:11:65:5A:CA:53:3C:F5:4E:69:28:E4:7D:1C:5A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:43:5c:8d:8b:f0:fe:9f:04:20:93:a4:98:d9:d3:80:be:08: ff:04:f1:8f:ee:c4:cc:03:d4:e0:dc:68:9c:23:44:91:64:3f: 0d:01:34:73:72:81:e0:ea:ca:bd:cb:de:e0:f8:1b:db:44:ab: a9:84:ca:f5:67:bd:3b:4d:cd:3d:45:17:27:4a:83:36:81:c0: 68:e8:5e:2a:c4:87:86:5c:54:2e:9c:76:38:e0:7e:d1:31:3e: b9:af:08:0a:54:ee:b4:d0:06:97:ab:95:b7:bd:1e:c5:55:47: ac:11:0c:93:91:d3:7f:0b:71:5c:47:32:b7:cb:6a:9f:80:c6: 12:4f:70:00:99:65:4b:a5:c3:02:07:ba:d7:41:ce:93:a1:eb: bb:8d:37:5d:87:54:01:e0:3d:c9:11:c1:7b:19:8f:03:55:1d: fc:9f:97:05:19:85:1e:b0:de:55:97:a9:a9:25:ee:36:5f:e4: de:7f:d6:04:43:02:61:da:bc:9d:64:dc:6f:b9:d2:81:0f:0d: 03:ce:5e:47:d6:8b:53:9c:cd:55:c8:7d:c2:ed:22:ee:91:53: 4b:c3:7b:0a:47:97:5f:27:5f:51:f0:01:52:89:37:8e:d3:b7: bb:97:a4:f3:b2:27:d4:3d:e7:bd:49:44:dd:a3:a1:29:02:81: 65:d5:c9:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S1AzCSirMvOmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NDIxOWNjNGEtMDE2Zi00ZmIzLTkzZGYtNzMzMzNmYmQyM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh51PlvWeT6kVw4xrsWfiJST/Cx36u1EebZya niPDchhI4M6bXjbhfU3QogMYyirh8zN9S8nJfnXLZKNvm9i7pCReVGq8y6B1rpDr rJkSWS2xVtfCpVzvA3kCLWKzvy74zk6ds/ONg4/NHuBM6oQIO3uXjTq4TQiuf6KL 9s7+FvrWLFvRKsRBzTb0vATB5Je3/1TiSPDV+oYjDuSlbf9kDQk3WiDGKmJ2HZhK 4TIc84Nv4KdsxtaVkBiMlueFJ/5Nh1WpQuUD9dPRTj4wmJKH413EH8oTOKUCiAqO JQJ0cGQCXVvjnTXUc4p7VOzutpXa0U6KkhkS5me9IqY2nC+HEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATKufZXEWVaylM89U5pKOR9HFpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTRlZjZlZDUtZTBkNi0z NjFkLWJlYTgtYWRiNWEyY2VmNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhDXI2L8P6fBCCTpJjZ04C+CP8E8Y/uxMwD1ODcaJwjRJFkPw0BNHNy geDqyr3L3uD4G9tEq6mEyvVnvTtNzT1FFydKgzaBwGjoXirEh4ZcVC6cdjjgftEx PrmvCApU7rTQBperlbe9HsVVR6wRDJOR038LcVxHMrfLap+AxhJPcACZZUulwwIH utdBzpOh67uNN12HVAHgPckRwXsZjwNVHfyflwUZhR6w3lWXqakl7jZf5N5/1gRD AmHavJ1k3G+50oEPDQPOXkfWi1OczVXIfcLtIu6RU0vDewpHl18nX1HwAVKJN47T t7uXpPOyJ9Q9571JRN2joSkCgWXVye8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:59 2025 by rpki-client