$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa File: 95b587f1-4d49-3edc-9113-693a27695af4.roa (raw, json) Hash identifier: 6pghaMdIHjU9KoMKLsogKevdJmlUisLUa1cDNGOdAvo= Subject key identifier: D7:B0:F6:74:09:9D:FC:F1:CC:B7:FD:00:0C:1C:BA:F8:02:C9:D6:DD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F71539DB08983677C0754F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.106.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:39:db:08:98:36:77:c0:75:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=9ac99344-5daf-453a-84a4-0dd1c1c0e5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:1a:81:55:c5:84:46:5b:8a:fe:0a:0b:99: 86:05:16:dd:fa:72:33:f3:f6:6c:bb:1b:4b:e5:81: 85:5e:91:aa:83:3f:69:40:77:27:90:6a:df:73:f2: 9e:d1:23:67:93:ac:51:cc:45:8c:10:84:9f:37:35: a3:76:4e:63:ec:ff:b8:d2:1f:fb:33:a8:48:3a:d5: e5:cd:7f:c0:2d:c8:e2:07:c7:17:49:76:c2:46:90: 18:00:65:40:60:13:19:dc:05:00:45:48:a5:03:c3: a7:9d:bb:4b:5c:65:bc:94:e6:65:00:98:0d:a4:07: 3e:fe:ac:4c:e1:5f:45:40:5b:b0:f2:e7:ac:f4:26: 51:93:49:b2:19:0f:fd:91:0e:d3:fb:96:ec:0a:87: 83:c2:9b:7e:cf:fd:1e:68:80:c9:b0:2f:47:f8:a4: cd:c2:c3:2f:82:0d:28:04:ea:67:7b:a4:d2:f3:8f: fd:99:92:8e:9c:83:0a:15:37:78:2d:06:84:c0:3e: 79:fe:ef:cf:bf:e8:e3:e2:d6:64:df:be:96:35:b5: b9:87:70:2d:3d:9a:ee:84:fc:b8:89:b8:0a:f8:f5: c3:a7:6b:1d:99:80:a2:c3:b8:1e:6f:8e:fb:7a:49: ca:b2:17:58:25:f1:9f:0b:ab:83:c4:58:53:19:1b: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B0:F6:74:09:9D:FC:F1:CC:B7:FD:00:0C:1C:BA:F8:02:C9:D6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:37:21:40:a9:e9:76:6d:c3:51:d2:99:45:c5:d7:0f:72:62: 39:49:9d:5b:22:2b:ce:ed:25:57:f9:93:c9:6b:63:34:4c:17: f8:26:37:9d:c0:3c:bf:76:ad:88:51:56:63:75:e2:25:60:8f: 93:bc:a1:28:ff:5c:a2:05:4d:7a:eb:bc:17:4a:2e:4b:98:c4: 73:e9:ae:31:9c:23:8c:b1:ae:d4:3d:3e:7f:35:15:cf:08:de: 56:88:5e:42:14:ec:b7:0e:d3:36:bf:0b:87:8b:60:73:c9:55: 8d:c5:d4:29:89:64:7b:47:04:d6:f2:01:f2:c3:ed:5b:a1:4a: 0b:9f:4a:34:50:f5:85:5b:6c:eb:88:ca:d6:6d:50:8f:0b:76: 66:4e:e9:22:2b:4e:09:f7:0a:f3:25:09:73:a3:5e:34:c5:66: 99:90:0a:28:a9:76:35:bc:1a:e4:00:97:bb:10:31:c9:aa:48: fa:86:7d:b9:22:17:ab:66:78:99:db:5a:f4:13:41:db:ca:03: dd:c4:c6:e9:52:f7:ca:b3:af:c9:02:ac:92:8c:1c:ba:77:9e: e9:4e:8f:ac:d5:09:6e:01:0e:22:fc:e6:fc:38:77:30:0d:b9: d6:4a:46:6c:5e:36:41:7f:e4:0b:46:a5:7c:e9:18:e1:e6:9d: 16:34:7c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTnbCJg2d8B1T0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OWFjOTkzNDQtNWRhZi00NTNhLTg0YTQtMGRkMWMxYzBlNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VsagVXFhEZbiv4KC5mGBRbd+nIz8/ZsuxtL 5YGFXpGqgz9pQHcnkGrfc/Ke0SNnk6xRzEWMEISfNzWjdk5j7P+40h/7M6hIOtXl zX/ALcjiB8cXSXbCRpAYAGVAYBMZ3AUARUilA8OnnbtLXGW8lOZlAJgNpAc+/qxM 4V9FQFuw8ues9CZRk0myGQ/9kQ7T+5bsCoeDwpt+z/0eaIDJsC9H+KTNwsMvgg0o BOpne6TS84/9mZKOnIMKFTd4LQaEwD55/u/Pv+jj4tZk376WNbW5h3AtPZruhPy4 ibgK+PXDp2sdmYCiw7geb477eknKshdYJfGfC6uDxFhTGRva9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNew9nQJnfzxzLf9AAwcuvgCydbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTViNTg3ZjEtNGQ0OS0z ZWRjLTkxMTMtNjkzYTI3Njk1YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM3IUCp6XZtw1HSmUXF1w9yYjlJnVsiK87tJVf5k8lrYzRMF/gmN53A PL92rYhRVmN14iVgj5O8oSj/XKIFTXrrvBdKLkuYxHPprjGcI4yxrtQ9Pn81Fc8I 3laIXkIU7LcO0za/C4eLYHPJVY3F1CmJZHtHBNbyAfLD7VuhSgufSjRQ9YVbbOuI ytZtUI8LdmZO6SIrTgn3CvMlCXOjXjTFZpmQCiipdjW8GuQAl7sQMcmqSPqGfbki F6tmeJnbWvQTQdvKA93ExulS98qzr8kCrJKMHLp3nulOj6zVCW4BDiL85vw4dzAN udZKRmxeNkF/5AtGpXzpGOHmnRY0fJo= -----END CERTIFICATE-----Generated at Sun Jun 1 03:41:05 2025 by rpki-client