$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa File: 972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa (raw, json) Hash identifier: M6KEH4eZlwAoAvp6Gp2+z3Rx2s2isvl8Kxkje7/zPkw= Subject key identifier: D3:FB:A3:B6:CB:4E:3B:51:89:9C:34:40:2A:AC:5C:01:12:86:6E:B5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0AA9E26D251FB5CD2790 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 72.87.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0a:a9:e2:6d:25:1f:b5:cd:27:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d416842c-6e35-4641-8421-990710cae453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:71:cc:d8:9c:79:58:84:60:b4:33:b7:d3: d9:9f:e9:a7:48:b5:4e:5e:ec:ef:ca:3a:49:c2:1a: 47:fc:35:f8:bd:e3:3e:b4:5a:44:7c:20:ff:a3:1a: b2:9b:a1:7a:6d:00:d2:41:bc:28:3d:db:60:4c:cd: 29:7d:79:7d:16:fc:98:3e:3c:48:20:a5:5d:b8:41: 06:5d:c0:f6:3e:80:ba:c3:6e:fb:6e:d6:79:36:c1: 9b:cc:87:b4:8e:b6:da:1c:af:bc:8a:e0:23:6d:15: 69:7a:e8:2d:62:04:ed:5f:3c:c9:d3:f7:fb:7d:13: 34:59:32:2d:82:24:e3:5d:db:a1:76:0a:45:ba:43: 35:92:36:36:82:52:e1:d3:2d:d0:6b:5c:99:1e:83: 1f:3d:64:8d:6c:66:15:71:ee:5f:cd:f3:14:fc:52: b5:49:15:91:01:e5:d7:28:29:fa:91:fb:6b:9e:be: ad:3f:c4:6d:e7:87:13:1b:82:6d:46:23:dc:01:b6: 02:bd:4e:a7:ef:a8:74:d2:32:76:83:e1:6b:e0:59: 3e:9d:4d:ce:c7:f4:80:1d:12:4c:ec:5e:1a:91:54: 0f:6e:f0:56:2a:35:51:91:58:b9:8f:83:11:f8:4d: e0:79:b5:5d:4a:9a:b9:1a:e3:e9:18:27:f7:4f:8e: 80:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FB:A3:B6:CB:4E:3B:51:89:9C:34:40:2A:AC:5C:01:12:86:6E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:83:c1:0e:25:90:50:28:83:c3:23:f1:4e:cb:4f:29:b3:a4: 02:28:2a:e2:74:82:a2:94:26:77:6d:1f:d8:d6:7f:43:69:69: 61:b6:2c:63:ae:6c:df:4d:c0:bc:c4:13:40:8e:18:68:df:4b: 58:2c:c4:b9:6a:83:02:90:19:ef:67:cc:67:49:23:dd:af:fc: c9:46:45:28:eb:86:77:59:97:3a:8a:38:75:de:0b:e9:49:d9: b8:ab:4e:31:73:6e:10:e7:90:ef:ea:1c:06:9e:aa:31:10:ec: c6:d7:d8:3b:bb:e7:c0:38:c9:97:7f:fa:d0:a4:f2:e5:35:88: 1e:ce:36:82:bb:50:62:16:b8:15:03:9d:76:49:b0:3e:06:47: 72:65:ed:23:1c:1e:cd:32:a2:66:70:10:7b:5c:e5:c3:ab:5f: 0d:4b:72:3c:bb:fa:ef:d1:5d:30:20:d6:43:b8:5f:d4:bb:1b: ab:ad:00:0f:43:55:63:02:94:00:d1:1d:be:ea:2a:fc:39:18: bb:34:b7:8a:fc:1e:5e:4d:b7:51:0c:98:3b:58:72:96:71:9d: 18:ce:59:07:87:15:ba:5f:e3:f6:c3:54:ad:8c:b5:9f:86:3a: 2c:9b:f5:9f:7c:00:5c:d0:77:88:c8:59:cb:f8:1a:4b:a9:aa: c1:b9:6a:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAqp4m0lH7XNJ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDQxNjg0MmMtNmUzNS00NjQxLTg0MjEtOTkwNzEwY2FlNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOVxzNiceViEYLQzt9PZn+mnSLVOXuzvyjpJ whpH/DX4veM+tFpEfCD/oxqym6F6bQDSQbwoPdtgTM0pfXl9FvyYPjxIIKVduEEG XcD2PoC6w277btZ5NsGbzIe0jrbaHK+8iuAjbRVpeugtYgTtXzzJ0/f7fRM0WTIt giTjXduhdgpFukM1kjY2glLh0y3Qa1yZHoMfPWSNbGYVce5fzfMU/FK1SRWRAeXX KCn6kftrnr6tP8Rt54cTG4JtRiPcAbYCvU6n76h00jJ2g+Fr4Fk+nU3Ox/SAHRJM 7F4akVQPbvBWKjVRkVi5j4MR+E3gebVdSpq5GuPpGCf3T46AJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP7o7bLTjtRiZw0QCqsXAEShm61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTcyZDBlM2ItYmI0ZS0z N2U2LTkxZGYtMzE0YThjOTBiOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaDwQ4lkFAog8Mj8U7LTymzpAIoKuJ0gqKUJndtH9jWf0NpaWG2LGOu bN9NwLzEE0COGGjfS1gsxLlqgwKQGe9nzGdJI92v/MlGRSjrhndZlzqKOHXeC+lJ 2birTjFzbhDnkO/qHAaeqjEQ7MbX2Du758A4yZd/+tCk8uU1iB7ONoK7UGIWuBUD nXZJsD4GR3Jl7SMcHs0yomZwEHtc5cOrXw1Lcjy7+u/RXTAg1kO4X9S7G6utAA9D VWMClADRHb7qKvw5GLs0t4r8Hl5Nt1EMmDtYcpZxnRjOWQeHFbpf4/bDVK2MtZ+G Oiyb9Z98AFzQd4jIWcv4GkupqsG5amI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:11:17 2025 by rpki-client