$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059080e-24f4-3362-860f-bf9f07a2c7af.roa File: 9059080e-24f4-3362-860f-bf9f07a2c7af.roa (raw, json) Hash identifier: I+RQfJbF8dA97ccUYR5ZZ2e6BIAhTuEPMLZYsR6O62g= Subject key identifier: DF:21:45:03:71:FC:EE:1A:85:63:F0:C5:CF:C4:73:67:4B:31:EB:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A1E2ABDF99029C00F7C65F000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059080e-24f4-3362-860f-bf9f07a2c7af.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.108.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:bd:f9:90:29:c0:0f:7c:65:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=69b5b9e0-ba17-4368-ab2a-2e87926cd1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:c2:4e:1a:d4:7c:3c:ed:bd:e0:b3:ed:8c: 1b:96:e1:16:24:32:24:db:d6:54:cb:f0:e0:5c:b7: c0:62:60:2d:0f:2b:50:2e:bf:74:c0:06:62:3d:5e: 9f:d5:03:d0:be:f0:f2:a5:71:7c:4b:47:1b:39:6b: bf:32:00:cd:52:4c:9e:de:be:12:65:47:7d:77:d1: be:bb:90:e1:20:69:00:05:29:a4:04:69:db:c5:45: 27:77:91:6a:7b:78:26:4a:6e:8d:a7:75:25:69:a2: d9:ec:9e:ab:9e:2a:da:03:b7:c8:02:94:c6:6b:75: 4c:13:f0:c8:41:70:f9:f5:ed:d1:d9:11:ab:28:6e: 84:f6:6c:d8:9f:79:1f:40:ad:8e:af:d4:d9:08:4b: 65:a6:99:82:a1:19:7a:e3:8b:45:f0:75:91:b8:8f: 2d:cd:0d:41:04:71:c3:85:03:ba:d1:14:bb:fb:a2: 1d:b9:21:f4:3b:07:10:2b:d9:4b:30:ac:d5:c7:ee: ef:fd:92:62:88:16:fa:6c:c0:28:db:63:6d:87:ee: f1:0e:4b:a4:77:fb:ea:7d:ba:76:db:36:35:d7:23: 42:54:7d:b0:a9:4c:f0:7a:66:62:b4:01:b8:73:c4: 33:b6:48:cf:d2:28:32:06:ee:a8:39:4a:b1:01:32: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:45:03:71:FC:EE:1A:85:63:F0:C5:CF:C4:73:67:4B:31:EB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059080e-24f4-3362-860f-bf9f07a2c7af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b6:13:4d:99:50:87:e4:37:b1:f9:b4:6c:ef:aa:15:1b:ca: 9b:67:58:f3:11:10:f9:b2:13:79:cd:48:5c:24:93:bf:2e:aa: 76:b1:16:f6:30:b1:04:95:02:c0:df:20:13:2d:92:4f:4b:46: 25:99:28:88:ff:97:07:cf:da:a8:3d:3f:7b:32:57:b5:65:52: 2b:5e:c1:bb:51:2d:52:6a:b6:73:d8:87:8d:06:b6:fc:08:83: df:0f:93:c5:fd:95:50:52:0b:d6:5e:7a:75:8e:bd:50:da:ec: 25:61:ed:a6:53:1b:4e:89:11:95:03:42:5b:cb:40:af:e0:3a: 33:24:0d:eb:15:f9:be:f3:8f:56:c4:6f:37:f0:66:bc:59:b7: 0b:f0:ff:38:44:a1:18:a5:8f:90:aa:b0:2c:d2:7c:12:df:84: 32:1d:1c:0e:92:68:4a:d4:a1:d5:79:22:09:d4:6f:95:79:74: a4:c4:95:0d:ee:7d:93:e3:46:4d:1d:51:bc:6d:4e:64:c0:b7: 52:88:4b:46:95:3a:72:48:78:c0:ee:9e:12:ae:d9:5d:5b:62: f4:df:ed:92:e1:74:90:90:98:d6:4c:c4:e1:12:d1:95:f0:bd: 89:31:ae:e9:70:f1:62:78:60:4b:e6:06:36:04:2b:0a:ba:34: 02:9a:3f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKr35kCnAD3xl8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NjliNWI5ZTAtYmExNy00MzY4LWFiMmEtMmU4NzkyNmNkMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l7CThrUfDztveCz7YwbluEWJDIk29ZUy/Dg XLfAYmAtDytQLr90wAZiPV6f1QPQvvDypXF8S0cbOWu/MgDNUkye3r4SZUd9d9G+ u5DhIGkABSmkBGnbxUUnd5Fqe3gmSm6Np3UlaaLZ7J6rniraA7fIApTGa3VME/DI QXD59e3R2RGrKG6E9mzYn3kfQK2Or9TZCEtlppmCoRl644tF8HWRuI8tzQ1BBHHD hQO60RS7+6IduSH0OwcQK9lLMKzVx+7v/ZJiiBb6bMAo22Nth+7xDkukd/vqfbp2 2zY11yNCVH2wqUzwemZitAG4c8QztkjP0igyBu6oOUqxATJ4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8hRQNx/O4ahWPwxc/Ec2dLMeucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTA1OTA4MGUtMjRmNC0z MzYyLTg2MGYtYmY5ZjA3YTJjN2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALi2E02ZUIfkN7H5tGzvqhUbyptnWPMREPmyE3nNSFwkk78uqnaxFvYw sQSVAsDfIBMtkk9LRiWZKIj/lwfP2qg9P3syV7VlUitewbtRLVJqtnPYh40GtvwI g98Pk8X9lVBSC9ZeenWOvVDa7CVh7aZTG06JEZUDQlvLQK/gOjMkDesV+b7zj1bE bzfwZrxZtwvw/zhEoRilj5CqsCzSfBLfhDIdHA6SaErUodV5IgnUb5V5dKTElQ3u fZPjRk0dUbxtTmTAt1KIS0aVOnJIeMDunhKu2V1bYvTf7ZLhdJCQmNZMxOES0ZXw vYkxrulw8WJ4YEvmBjYEKwq6NAKaP0A= -----END CERTIFICATE-----Generated at Tue Jul 1 00:57:52 2025 by rpki-client