$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa File: 84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa (raw, json) Hash identifier: 69XOVjHtZ02+l1zOzwAwa0qKSTBloml47Ee0+n7oTvI= Subject key identifier: 4A:05:4C:52:4D:49:D3:76:D8:C3:CD:28:06:9C:46:C6:AC:FF:E3:7D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F71538AA683B82F9F86AF500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.104.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:38:aa:68:3b:82:f9:f8:6a:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=4aa99211-b856-4dd8-9135-4813234fa087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:73:22:07:c9:4c:eb:17:85:78:2f:1d:bd: be:40:58:70:e1:33:08:5d:e0:80:1d:f1:ae:2e:25: 4f:d3:0f:0c:62:4d:4c:0a:f8:26:35:ee:f6:37:85: 17:52:ba:50:92:fa:3f:e5:4a:c9:b0:ed:26:f7:73: b6:c3:58:bf:bf:31:60:de:72:8d:86:33:ad:43:6e: 38:c8:2f:b3:05:03:2b:cc:7a:62:f0:c6:85:d3:58: a9:a9:94:7d:d0:a1:7e:fe:4a:ba:48:25:05:6f:82: b5:90:30:4d:4a:66:64:ef:dd:b4:48:4f:e7:91:c0: b7:08:ba:42:35:ed:04:6f:0e:53:53:82:34:a2:92: f9:65:11:5f:a8:af:fc:2a:08:c7:8f:bc:1a:70:b8: 6a:68:c4:80:14:d5:b0:78:79:16:35:63:29:3c:a0: 93:90:6b:bd:db:dc:9e:23:bc:42:86:db:3a:8e:97: b9:a8:ee:fd:95:0f:dc:59:da:3d:0e:c6:7f:75:e7: c8:f0:63:f0:22:8b:31:74:05:1f:bd:41:40:7a:08: 4c:55:21:1d:82:64:06:e8:9b:aa:40:73:5c:c4:6e: 5b:81:4f:4c:f1:87:d3:c5:47:82:cd:d6:da:f0:5d: b5:91:fc:13:fd:03:38:a4:a1:af:5d:54:d9:fd:93: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:05:4C:52:4D:49:D3:76:D8:C3:CD:28:06:9C:46:C6:AC:FF:E3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d0:9c:d3:03:11:74:61:35:f7:2e:8d:82:70:2a:16:c4:4c: 89:65:fc:79:e6:5d:6a:02:74:f7:71:2c:f6:f1:35:a8:73:1d: 05:4e:b5:03:e9:da:10:fd:45:1f:2b:32:91:8b:68:19:fa:43: b7:60:53:5f:f0:16:9f:80:49:86:c0:c0:67:06:2c:dd:47:57: 87:81:26:fa:a3:f2:78:a0:b0:f5:eb:da:65:ef:fb:f6:2f:b2: 0d:73:83:3c:ff:c0:fa:21:be:37:a1:b5:32:69:75:be:3f:55: 05:ce:b4:4d:50:94:a2:5b:90:a3:4c:ca:4e:95:d9:00:89:b4: a3:24:f2:37:29:f8:f3:0f:0d:ac:40:09:2b:ee:6d:dc:96:f6: 1b:00:f7:a0:3e:a1:67:78:a4:31:25:ba:64:6a:f8:58:46:4f: 7f:d6:46:5c:e2:db:b5:c2:d5:7c:bc:6d:48:69:62:fe:86:27: dd:7c:ac:e9:46:07:9e:23:68:44:9a:1c:c7:1f:fc:1f:f4:97: 1f:9a:b4:96:73:64:0b:7e:9c:b4:ce:1a:31:b0:49:cd:e3:c9: df:eb:6d:d6:3f:31:98:12:a5:dd:a4:6d:44:81:45:28:53:c6: 94:d6:7d:28:2d:09:75:12:4b:30:49:61:b3:00:c2:e5:24:f1: 5c:df:5c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTiqaDuC+fhq9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NGFhOTkyMTEtYjg1Ni00ZGQ4LTkxMzUtNDgxMzIzNGZhMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3BzIgfJTOsXhXgvHb2+QFhw4TMIXeCAHfGu LiVP0w8MYk1MCvgmNe72N4UXUrpQkvo/5UrJsO0m93O2w1i/vzFg3nKNhjOtQ244 yC+zBQMrzHpi8MaF01ipqZR90KF+/kq6SCUFb4K1kDBNSmZk7920SE/nkcC3CLpC Ne0Ebw5TU4I0opL5ZRFfqK/8KgjHj7wacLhqaMSAFNWweHkWNWMpPKCTkGu929ye I7xChts6jpe5qO79lQ/cWdo9DsZ/defI8GPwIosxdAUfvUFAeghMVSEdgmQG6Juq QHNcxG5bgU9M8YfTxUeCzdba8F21kfwT/QM4pKGvXVTZ/ZMcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoFTFJNSdN22MPNKAacRsas/+N9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODRjMzEzMWMtZTlhYS0z NTU5LWI5M2EtZGUxYzFiZDNmYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjQnNMDEXRhNfcujYJwKhbETIll/HnmXWoCdPdxLPbxNahzHQVOtQPp 2hD9RR8rMpGLaBn6Q7dgU1/wFp+ASYbAwGcGLN1HV4eBJvqj8nigsPXr2mXv+/Yv sg1zgzz/wPohvjehtTJpdb4/VQXOtE1QlKJbkKNMyk6V2QCJtKMk8jcp+PMPDaxA CSvubdyW9hsA96A+oWd4pDElumRq+FhGT3/WRlzi27XC1Xy8bUhpYv6GJ918rOlG B54jaESaHMcf/B/0lx+atJZzZAt+nLTOGjGwSc3jyd/rbdY/MZgSpd2kbUSBRShT xpTWfSgtCXUSSzBJYbMAwuUk8VzfXJo= -----END CERTIFICATE-----Generated at Tue Jul 1 09:36:16 2025 by rpki-client