$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa File: 08c7fe30-f46e-3d87-bbed-69071caf4413.roa (raw, json) Hash identifier: 6yGxHFP6mrtfGTGLPFqdnD8l/jFZbQLdhqTXoQNY0dY= Subject key identifier: DA:C1:D0:89:E9:34:39:8E:5F:0D:8E:1C:4C:B5:35:5F:A4:D5:D2:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD283E49BE3A5F062CC500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 72.68.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:28:3e:49:be:3a:5f:06:2c:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=2386a48e-4a75-4f27-8cd5-2b6050bf846d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:26:48:86:29:f3:07:f0:67:95:6d:0b:07: 13:a7:08:29:86:89:60:37:9d:f2:5f:a4:9f:03:0f: 7e:f8:cd:7f:e4:fe:f5:51:d5:43:38:ca:f4:1a:37: 2c:7d:6a:f8:6d:e2:6b:b0:62:77:9f:c3:cd:bd:15: 11:7a:44:a8:ae:b8:68:c4:a8:3c:e0:c1:27:9b:69: bf:44:05:de:47:89:e3:de:6d:b6:f8:ad:b3:cd:7a: 64:4c:c0:0c:00:81:29:a2:10:c6:90:8f:fe:94:be: 34:00:85:da:83:db:07:06:8d:18:a2:1b:6e:20:24: 99:2b:d2:50:04:f5:65:f2:2c:62:05:2c:bd:d3:a7: f7:59:ab:ff:97:a7:b3:5c:fb:b3:7d:0a:b3:bc:43: c5:3a:e3:33:58:0e:3f:21:dc:db:8b:03:99:1e:e3: 3a:c9:fa:ee:b4:fa:84:6a:eb:9b:6a:34:7a:d8:29: ff:54:84:ff:cf:50:88:d4:cb:6f:43:d6:b2:16:0e: a4:1e:bd:36:1f:a9:ca:62:7b:c3:7e:f4:f3:db:30: ac:2d:70:1b:b9:48:b0:f0:89:3d:20:e1:e5:a5:97: 2f:91:92:0f:17:9c:4c:d6:37:12:c9:35:87:ff:45: bd:7d:f4:a1:ee:4a:e5:fb:2e:a3:1b:3f:49:af:88: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:D0:89:E9:34:39:8E:5F:0D:8E:1C:4C:B5:35:5F:A4:D5:D2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.68.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c4:db:76:17:62:26:9f:b5:98:fe:c4:2b:64:f2:c4:44:16: 1f:7b:66:d9:c2:6c:25:4d:35:5a:73:c5:c1:db:7d:1c:d1:63: 96:1e:ce:46:4e:33:ab:2e:49:f1:e5:ce:87:88:55:6c:34:cc: e4:1f:83:fb:01:17:3d:9b:f5:24:1a:bf:91:19:29:32:55:63: 9d:f6:d5:5f:7d:aa:d1:72:c3:49:5c:70:6e:34:b3:5f:3b:b8: ff:e6:73:f9:45:8f:0f:c3:1a:89:ba:8f:7f:96:28:ee:87:ed: 1b:5c:d8:ef:b6:85:44:3b:44:c8:bc:14:15:56:b5:86:4a:ac: b6:ec:8a:f2:d7:51:e4:f2:35:43:62:54:1a:d1:a8:67:7a:d8: 65:a3:5d:ae:3b:e9:6e:b6:05:45:a5:2f:4d:99:d8:46:24:08: 36:98:d9:8c:99:69:9c:38:3e:5e:14:bb:2e:54:86:85:71:3e: 3d:89:c7:24:b7:63:e6:7a:dd:28:ab:20:43:59:83:25:83:9a: 83:ab:b6:19:a3:cd:8d:e1:d0:e0:03:5a:9b:a6:69:7b:7d:99: 1a:b9:d2:13:b4:71:f1:20:fe:97:72:14:39:31:d1:80:c4:36: 3c:e0:ad:65:3e:6c:f1:c7:b5:b2:97:ce:d0:f1:f3:f0:cd:6b: b0:f9:68:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Sg+Sb46XwYsxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjM4NmE0OGUtNGE3NS00ZjI3LThjZDUtMmI2MDUwYmY4NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt4mSIYp8wfwZ5VtCwcTpwgpholgN53yX6Sf Aw9++M1/5P71UdVDOMr0GjcsfWr4beJrsGJ3n8PNvRURekSorrhoxKg84MEnm2m/ RAXeR4nj3m22+K2zzXpkTMAMAIEpohDGkI/+lL40AIXag9sHBo0YohtuICSZK9JQ BPVl8ixiBSy906f3Wav/l6ezXPuzfQqzvEPFOuMzWA4/IdzbiwOZHuM6yfrutPqE auubajR62Cn/VIT/z1CI1MtvQ9ayFg6kHr02H6nKYnvDfvTz2zCsLXAbuUiw8Ik9 IOHlpZcvkZIPF5xM1jcSyTWH/0W9ffSh7krl+y6jGz9Jr4j02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrB0InpNDmOXw2OHEy1NV+k1dKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhjN2ZlMzAtZjQ2ZS0z ZDg3LWJiZWQtNjkwNzFjYWY0NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjE23YXYiaftZj+xCtk8sREFh97ZtnCbCVNNVpzxcHbfRzRY5YezkZO M6suSfHlzoeIVWw0zOQfg/sBFz2b9SQav5EZKTJVY5321V99qtFyw0lccG40s187 uP/mc/lFjw/DGom6j3+WKO6H7Rtc2O+2hUQ7RMi8FBVWtYZKrLbsivLXUeTyNUNi VBrRqGd62GWjXa476W62BUWlL02Z2EYkCDaY2YyZaZw4Pl4Uuy5UhoVxPj2JxyS3 Y+Z63SirIENZgyWDmoOrthmjzY3h0OADWpumaXt9mRq50hO0cfEg/pdyFDkx0YDE NjzgrWU+bPHHtbKXztDx8/DNa7D5aMg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:57 2025 by rpki-client