$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa File: db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa (raw, json) Hash identifier: ujlFjt7uEyIgAkmc3lx/dHZ3peF1fj1GVwklP7N9ViQ= Subject key identifier: CD:54:7C:32:2C:1E:A0:4B:26:20:29:71:7A:20:C1:B9:58:AC:58:EC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853CF24A38019F326C9B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 72.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3c:f2:4a:38:01:9f:32:6c:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=58cccf9c-4d31-4bc5-bf59-660b60eaca8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:2c:4c:04:83:85:9e:db:e2:c4:c0:fc:64: de:27:55:8b:64:b1:f3:5e:5c:ab:e6:9e:02:9d:28: ff:59:3f:7b:70:54:e9:3c:d3:63:24:f0:23:2d:ed: dc:64:b9:4a:aa:dd:30:a0:18:64:1c:96:0b:b4:fc: 2e:d4:17:a8:f6:e8:7a:14:d7:d4:aa:52:04:52:82: f9:a3:20:f9:f0:76:f8:61:5e:8c:42:d5:59:6e:7a: 09:a7:58:a0:e4:4e:7e:97:3b:c8:3f:c9:96:7f:76: 6b:5b:b5:e7:7a:84:08:82:91:92:ea:9c:3a:2d:33: 5e:bf:b1:ea:70:1e:46:79:56:2f:44:28:f6:09:64: 6e:e7:2e:ca:11:be:4d:89:2d:42:c5:8c:03:23:66: 30:b4:28:13:eb:04:d6:aa:09:5a:6d:95:a2:38:c1: b2:bf:c5:23:48:89:4f:80:9e:76:84:29:c7:2a:b8: 2c:28:1c:ed:49:29:e7:d3:e6:30:93:d1:7c:6a:0c: 0d:eb:6e:57:bd:73:85:5a:14:58:f1:b7:15:cc:b0: 74:d5:e2:67:9a:6e:a2:9f:d7:7f:2e:b0:9c:0a:f4: 72:59:0b:fa:ba:3f:a6:e8:85:70:d3:b2:90:ad:03: 18:fc:26:d2:77:bb:e1:5e:87:59:f7:4d:54:63:cc: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:7C:32:2C:1E:A0:4B:26:20:29:71:7A:20:C1:B9:58:AC:58:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:53:0a:1d:56:f8:fc:39:c8:4b:02:19:ed:3c:ac:1f:4a:13: 68:08:4c:57:8b:3d:16:95:ed:86:47:28:87:a0:fd:92:a8:cd: 82:3e:33:a9:ad:8a:e7:43:01:54:63:08:23:71:0d:56:6b:85: 7c:c9:5e:a7:42:01:c3:da:09:18:6b:bc:f8:fe:27:3f:6c:e0: 6e:f4:d8:e5:9e:59:16:60:15:39:66:2c:ec:3f:f1:80:52:a2: 28:79:9b:fe:af:21:26:21:52:e7:3f:56:0a:8e:4b:99:f1:65: e3:e7:82:88:6f:bc:cb:08:a3:5e:00:dd:be:61:a4:6e:d4:5b: 34:05:aa:96:2a:3d:9e:e1:55:6a:c5:8f:2e:bf:c1:05:59:af: e2:bd:2c:bb:4b:99:ce:66:42:39:61:39:2f:5a:64:f7:84:f1: 83:30:db:9c:35:4c:b7:48:63:b3:f9:73:de:be:37:e3:60:be: 2b:db:36:2d:f6:c1:b6:32:17:16:21:9a:8e:ae:6a:d7:75:e6: 91:43:da:46:f2:51:c7:3d:c2:1c:58:b1:ee:c9:7e:ff:cd:38: 0d:b6:dd:0e:5f:0d:af:f6:5e:13:de:3e:b6:0c:ed:e5:31:91: 35:73:98:28:a8:5c:86:4e:b0:0b:6b:2a:43:3b:9c:1c:ce:7a: be:25:45:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTzySjgBnzJsm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NThjY2NmOWMtNGQzMS00YmM1LWJmNTktNjYwYjYwZWFjYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg54sTASDhZ7b4sTA/GTeJ1WLZLHzXlyr5p4C nSj/WT97cFTpPNNjJPAjLe3cZLlKqt0woBhkHJYLtPwu1Beo9uh6FNfUqlIEUoL5 oyD58Hb4YV6MQtVZbnoJp1ig5E5+lzvIP8mWf3ZrW7XneoQIgpGS6pw6LTNev7Hq cB5GeVYvRCj2CWRu5y7KEb5NiS1CxYwDI2YwtCgT6wTWqglabZWiOMGyv8UjSIlP gJ52hCnHKrgsKBztSSnn0+Ywk9F8agwN625XvXOFWhRY8bcVzLB01eJnmm6in9d/ LrCcCvRyWQv6uj+m6IVw07KQrQMY/CbSd7vhXodZ901UY8z70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1UfDIsHqBLJiApcXogwblYrFjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDQxMjgtZmEyNy0z YTE4LWJmYjItNjRjZjk2YzgzMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtTCh1W+Pw5yEsCGe08rB9KE2gITFeLPRaV7YZHKIeg/ZKozYI+M6mt iudDAVRjCCNxDVZrhXzJXqdCAcPaCRhrvPj+Jz9s4G702OWeWRZgFTlmLOw/8YBS oih5m/6vISYhUuc/VgqOS5nxZePngohvvMsIo14A3b5hpG7UWzQFqpYqPZ7hVWrF jy6/wQVZr+K9LLtLmc5mQjlhOS9aZPeE8YMw25w1TLdIY7P5c96+N+NgvivbNi32 wbYyFxYhmo6uatd15pFD2kbyUcc9whxYse7Jfv/NOA223Q5fDa/2XhPePrYM7eUx kTVzmCioXIZOsAtrKkM7nBzOer4lRX0= -----END CERTIFICATE-----Generated at Tue Jul 1 08:03:42 2025 by rpki-client