$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa File: 888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json) Hash identifier: 59XixWfPQxvzCSBJF0gkssTw4ZaZQHH7fiTDJjCkIMU= Subject key identifier: 9A:83:27:96:77:FE:18:05:A9:5E:85:52:AF:45:FC:49:16:55:B3:8A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D12DD0707E251BDA3BC840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.97.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2d:d0:70:7e:25:1b:da:3b:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=4d8aa31c-0aef-4a3e-b9a9-47ba34f07bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:24:0c:0b:6b:50:8d:f0:6a:06:06:6b:63: 4d:66:9b:b3:64:5b:92:b1:f4:62:01:6c:cd:99:20: 8d:f3:38:73:b4:2d:e2:ed:99:c3:e9:be:8c:09:24: 79:91:91:3b:a3:ed:15:db:1c:6b:99:0f:90:50:ec: 70:66:cd:36:56:90:a5:37:4a:c3:a3:40:03:ba:e7: 8c:fe:82:e2:f8:e0:22:b2:bc:f0:f1:91:aa:ba:3f: 46:73:08:41:f9:73:f4:03:77:ff:4c:fa:c4:73:4e: c9:ff:16:9c:92:87:df:2d:89:60:18:d3:41:4a:20: 17:b4:b7:7e:bc:80:50:12:13:b9:5d:d4:75:16:68: 87:69:c2:20:3c:8b:43:70:d0:95:ac:f5:2e:32:5f: 9e:3f:ec:50:96:09:cb:ff:cd:57:ec:41:01:c0:c7: c6:0a:95:83:95:78:90:4f:72:bf:1d:6f:e8:6b:72: 33:af:ef:c7:22:7b:ed:20:7b:b1:0e:eb:67:98:4f: 8d:33:3e:50:3a:62:e8:36:72:60:65:a7:bf:46:d0: 38:da:1b:07:6b:be:3d:21:3f:a1:fc:fc:5d:eb:ec: a6:e5:7a:35:47:f6:f2:60:8f:fe:ce:b0:59:4b:be: 8e:92:7d:c7:03:df:55:95:07:ec:d2:d5:32:49:d8: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:83:27:96:77:FE:18:05:A9:5E:85:52:AF:45:FC:49:16:55:B3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d3:82:d6:8c:5d:48:b2:38:65:6d:3a:94:ac:58:0e:ea:c3: a6:e5:a7:d6:70:49:d3:31:83:21:5b:62:cd:d2:e5:fe:c5:22: cb:07:4f:71:3c:d4:a7:f7:2f:da:55:0b:8a:7c:50:df:6e:e6: d4:ae:71:d8:8f:67:27:8f:83:b0:dd:7e:d4:40:82:67:08:bf: 38:5c:3c:db:ef:48:45:b0:0d:27:d3:3a:56:92:ae:d7:bd:b7: 21:4d:a4:2d:3c:aa:3b:3f:72:90:1e:99:b9:95:8f:18:1c:63: fe:c1:11:9a:38:4a:83:dc:20:d1:d2:84:15:a5:7a:be:02:3c: b6:3e:12:c5:0b:f5:6f:02:cc:6c:8e:2b:62:f4:0e:39:bb:28: 88:4a:4a:fb:b5:73:9a:34:55:46:03:ea:98:77:42:75:c4:cc: 0e:d2:08:a5:d6:c4:7a:7e:8a:67:fc:a5:21:e8:5d:cb:86:a6: f6:5c:f1:26:9d:9b:8c:49:a7:58:66:cc:ec:a8:90:36:d8:50: 1b:a3:3d:0e:6f:8d:d6:8f:5f:2f:01:17:13:76:00:a3:d8:f2: 87:38:44:00:a4:dd:92:19:a3:27:0a:c1:d0:c7:62:d9:d4:d7: 1c:9a:16:3d:3a:55:34:6a:94:6d:f9:8c:34:cc:1c:45:fa:97: ef:8a:de:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S3QcH4lG9o7yEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NGQ4YWEzMWMtMGFlZi00YTNlLWI5YTktNDdiYTM0ZjA3YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtIkDAtrUI3wagYGa2NNZpuzZFuSsfRiAWzN mSCN8zhztC3i7ZnD6b6MCSR5kZE7o+0V2xxrmQ+QUOxwZs02VpClN0rDo0ADuueM /oLi+OAisrzw8ZGquj9GcwhB+XP0A3f/TPrEc07J/xackoffLYlgGNNBSiAXtLd+ vIBQEhO5XdR1FmiHacIgPItDcNCVrPUuMl+eP+xQlgnL/81X7EEBwMfGCpWDlXiQ T3K/HW/oa3Izr+/HInvtIHuxDutnmE+NMz5QOmLoNnJgZae/RtA42hsHa749IT+h /Pxd6+ym5Xo1R/byYI/+zrBZS76Okn3HA99VlQfs0tUySdgzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqDJ5Z3/hgFqV6FUq9F/EkWVbOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg4Y2I5YjYtNjkzMi0z MjVlLWJhOWQtNmY2MDgwMzQzYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzTgtaMXUiyOGVtOpSsWA7qw6blp9ZwSdMxgyFbYs3S5f7FIssHT3E8 1Kf3L9pVC4p8UN9u5tSucdiPZyePg7DdftRAgmcIvzhcPNvvSEWwDSfTOlaSrte9 tyFNpC08qjs/cpAembmVjxgcY/7BEZo4SoPcINHShBWler4CPLY+EsUL9W8CzGyO K2L0Djm7KIhKSvu1c5o0VUYD6ph3QnXEzA7SCKXWxHp+imf8pSHoXcuGpvZc8Sad m4xJp1hmzOyokDbYUBujPQ5vjdaPXy8BFxN2AKPY8oc4RACk3ZIZoycKwdDHYtnU 1xyaFj06VTRqlG35jDTMHEX6l++K3l4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:23 2025 by rpki-client