$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09f9cde4-4aa8-3e03-b620-db94912eca77.roa File: 09f9cde4-4aa8-3e03-b620-db94912eca77.roa (raw, json) Hash identifier: JZEu4dGPLCjycHZTOZiKIZ36vG8b1X/EFcp+EuXeSTc= Subject key identifier: 23:BF:2A:40:58:C9:98:48:4B:D5:CC:C0:4C:65:A1:4B:34:23:36:E5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB410CE209542BF926CF9580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09f9cde4-4aa8-3e03-b620-db94912eca77.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 72.86.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:0c:e2:09:54:2b:f9:26:cf:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=1f352f93-ef8b-40f7-a0cb-b35f9638595c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:ca:e8:fe:cb:a7:d0:1a:a7:6a:bd:cd:b0: 28:2d:d7:02:bc:36:c6:e0:fb:93:13:59:65:9b:0a: 91:47:f4:16:41:05:be:2a:a9:8b:ba:86:c3:b0:70: a9:21:89:22:6a:44:5f:fb:f0:95:cd:24:8d:cc:85: e2:d1:e2:43:b0:5f:ec:fa:ea:99:3f:6e:5c:a9:7e: 25:f7:49:64:be:7d:8d:e7:e7:2b:d2:c2:b3:d0:13: 60:49:98:4b:f9:92:6c:71:6b:be:d3:e9:15:71:07: 06:5a:ae:bb:f2:7b:60:da:11:1d:50:f9:8b:09:5e: d3:4c:f4:94:55:1f:1d:58:be:98:5f:e9:31:3b:e9: 5d:58:17:d2:b9:cc:c4:8a:f8:46:c8:8e:7c:bb:de: c7:01:d9:58:81:5a:6c:25:0b:1d:c3:7a:c8:d0:6c: c4:19:13:04:63:52:4f:40:79:bd:d9:25:e2:31:53: 2c:a7:34:f7:ee:03:72:be:c0:6c:b4:30:ad:56:11: b4:83:73:36:a1:e8:5b:16:1b:6e:1d:74:20:0f:57: 72:51:42:a2:21:c8:8b:63:fa:90:e1:f4:a8:a9:86: af:23:8c:29:dd:4e:24:43:15:33:cf:96:64:3e:2f: 96:1e:7e:5e:06:3d:84:63:d6:ea:bd:ac:68:bb:95: a5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BF:2A:40:58:C9:98:48:4B:D5:CC:C0:4C:65:A1:4B:34:23:36:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09f9cde4-4aa8-3e03-b620-db94912eca77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.86.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:99:1c:13:eb:7f:ff:e6:15:54:be:fb:77:15:a5:ee:c5:a5: 56:c9:32:16:eb:97:a0:42:ad:7b:b1:e8:74:e3:b4:09:32:1d: 1c:2c:d0:dd:39:ea:4b:a7:52:8d:7f:59:59:69:0c:b9:20:6d: 86:2f:66:1c:cb:8c:5b:1f:86:d1:44:15:b4:71:19:96:cc:ac: bf:c8:64:ef:49:92:71:7d:9f:59:c8:4f:81:15:09:47:ef:a6: a0:f4:ac:db:8f:42:15:3d:5d:e9:e4:e6:2f:ce:f6:12:08:4e: d4:59:71:5c:50:49:6a:ac:da:9d:d9:c3:cc:b7:e1:5a:ce:f5: 84:62:f3:be:9f:4b:00:a5:e4:e8:e9:7f:80:b6:3c:c2:0b:2e: 62:ea:3d:d5:c4:3a:95:29:82:2e:05:03:2a:fe:73:12:8b:02: 2d:14:4c:db:33:a5:40:15:7f:0e:b1:13:ee:b3:c0:22:58:55: 6b:60:5b:74:5c:40:c1:39:00:8c:8a:17:75:10:95:73:d1:5d: d4:c0:9f:20:1f:46:3a:00:d1:26:d0:64:88:4c:a7:ac:30:5c: fa:2c:a2:7e:2e:97:7d:ba:72:05:22:1b:8c:af:b5:1e:d5:92: 50:09:77:a9:84:9e:9d:3d:5e:84:0b:58:e9:34:73:c6:76:04: e2:3c:c1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQziCVQr+SbPlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWYzNTJmOTMtZWY4Yi00MGY3LWEwY2ItYjM1Zjk2Mzg1OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ/K6P7Lp9Aap2q9zbAoLdcCvDbG4PuTE1ll mwqRR/QWQQW+KqmLuobDsHCpIYkiakRf+/CVzSSNzIXi0eJDsF/s+uqZP25cqX4l 90lkvn2N5+cr0sKz0BNgSZhL+ZJscWu+0+kVcQcGWq678ntg2hEdUPmLCV7TTPSU VR8dWL6YX+kxO+ldWBfSuczEivhGyI58u97HAdlYgVpsJQsdw3rI0GzEGRMEY1JP QHm92SXiMVMspzT37gNyvsBstDCtVhG0g3M2oehbFhtuHXQgD1dyUUKiIciLY/qQ 4fSoqYavI4wp3U4kQxUzz5ZkPi+WHn5eBj2EY9bqvaxou5WleQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO/KkBYyZhIS9XMwExloUs0IzblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDlmOWNkZTQtNGFhOC0z ZTAzLWI2MjAtZGI5NDkxMmVjYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSZHBPrf//mFVS++3cVpe7FpVbJMhbrl6BCrXux6HTjtAkyHRws0N05 6kunUo1/WVlpDLkgbYYvZhzLjFsfhtFEFbRxGZbMrL/IZO9JknF9n1nIT4EVCUfv pqD0rNuPQhU9Xenk5i/O9hIITtRZcVxQSWqs2p3Zw8y34VrO9YRi876fSwCl5Ojp f4C2PMILLmLqPdXEOpUpgi4FAyr+cxKLAi0UTNszpUAVfw6xE+6zwCJYVWtgW3Rc QME5AIyKF3UQlXPRXdTAnyAfRjoA0SbQZIhMp6wwXPoson4ul326cgUiG4yvtR7V klAJd6mEnp09XoQLWOk0c8Z2BOI8wfk= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:46 2025 by rpki-client