$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89cde159-1955-3f7d-af8e-e8f204c5f9f4.roa File: 89cde159-1955-3f7d-af8e-e8f204c5f9f4.roa (raw, json) Hash identifier: /xYYbgnLHPho77DM7981MktSk/xa5EukqvQFrOLogt4= Subject key identifier: 9B:81:AC:DF:4E:EA:11:58:C7:5C:24:0D:DE:68:11:67:87:55:0B:6A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A1E2AB0C9E720AC10D5DB5400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89cde159-1955-3f7d-af8e-e8f204c5f9f4.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.103.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:b0:c9:e7:20:ac:10:d5:db:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=38dda5b9-71af-486b-b0a4-49970b3fb32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:d1:74:8e:99:41:f0:f1:fc:87:d2:0a:88: 5e:b7:3e:cf:55:74:ba:a5:db:51:41:80:64:b9:43: 3b:27:f9:21:71:26:33:8e:bb:a8:27:36:2b:ab:f4: 23:e4:3d:b2:df:d6:a8:54:fa:09:bc:be:40:f3:c7: c8:74:ff:f6:d6:5b:43:aa:ba:02:da:67:c5:24:ab: 91:b4:b5:80:0f:76:47:77:56:f4:22:6a:38:7f:c0: 16:71:f4:f3:d7:4a:bf:1a:20:32:c0:26:ed:27:1e: 9c:90:56:fd:17:a0:a0:0e:28:8b:35:69:f0:30:e3: 89:c9:6c:e7:1c:2f:6d:99:ad:ed:ac:7e:6c:21:0c: 1d:0e:5e:b0:4e:5d:a7:60:ed:71:a0:e7:d9:69:22: 6f:30:91:58:26:41:c6:fc:50:a9:0b:55:11:21:39: 30:8a:2b:0b:f8:26:b6:1c:20:2e:cd:e0:1f:16:57: c9:f1:b9:59:e8:39:26:f0:cf:38:9d:29:ac:d7:87: 36:21:de:bc:fc:cd:4d:89:dc:de:d6:d0:d0:ec:f1: 96:58:3e:f3:be:1d:64:14:ee:61:6c:c9:39:19:bc: 36:3e:6e:9c:da:4e:e4:71:2c:e7:69:2d:c5:49:11: a5:7f:2c:29:61:aa:7e:29:79:c9:24:2e:85:12:d5: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:AC:DF:4E:EA:11:58:C7:5C:24:0D:DE:68:11:67:87:55:0B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89cde159-1955-3f7d-af8e-e8f204c5f9f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.103.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7b:77:31:25:a6:bd:9f:c2:62:e3:97:b1:9b:b9:6d:50:2b: 36:89:1d:49:bc:e9:e8:0e:51:75:53:73:3d:4c:c7:60:7d:15: 3d:69:c2:26:50:ec:5e:48:1c:57:e4:1d:03:d5:82:53:16:12: 12:ac:d7:91:1a:87:5f:1d:1c:52:8f:49:b2:b2:b5:f0:70:7d: 61:d4:2e:8e:d4:e5:82:76:d4:ca:a2:55:64:d7:46:04:0e:7e: 3d:8a:45:52:d6:63:51:27:ec:fd:f4:9f:f8:78:ce:93:7b:78: 33:fa:15:86:18:6d:d6:ca:3f:f5:d3:f9:2f:76:af:65:ca:eb: 1d:d5:bf:d4:42:0f:3a:5e:fa:88:f0:ac:55:51:a2:63:53:d3: 92:cb:d4:54:9b:04:52:41:8b:d3:f5:42:6b:46:89:2a:a5:06: 30:90:8e:bd:84:db:68:c9:ea:ad:fe:19:2a:70:a0:4a:e3:31: 38:30:90:6e:72:eb:35:c7:9c:12:40:9d:98:18:80:61:b0:92: 37:bb:e4:52:4e:0c:73:95:fd:fd:0f:73:7f:ba:9c:f2:be:f7: 02:62:7e:df:2e:04:0a:82:09:7d:0d:5f:f5:f3:42:a1:00:c7: aa:8d:f4:d0:6d:06:9b:29:86:13:e8:71:2a:a5:d5:ae:c5:0b: e5:91:d7:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrDJ5yCsENXbVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk MzhkZGE1YjktNzFhZi00ODZiLWIwYTQtNDk5NzBiM2ZiMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F/RdI6ZQfDx/IfSCohetz7PVXS6pdtRQYBk uUM7J/khcSYzjruoJzYrq/Qj5D2y39aoVPoJvL5A88fIdP/21ltDqroC2mfFJKuR tLWAD3ZHd1b0Imo4f8AWcfTz10q/GiAywCbtJx6ckFb9F6CgDiiLNWnwMOOJyWzn HC9tma3trH5sIQwdDl6wTl2nYO1xoOfZaSJvMJFYJkHG/FCpC1URITkwiisL+Ca2 HCAuzeAfFlfJ8blZ6Dkm8M84nSms14c2Id68/M1Nidze1tDQ7PGWWD7zvh1kFO5h bMk5Gbw2Pm6c2k7kcSznaS3FSRGlfywpYap+KXnJJC6FEtUiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuBrN9O6hFYx1wkDd5oEWeHVQtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODljZGUxNTktMTk1NS0z ZjdkLWFmOGUtZThmMjA0YzVmOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl7dzElpr2fwmLjl7GbuW1QKzaJHUm86egOUXVTcz1Mx2B9FT1pwiZQ 7F5IHFfkHQPVglMWEhKs15Eah18dHFKPSbKytfBwfWHULo7U5YJ21MqiVWTXRgQO fj2KRVLWY1En7P30n/h4zpN7eDP6FYYYbdbKP/XT+S92r2XK6x3Vv9RCDzpe+ojw rFVRomNT05LL1FSbBFJBi9P1QmtGiSqlBjCQjr2E22jJ6q3+GSpwoErjMTgwkG5y 6zXHnBJAnZgYgGGwkje75FJODHOV/f0Pc3+6nPK+9wJift8uBAqCCX0NX/XzQqEA x6qN9NBtBpsphhPocSql1a7FC+WR1wE= -----END CERTIFICATE-----Generated at Tue Jul 1 09:38:57 2025 by rpki-client