$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa File: a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa (raw, json) Hash identifier: VvXwVMDrwhxkoU8Kdl2HYVUiDE+/JbZQN/Ly9hn3acY= Subject key identifier: B8:D8:60:E0:E3:DB:AD:66:D7:4B:39:7E:D3:E7:13:0F:60:B5:C9:D6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F7152AEEDEE1590F80F90240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 6167 IP address blocks: 72.96.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2a:ee:de:e1:59:0f:80:f9:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=f91b4dd6-f58a-4591-a291-fa67e311ab53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e0:c3:f9:99:c8:bb:ee:80:a7:32:8b:47:b5: cd:00:94:c0:30:6a:15:de:65:46:b5:97:93:8c:58: 60:5f:ab:f8:08:96:f7:b5:4c:b5:98:c5:a0:6c:e9: 98:c3:f5:29:77:ea:a3:fb:f6:c4:d1:af:9d:d1:b5: 07:d8:9e:04:ef:20:71:34:5a:c5:a4:0e:8a:c9:30: ea:38:29:89:7f:1c:10:da:16:7f:35:ca:0f:fa:96: fb:4b:7b:7f:db:90:94:d9:e0:c2:91:dc:a6:8c:61: 39:8c:02:77:c9:21:dd:be:d1:6e:99:46:41:41:d9: dd:53:e5:d8:a9:26:59:f4:11:72:6d:c1:05:b4:16: 85:96:ee:d2:da:14:a5:c7:96:90:27:46:22:de:42: b2:b6:c5:24:56:ce:61:f4:8b:4e:be:69:ff:ad:8c: 6f:36:44:af:5f:41:cd:71:47:fc:93:a3:e8:16:ff: cf:17:a5:72:76:9b:ec:4f:30:8a:15:45:ef:13:01: 8d:22:d2:c6:c4:fa:1f:7b:e9:50:e6:81:10:80:a2: 54:71:d1:5d:32:ad:4f:31:35:f7:63:fc:98:8a:ad: ee:c6:ff:e9:66:6b:29:16:21:02:c6:19:d7:8d:eb: 80:f7:25:5f:cf:56:b6:a3:92:1c:ef:ac:a4:1d:a0: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:60:E0:E3:DB:AD:66:D7:4B:39:7E:D3:E7:13:0F:60:B5:C9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4ca35b5-0120-363f-8788-e3c5e35a4c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:0d:99:b1:cd:e7:f9:06:db:9b:b6:43:b4:b5:34:46:df: 5e:4f:e8:ff:a5:b9:bf:9d:c3:1d:84:03:c1:06:05:ea:c6:d3: c9:fd:3d:14:d4:b8:2a:cd:0d:ab:66:e9:ee:ba:7e:53:43:33: 78:f5:f3:7e:7b:59:72:99:8c:e7:23:ad:ae:e1:8a:a3:1f:62: 82:7f:fb:c6:eb:e6:20:77:bb:31:be:1e:bd:29:59:75:7d:28: 67:0f:94:4d:9d:93:82:ff:bd:f3:b1:30:1c:00:65:73:3d:01: 49:00:d3:ce:7a:56:a6:fb:21:e7:98:f9:2c:80:28:35:4e:4c: 67:22:0c:16:f9:4c:86:b7:2c:24:fb:c9:4d:e2:c2:4d:96:2a: bd:78:58:3a:b0:d1:f5:e0:59:00:cf:40:20:d9:67:b4:1c:02: f0:f5:9f:56:34:35:d5:d1:fa:bd:34:21:44:5e:58:53:6f:01: bc:7c:0d:e3:4a:bb:bc:0e:f8:e2:b8:b5:97:0c:13:e4:d0:54: 06:a2:98:5c:4a:a3:3f:77:69:cd:ec:31:3b:6a:d8:b2:95:9e: fd:c5:7b:c8:4a:bf:48:d6:ca:66:5c:2a:b3:74:eb:25:e5:94: 52:af:de:72:e7:6f:f4:b0:e6:4c:42:41:78:be:17:89:8d:94: d0:6d:5a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSru3uFZD4D5AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjkxYjRkZDYtZjU4YS00NTkxLWEyOTEtZmE2N2UzMTFhYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeDD+ZnIu+6ApzKLR7XNAJTAMGoV3mVGtZeT jFhgX6v4CJb3tUy1mMWgbOmYw/Upd+qj+/bE0a+d0bUH2J4E7yBxNFrFpA6KyTDq OCmJfxwQ2hZ/NcoP+pb7S3t/25CU2eDCkdymjGE5jAJ3ySHdvtFumUZBQdndU+XY qSZZ9BFybcEFtBaFlu7S2hSlx5aQJ0Yi3kKytsUkVs5h9ItOvmn/rYxvNkSvX0HN cUf8k6PoFv/PF6VydpvsTzCKFUXvEwGNItLGxPofe+lQ5oEQgKJUcdFdMq1PMTX3 Y/yYiq3uxv/pZmspFiECxhnXjeuA9yVfz1a2o5Ic76ykHaDxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjYYODj261m10s5ftPnEw9gtcnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTRjYTM1YjUtMDEyMC0z NjNmLTg3ODgtZTNjNWUzNWE0YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQSDZmxzef5BtubtkO0tTRG315P6P+lub+dwx2EA8EGBerG08n9PRTU uCrNDatm6e66flNDM3j18357WXKZjOcjra7hiqMfYoJ/+8br5iB3uzG+Hr0pWXV9 KGcPlE2dk4L/vfOxMBwAZXM9AUkA0856Vqb7IeeY+SyAKDVOTGciDBb5TIa3LCT7 yU3iwk2WKr14WDqw0fXgWQDPQCDZZ7QcAvD1n1Y0NdXR+r00IUReWFNvAbx8DeNK u7wO+OK4tZcME+TQVAaimFxKoz93ac3sMTtq2LKVnv3Fe8hKv0jWymZcKrN06yXl lFKv3nLnb/Sw5kxCQXi+F4mNlNBtWjI= -----END CERTIFICATE-----Generated at Sun Jun 1 03:34:51 2025 by rpki-client