$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97bfe1e6-86c3-386b-84ee-68d07af0e53e.roa File: 97bfe1e6-86c3-386b-84ee-68d07af0e53e.roa (raw, json) Hash identifier: d+OuaxRaplcdjgMl0yY3B7EcyQ0qpFPBhm9bXVls4iE= Subject key identifier: 66:3E:DD:D3:47:E7:A7:E6:37:C2:2D:77:9B:8F:F5:53:6F:69:B5:22 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A43DB303FA0F7622CF8008B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97bfe1e6-86c3-386b-84ee-68d07af0e53e.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 6167 IP address blocks: 72.108.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:30:3f:a0:f7:62:2c:f8:00:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=8cc36550-c423-48f8-b850-1451af6bdf82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:76:5d:c0:fd:bd:57:4e:c9:65:7b:ad:94: 4d:2a:b5:9f:80:e3:8a:10:e1:dc:f2:3e:ca:79:a3: cc:e1:f3:82:14:92:8c:fe:df:5e:39:06:b0:9d:fa: 7e:da:dc:58:f5:2b:99:29:ad:98:57:66:b4:37:fd: e9:ef:35:4b:02:07:05:ee:9b:88:f3:f7:7a:71:69: f4:9d:69:2c:57:06:98:79:95:c8:bf:59:a4:85:5b: 04:b4:59:f8:7a:90:91:1d:b1:b3:a8:8b:82:e2:80: 9c:4d:02:e6:32:a4:63:38:96:a0:a1:6a:f3:00:c4: 31:d9:61:64:de:48:66:fc:7e:25:dc:4c:76:bc:24: 1f:e3:95:4e:7f:8f:9c:57:25:46:92:91:03:40:a6: 7d:53:85:81:9f:35:4e:3f:93:cd:47:f2:2f:05:60: b6:a9:8c:0e:4f:d3:02:ba:d0:0b:44:41:6a:8e:62: 29:fc:1a:46:66:af:9c:fe:06:d1:57:0e:c2:9c:3a: 3d:da:4c:8f:6d:05:d1:9c:3a:22:1e:ca:4e:a4:0b: e7:7d:b5:77:44:78:03:b5:92:a1:e2:88:4b:7d:d9: 30:29:6b:77:75:af:d8:41:e1:b3:ea:9c:4d:6a:b6: 4c:bb:32:2c:85:6d:c7:e0:cb:51:91:39:9b:f2:ce: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3E:DD:D3:47:E7:A7:E6:37:C2:2D:77:9B:8F:F5:53:6F:69:B5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97bfe1e6-86c3-386b-84ee-68d07af0e53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:47:41:34:71:36:7a:0e:86:a6:5b:d0:19:6f:47:df:1a:a7: 96:84:42:8c:a9:e8:f6:14:75:00:7c:cd:8e:e1:0a:21:ec:83: 10:f8:ec:1c:3c:57:a6:f4:10:cd:de:f8:97:33:31:1c:e6:9e: 31:7f:4e:fc:ce:68:9e:1a:74:39:df:4c:08:2d:88:56:cb:66: c3:19:46:0f:6d:a7:75:bc:6d:93:f0:9a:88:28:17:fb:5c:77: fc:80:94:72:cd:45:a5:13:f0:02:c0:a9:25:39:2c:f0:54:7c: 9a:b4:d9:96:f3:a6:54:92:a0:87:cd:c9:a2:89:7d:49:0f:79: 5b:74:4a:52:98:f1:53:1e:6f:d7:48:a0:13:51:96:7c:2d:f9: 3f:89:a4:38:d1:5c:52:82:8e:2e:af:16:6e:dd:15:a8:be:54: ea:ad:49:f1:0c:00:19:62:5e:dc:48:80:51:e4:38:70:36:c9: b5:7e:eb:ed:c3:c3:f5:e6:8d:53:76:17:2f:6b:28:79:14:a7: cb:be:7f:7b:74:68:60:d6:cc:13:42:42:ee:0e:92:d3:24:d7: 53:e6:21:f6:ac:f4:ba:1d:76:4e:00:d6:fd:6b:ab:42:1d:1c: 7f:ac:ad:e3:90:e9:6b:9c:ba:88:1e:3b:e0:52:bd:2a:c2:32: 96:6c:16:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2zA/oPdiLPgAi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OGNjMzY1NTAtYzQyMy00OGY4LWI4NTAtMTQ1MWFmNmJkZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lB2XcD9vVdOyWV7rZRNKrWfgOOKEOHc8j7K eaPM4fOCFJKM/t9eOQawnfp+2txY9SuZKa2YV2a0N/3p7zVLAgcF7puI8/d6cWn0 nWksVwaYeZXIv1mkhVsEtFn4epCRHbGzqIuC4oCcTQLmMqRjOJagoWrzAMQx2WFk 3khm/H4l3Ex2vCQf45VOf4+cVyVGkpEDQKZ9U4WBnzVOP5PNR/IvBWC2qYwOT9MC utALREFqjmIp/BpGZq+c/gbRVw7CnDo92kyPbQXRnDoiHspOpAvnfbV3RHgDtZKh 4ohLfdkwKWt3da/YQeGz6pxNarZMuzIshW3H4MtRkTmb8s5BDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY+3dNH56fmN8Itd5uP9VNvabUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTdiZmUxZTYtODZjMy0z ODZiLTg0ZWUtNjhkMDdhZjBlNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENHQTRxNnoOhqZb0BlvR98ap5aEQoyp6PYUdQB8zY7hCiHsgxD47Bw8 V6b0EM3e+JczMRzmnjF/TvzOaJ4adDnfTAgtiFbLZsMZRg9tp3W8bZPwmogoF/tc d/yAlHLNRaUT8ALAqSU5LPBUfJq02ZbzplSSoIfNyaKJfUkPeVt0SlKY8VMeb9dI oBNRlnwt+T+JpDjRXFKCji6vFm7dFai+VOqtSfEMABliXtxIgFHkOHA2ybV+6+3D w/XmjVN2Fy9rKHkUp8u+f3t0aGDWzBNCQu4OktMk11PmIfas9Loddk4A1v1rq0Id HH+sreOQ6WucuogeO+BSvSrCMpZsFio= -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:44 2025 by rpki-client