$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa File: 95b587f1-4d49-3edc-9113-693a27695af4.roa (raw, json) Hash identifier: oCD/KOzPGByiSNlpjeljsnckjrBYmRfVfuSl5qH8Rx0= Subject key identifier: 97:4C:22:1F:29:E2:B4:CC:AB:98:47:BF:D8:22:B5:24:96:F0:AD:86 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D13EF434B36707656945C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.106.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:3e:f4:34:b3:67:07:65:69:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=4564c0d4-5ae7-47ac-9270-e32c2cba1322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:c8:57:82:bf:83:8e:98:0e:75:85:2e:2c: e1:3f:73:52:4c:cf:99:e3:86:c1:a3:5e:fc:1f:65: 3d:8e:66:71:ae:39:41:3d:c0:8c:04:02:3f:18:28: 9a:8e:4b:06:87:af:1a:ff:dc:1a:cc:d4:83:4d:4d: 2f:53:2e:49:d5:69:d0:5a:4a:f4:d1:52:32:14:72: 26:8f:05:c4:ed:5c:24:eb:f6:38:9b:24:f2:c1:81: f6:48:09:4a:a1:a4:7a:1f:47:5b:94:7f:69:55:ec: 4d:fb:f6:85:2c:f4:35:53:a2:4c:03:10:df:f9:7c: fc:a7:01:bf:77:aa:c2:a6:18:2c:a4:15:0e:ed:78: a1:0d:fa:f3:08:34:f6:d2:0a:5c:a1:bc:40:4b:ed: af:64:30:c6:eb:6e:c9:80:bc:f1:2c:c4:bf:84:47: df:34:f7:68:cf:58:b3:b4:1e:54:a4:0b:3d:c4:8d: 59:cf:1e:6d:13:20:95:78:35:28:d2:3c:0f:84:ad: 29:ad:66:1c:f9:c6:0c:7e:0a:ef:d6:8d:7d:ab:96: 72:35:44:db:19:33:c9:0e:cc:ce:6f:8e:78:63:d5: c1:2a:38:81:2f:ee:36:18:ab:bc:19:b4:c6:17:bf: e4:68:db:99:fd:73:46:a0:2a:e6:fc:6b:8a:7d:b0: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4C:22:1F:29:E2:B4:CC:AB:98:47:BF:D8:22:B5:24:96:F0:AD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6e:98:15:49:fb:5c:80:47:2e:f8:46:fa:5e:c6:e9:76:b6: b1:49:e5:2c:89:e6:ba:60:5f:ed:17:62:da:fb:6e:91:c1:4f: 66:08:29:7b:04:26:47:7a:6b:fa:2e:20:0c:c6:7a:da:96:e9: f8:74:1e:a2:48:58:0b:32:f3:ec:47:f1:e8:b6:2f:36:fa:7c: 11:51:00:1c:4b:9f:56:61:d3:9b:ec:0b:61:2f:3f:12:b0:15: 8d:7c:c6:bb:ff:4d:d2:27:ac:6a:36:07:1b:7e:60:fe:2d:63: 88:ab:0f:0a:92:f8:e4:3b:68:cd:1b:de:b0:10:09:bd:fd:49: 1d:7b:b8:8d:f7:19:80:29:ed:39:c8:2f:e4:e9:1b:88:04:a9: 6f:ef:04:44:e6:e1:77:5f:9b:f5:7a:29:68:06:b2:3c:94:43: 82:11:d0:f7:6a:91:f5:08:41:60:c9:a9:8c:a7:80:99:15:93: 47:5e:69:13:1a:67:72:13:a0:2b:d2:63:73:4d:c7:80:75:5a: 92:0e:45:c7:6c:8f:be:49:42:bb:85:69:04:f9:86:a4:38:34: 94:00:34:73:0a:b3:bf:f8:26:13:a9:6f:68:17:71:92:13:56: 5e:b6:78:61:c3:b6:72:b8:33:27:e7:80:b0:eb:09:47:96:9f: 50:b9:e3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0T70NLNnB2VpRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NDU2NGMwZDQtNWFlNy00N2FjLTkyNzAtZTMyYzJjYmExMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U3IV4K/g46YDnWFLizhP3NSTM+Z44bBo178 H2U9jmZxrjlBPcCMBAI/GCiajksGh68a/9wazNSDTU0vUy5J1WnQWkr00VIyFHIm jwXE7Vwk6/Y4myTywYH2SAlKoaR6H0dblH9pVexN+/aFLPQ1U6JMAxDf+Xz8pwG/ d6rCphgspBUO7XihDfrzCDT20gpcobxAS+2vZDDG627JgLzxLMS/hEffNPdoz1iz tB5UpAs9xI1Zzx5tEyCVeDUo0jwPhK0prWYc+cYMfgrv1o19q5ZyNUTbGTPJDszO b454Y9XBKjiBL+42GKu8GbTGF7/kaNuZ/XNGoCrm/GuKfbBWUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdMIh8p4rTMq5hHv9gitSSW8K2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTViNTg3ZjEtNGQ0OS0z ZWRjLTkxMTMtNjkzYTI3Njk1YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5umBVJ+1yARy74Rvpexul2trFJ5SyJ5rpgX+0XYtr7bpHBT2YIKXsE Jkd6a/ouIAzGetqW6fh0HqJIWAsy8+xH8ei2Lzb6fBFRABxLn1Zh05vsC2EvPxKw FY18xrv/TdInrGo2Bxt+YP4tY4irDwqS+OQ7aM0b3rAQCb39SR17uI33GYAp7TnI L+TpG4gEqW/vBETm4Xdfm/V6KWgGsjyUQ4IR0PdqkfUIQWDJqYyngJkVk0deaRMa Z3IToCvSY3NNx4B1WpIORcdsj75JQruFaQT5hqQ4NJQANHMKs7/4JhOpb2gXcZIT Vl62eGHDtnK4MyfngLDrCUeWn1C54+U= -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:00 2025 by rpki-client