$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa File: 888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json) Hash identifier: F4tuNwH0Vfz/tFRUHDvGDBXxFlpxOKJE6rUJJFOXeN8= Subject key identifier: BA:BB:3A:33:27:76:CA:B4:7D:B7:4A:48:64:09:40:F0:5A:09:14:23 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0630F6B5308C8C245940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.97.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:06:30:f6:b5:30:8c:8c:24:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=6c8ad6ae-3354-4c91-84d8-247530cbb2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:df:5c:bb:23:79:07:41:0f:fa:3f:42:cf: 78:31:44:7b:24:95:b6:9a:42:69:f5:fb:f7:23:9e: ba:ab:da:86:69:65:a6:17:e8:2a:3f:16:ab:d8:4b: 25:49:17:60:ef:97:ce:1a:97:cd:99:e8:e3:6e:17: 28:3f:7d:eb:0b:81:cb:12:bd:8d:d4:e8:1c:05:07: fd:a1:2d:95:15:35:1b:3c:dd:86:d6:52:e9:30:ce: e7:de:39:14:a1:65:7e:45:3c:31:54:ba:98:32:7b: e8:24:44:88:48:d3:a3:69:fa:7f:12:4a:7e:a3:6f: 06:2d:cd:28:7f:42:42:dc:0c:d3:90:7e:a2:ad:85: 02:a2:3f:94:fc:b2:62:d8:dd:e9:ed:c2:1a:5a:d9: 80:dd:c1:ae:09:b9:c3:00:1c:32:e4:07:24:3d:ec: d5:45:16:81:29:d6:d1:48:52:f2:dd:3b:cf:29:19: 7e:37:e4:52:cd:e6:22:59:ab:14:09:3b:da:9b:f1: e8:38:34:60:7d:ea:ef:a6:c2:33:51:22:b4:1f:95: 9a:ea:78:9c:f2:25:c6:07:02:52:37:53:0f:ba:21: 5f:5e:70:e9:09:6a:1f:89:34:f1:4e:93:81:85:6f: f6:de:a6:21:97:a3:6f:38:81:fd:02:36:e5:e9:4a: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BB:3A:33:27:76:CA:B4:7D:B7:4A:48:64:09:40:F0:5A:09:14:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:74:14:0c:bc:0e:e9:08:80:65:1f:d6:8a:92:28:f9:1a:d1: 36:f1:87:bd:92:a1:be:e7:2d:e3:cf:02:e2:c8:1f:ad:d5:12: ba:bd:3f:00:78:3b:12:cf:29:1c:95:bd:a4:eb:ee:45:bf:5d: 9e:24:e5:3b:b1:4a:06:f1:01:1e:37:34:8c:fb:5c:1c:3c:8c: d4:62:77:b3:50:eb:81:5d:9e:af:e6:71:d8:09:68:c0:3d:b0: 13:f1:9e:fb:ea:c6:46:fc:5a:54:c1:4f:af:26:cf:d3:98:79: 58:04:d1:4b:57:46:a9:01:6f:73:9e:82:e1:a1:4e:da:89:f9: 04:55:8d:02:74:b8:38:bd:17:09:69:6a:0b:16:70:ea:16:f1: 92:66:ca:71:85:fb:52:40:20:c1:4a:f2:3b:e9:25:42:cc:41: 36:db:74:b0:80:84:e1:22:31:cd:9d:fa:cb:5d:bd:5a:82:19: 4c:fd:4e:3c:47:f0:33:37:99:46:35:8a:e1:63:ea:3c:5f:d0: 4d:3e:69:14:f3:9c:4f:72:0b:2e:69:47:2e:b1:e8:88:16:f1: 94:a2:cc:e9:34:fe:6e:a3:dd:2d:da:a4:05:ea:35:c4:7f:25: ab:e1:c2:3d:38:ac:e9:32:00:df:93:a7:1a:8a:2e:6c:22:e6: 9f:cb:f2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AYw9rUwjIwkWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NmM4YWQ2YWUtMzM1NC00YzkxLTg0ZDgtMjQ3NTMwY2JiMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wPfXLsjeQdBD/o/Qs94MUR7JJW2mkJp9fv3 I566q9qGaWWmF+gqPxar2EslSRdg75fOGpfNmejjbhcoP33rC4HLEr2N1OgcBQf9 oS2VFTUbPN2G1lLpMM7n3jkUoWV+RTwxVLqYMnvoJESISNOjafp/Ekp+o28GLc0o f0JC3AzTkH6irYUCoj+U/LJi2N3p7cIaWtmA3cGuCbnDABwy5AckPezVRRaBKdbR SFLy3TvPKRl+N+RSzeYiWasUCTvam/HoODRgfervpsIzUSK0H5Wa6nic8iXGBwJS N1MPuiFfXnDpCWofiTTxTpOBhW/23qYhl6NvOIH9Ajbl6Ur9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq7OjMndsq0fbdKSGQJQPBaCRQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg4Y2I5YjYtNjkzMi0z MjVlLWJhOWQtNmY2MDgwMzQzYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV0FAy8DukIgGUf1oqSKPka0Tbxh72Sob7nLePPAuLIH63VErq9PwB4 OxLPKRyVvaTr7kW/XZ4k5TuxSgbxAR43NIz7XBw8jNRid7NQ64Fdnq/mcdgJaMA9 sBPxnvvqxkb8WlTBT68mz9OYeVgE0UtXRqkBb3OeguGhTtqJ+QRVjQJ0uDi9Fwlp agsWcOoW8ZJmynGF+1JAIMFK8jvpJULMQTbbdLCAhOEiMc2d+stdvVqCGUz9TjxH 8DM3mUY1iuFj6jxf0E0+aRTznE9yCy5pRy6x6IgW8ZSizOk0/m6j3S3apAXqNcR/ Javhwj04rOkyAN+TpxqKLmwi5p/L8jc= -----END CERTIFICATE-----Generated at Tue May 13 05:10:37 2025 by rpki-client