$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa File: 94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa (raw, json) Hash identifier: m72e4iw1cW5fvX0l+4yJaiN+oxTDBjzwkYacfn0X4ZY= Subject key identifier: 38:6A:84:5E:03:D0:35:9C:72:12:C3:95:51:AA:D9:46:5B:DD:09:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584917DC0B27A9CD5406AF9FDC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 6167 IP address blocks: 72.96.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0b:27:a9:cd:54:06:af:9f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=e431c26e-73b3-426b-9bdc-18e08678f76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:b4:47:20:e6:90:c2:ef:9a:d5:d0:99:0e: 35:30:f4:f1:f2:51:87:ae:48:b8:03:37:d4:3a:33: 41:57:ac:4a:4d:c8:5f:28:c4:96:17:1d:23:db:b7: dc:f5:fb:d5:63:20:02:aa:29:0c:c5:30:48:f7:a6: 9d:d6:93:a5:f9:2d:f5:85:58:72:2a:8d:60:1e:99: d2:d3:a8:b7:b3:e0:3e:54:8d:45:c7:14:3c:28:90: b9:75:fe:d9:2e:4d:f1:e9:79:0b:6d:e1:2c:3d:5c: da:27:1d:b2:1e:3d:51:ce:54:4f:7f:51:f8:28:19: 81:2f:74:59:0b:fa:6f:37:a2:6c:c5:69:a6:03:47: 66:d1:f6:c2:de:1a:3a:dc:ee:8a:0b:16:4a:65:68: 19:ec:b5:6a:6d:fb:8b:f0:5c:3f:46:62:68:c9:11: 6b:74:5b:f1:13:5d:35:16:b3:1d:42:50:1a:af:b6: 51:77:ff:ab:42:fe:2f:41:36:16:8d:74:7f:38:43: 63:b2:b8:e7:98:d3:3b:81:c4:69:89:71:a6:1d:88: 16:9c:10:cd:20:2f:cc:f8:c5:53:c8:e7:a8:73:ef: f3:0c:91:b2:06:ba:35:6d:84:2f:d2:bd:9c:4a:aa: 6b:8a:fa:99:90:d6:82:3e:1f:1b:9e:01:c1:51:14: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6A:84:5E:03:D0:35:9C:72:12:C3:95:51:AA:D9:46:5B:DD:09:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b3:e5:58:66:ad:87:b7:36:03:74:dd:b9:37:7a:53:bc:91: 00:0b:14:f9:a1:2a:a0:67:0a:9c:5a:02:5b:0a:dd:3a:57:bb: bd:52:7e:4b:f7:eb:d8:05:39:bd:14:38:31:2b:b4:03:d4:12: 01:fc:2c:be:97:07:66:04:00:9b:59:65:22:ac:f4:d6:73:11: a3:6a:25:ab:17:4d:34:89:04:30:6f:c9:d4:88:16:eb:e0:79: 3e:53:49:b9:9a:be:8b:36:94:7c:19:28:ad:f6:34:71:f0:4a: e8:97:82:ae:cc:72:34:ec:90:fc:59:a2:c9:b2:17:46:53:0b: 99:ee:bb:9b:56:fe:15:4f:4d:f4:b6:12:5e:21:bd:e0:6e:32: 0b:c0:59:96:b3:f6:ec:55:6e:26:0d:57:ca:7a:4b:27:be:fc: 5a:8e:d5:d4:b3:dc:9f:81:fd:f4:a9:25:2e:70:73:49:7a:43: b0:0b:81:f3:47:06:b9:fe:da:cd:ed:86:82:21:5a:76:7d:d9: 2a:ca:b2:43:c6:54:f2:53:f8:90:c5:dc:3e:26:cd:34:9d:bd: 8d:63:c0:92:93:a8:8f:ca:ed:f5:b1:ac:87:ac:e1:a9:41:7a: c2:c4:d3:a4:8a:aa:db:8d:96:bd:4e:2a:1b:06:09:ac:4c:62: 9f:ad:37:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Asnqc1UBq+f3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTQzMWMyNmUtNzNiMy00MjZiLTliZGMtMThlMDg2NzhmNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb20RyDmkMLvmtXQmQ41MPTx8lGHrki4AzfU OjNBV6xKTchfKMSWFx0j27fc9fvVYyACqikMxTBI96ad1pOl+S31hVhyKo1gHpnS 06i3s+A+VI1FxxQ8KJC5df7ZLk3x6XkLbeEsPVzaJx2yHj1RzlRPf1H4KBmBL3RZ C/pvN6JsxWmmA0dm0fbC3ho63O6KCxZKZWgZ7LVqbfuL8Fw/RmJoyRFrdFvxE101 FrMdQlAar7ZRd/+rQv4vQTYWjXR/OENjsrjnmNM7gcRpiXGmHYgWnBDNIC/M+MVT yOeoc+/zDJGyBro1bYQv0r2cSqprivqZkNaCPh8bngHBURT05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhqhF4D0DWcchLDlVGq2UZb3QllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTQxODdkZjYtYzBlMS0z OTU3LTkyYzEtNGViZDFkNmIxYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaz5VhmrYe3NgN03bk3elO8kQALFPmhKqBnCpxaAlsK3TpXu71Sfkv3 69gFOb0UODErtAPUEgH8LL6XB2YEAJtZZSKs9NZzEaNqJasXTTSJBDBvydSIFuvg eT5TSbmavos2lHwZKK32NHHwSuiXgq7McjTskPxZosmyF0ZTC5nuu5tW/hVPTfS2 El4hveBuMgvAWZaz9uxVbiYNV8p6Sye+/FqO1dSz3J+B/fSpJS5wc0l6Q7ALgfNH Brn+2s3thoIhWnZ92SrKskPGVPJT+JDF3D4mzTSdvY1jwJKTqI/K7fWxrIes4alB esLE06SKqtuNlr1OKhsGCaxMYp+tNzs= -----END CERTIFICATE-----Generated at Sun May 11 01:20:41 2025 by rpki-client