$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/556accbf-f595-3830-8b2e-35934881c54b.roa File: 556accbf-f595-3830-8b2e-35934881c54b.roa (raw, json) Hash identifier: P0lNdcWe+PhY3qTNrTcPDDqfJXav6IMMRYVpd1YOzcM= Subject key identifier: 34:92:8D:6C:D5:EA:89:EE:F9:09:3A:CD:9C:7C:3E:A9:B4:8C:A2:D0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D12D9AC6D90CB62E8ACE40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/556accbf-f595-3830-8b2e-35934881c54b.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.96.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2d:9a:c6:d9:0c:b6:2e:8a:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=a3031c23-e4ae-44be-a3a0-d94185f35a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:2a:37:ed:e8:3c:d3:46:4a:3a:6a:63:4d: eb:14:39:66:2b:56:b1:ac:0b:d1:03:3e:7c:28:04: 39:77:ad:9e:04:3b:9b:52:8f:1c:f0:ba:e8:32:bc: f7:76:ac:5c:a6:f7:3e:53:1c:be:f1:d6:58:ef:a6: c3:5f:ed:4a:21:ab:90:11:1f:e7:bd:3b:ba:0b:e7: 6d:48:89:80:ca:2b:3d:6a:fc:4b:db:bd:d1:2d:3a: 7b:51:14:c4:56:65:de:9f:b5:26:00:b0:13:95:68: 9e:c2:6a:b0:2e:90:d6:41:c3:d4:a4:25:28:1f:a5: 3a:d9:17:4b:87:92:40:58:08:40:00:ba:50:4e:2e: 4f:15:e2:2b:9b:cf:e8:98:d9:34:1d:08:4e:68:2f: d5:e6:dd:71:d4:fe:5b:cd:75:e3:98:85:0f:68:3a: 82:18:64:c8:15:67:81:01:fd:cb:9d:98:7a:41:dc: e4:65:e0:20:a2:2a:a7:9e:95:8f:7e:d9:a9:f4:da: 49:30:c9:62:02:ac:f5:07:ad:d1:18:b7:e5:56:1b: c6:1a:0f:1a:8c:93:31:e5:72:ec:40:d2:6c:98:d3: ec:a0:bf:c7:9a:ff:31:81:2c:c6:e9:47:0c:2e:63: 43:b8:75:55:e7:1e:23:fb:5a:71:21:cc:79:0d:6b: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:92:8D:6C:D5:EA:89:EE:F9:09:3A:CD:9C:7C:3E:A9:B4:8C:A2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/556accbf-f595-3830-8b2e-35934881c54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7c:f0:f5:cd:46:a3:e0:58:33:ef:29:dc:d4:6d:fd:2f:fa: ab:97:22:5b:23:49:22:62:d1:15:f6:cb:3d:16:12:60:b2:00: 35:50:35:3c:9c:68:1e:77:34:cb:4d:89:d4:37:1e:c9:39:85: 07:ab:49:b3:69:3a:42:0a:f9:e6:c3:af:3c:ff:0a:8d:cd:9c: d6:f4:cd:64:1a:a0:8d:f8:0b:5f:16:70:19:c6:9b:19:2d:ec: d9:0c:fe:86:41:ed:5b:b2:e0:5d:34:3e:4b:01:c7:1d:39:ad: 27:97:70:b9:e6:87:60:92:6e:de:54:9f:6d:c6:ff:1a:be:28: ff:a4:6b:bb:42:c7:98:79:c2:41:7c:81:a9:46:72:83:ae:2e: 75:83:3a:90:b4:01:2c:f2:97:43:15:73:a5:6d:af:3a:6a:64: 69:fb:5c:fa:ac:43:81:33:fd:22:7a:41:6f:8c:5b:60:7d:83: b6:9d:c9:05:1a:af:5c:5e:85:2f:9a:f0:ed:6d:c4:6c:0b:3c: ca:44:06:de:61:cb:2f:ba:8c:f1:b7:f0:e3:42:cf:9a:bd:24: 52:18:b5:d5:1e:38:df:53:30:43:67:5f:4f:de:9d:f9:aa:ac: 19:10:1d:87:8e:a9:ac:ed:64:a7:b5:28:d7:77:35:9c:f9:fb: 8e:ad:35:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S2axtkMti6KzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YTMwMzFjMjMtZTRhZS00NGJlLWEzYTAtZDk0MTg1ZjM1YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAwqN+3oPNNGSjpqY03rFDlmK1axrAvRAz58 KAQ5d62eBDubUo8c8LroMrz3dqxcpvc+Uxy+8dZY76bDX+1KIauQER/nvTu6C+dt SImAyis9avxL273RLTp7URTEVmXen7UmALATlWiewmqwLpDWQcPUpCUoH6U62RdL h5JAWAhAALpQTi5PFeIrm8/omNk0HQhOaC/V5t1x1P5bzXXjmIUPaDqCGGTIFWeB Af3LnZh6QdzkZeAgoiqnnpWPftmp9NpJMMliAqz1B63RGLflVhvGGg8ajJMx5XLs QNJsmNPsoL/Hmv8xgSzG6UcMLmNDuHVV5x4j+1pxIcx5DWsgjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSSjWzV6onu+Qk6zZx8Pqm0jKLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTU2YWNjYmYtZjU5NS0z ODMwLThiMmUtMzU5MzQ4ODFjNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ88PXNRqPgWDPvKdzUbf0v+quXIlsjSSJi0RX2yz0WEmCyADVQNTyc aB53NMtNidQ3Hsk5hQerSbNpOkIK+ebDrzz/Co3NnNb0zWQaoI34C18WcBnGmxkt 7NkM/oZB7Vuy4F00PksBxx05rSeXcLnmh2CSbt5Un23G/xq+KP+ka7tCx5h5wkF8 galGcoOuLnWDOpC0ASzyl0MVc6VtrzpqZGn7XPqsQ4Ez/SJ6QW+MW2B9g7adyQUa r1xehS+a8O1txGwLPMpEBt5hyy+6jPG38ONCz5q9JFIYtdUeON9TMENnX0/enfmq rBkQHYeOqaztZKe1KNd3NZz5+46tNYk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:23 2025 by rpki-client