$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2caed372-a750-3ba1-8e35-b17542ea5e5b.roa File: 2caed372-a750-3ba1-8e35-b17542ea5e5b.roa (raw, json) Hash identifier: /oIlHxpaFl6YNnxzpzd3GbkhX/hnHMUNv6kX+AUeGB8= Subject key identifier: 72:FA:2D:93:79:45:02:2E:19:D1:23:FE:BD:C2:7C:A4:90:A5:54:CE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7E0950EEE08566DEED300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2caed372-a750-3ba1-8e35-b17542ea5e5b.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 173.72.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e0:95:0e:ee:08:56:6d:ee:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=09a7cdb0-8bea-42d3-87f9-1696e5b41e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:80:4a:82:00:07:36:07:be:0f:73:36:91:45: bc:9d:9f:62:23:f3:b3:a9:b1:7f:94:60:9f:56:2d: 56:42:03:34:75:c7:6e:09:e3:7f:7c:26:dd:14:a5: df:0f:bd:b1:fd:b7:8c:f5:db:12:65:45:0e:0d:cf: 7a:89:5e:e4:b9:cd:aa:5e:95:18:51:1e:06:e2:6f: e8:f2:e7:4b:fb:c8:41:99:0d:80:fd:4c:be:da:cb: b0:fa:2b:d6:59:66:cf:07:80:8e:9e:29:a5:af:ed: fe:f3:57:9d:c0:f6:5f:4b:8e:02:75:cc:00:0c:bd: b5:16:a1:a9:99:bd:bd:ad:a6:4f:da:77:31:c0:78: a0:99:71:80:24:5e:d5:1a:1c:a3:4b:5e:8a:09:c7: 00:0d:14:67:15:db:76:87:a3:d3:9c:ac:4c:83:41: 61:77:1f:db:83:27:65:22:d3:85:83:1e:14:fd:11: 9b:c3:5c:2f:89:fd:78:2e:7c:e1:08:0c:4c:61:3d: 35:29:d5:1d:fd:22:6a:e4:b7:15:33:06:d7:c9:59: 10:22:81:a0:d3:3e:66:96:64:1a:fc:1e:c5:da:3a: c4:b1:c8:3e:b5:a4:f5:67:f7:7c:41:45:fe:0a:49: 2c:8d:f2:c4:f9:58:9e:09:75:f4:08:09:71:36:72: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:2D:93:79:45:02:2E:19:D1:23:FE:BD:C2:7C:A4:90:A5:54:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2caed372-a750-3ba1-8e35-b17542ea5e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.72.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:52:18:f7:e9:d3:7c:e0:84:04:4b:c8:3d:8a:1c:ca:5e:22: 0c:98:77:71:41:37:8b:14:80:87:ec:a1:a3:04:8c:62:d9:b3: ae:a8:a5:f8:cd:54:d8:5c:d3:85:2d:41:20:31:22:b6:46:44: b5:3f:ff:52:e4:c1:45:d1:00:ff:22:e9:68:45:a6:e1:64:14: 46:f8:1a:16:da:d4:ab:ba:dd:a9:ad:23:8e:b6:d9:0b:79:77: bf:a7:1b:04:d0:a8:62:04:6d:40:e9:20:aa:08:fa:75:aa:d3: 94:fd:aa:77:6c:89:b9:e3:06:f9:4f:46:bb:18:4b:69:1d:fa: f2:20:43:d9:e0:3c:08:44:43:62:a7:42:c1:ca:bb:64:e5:84: 69:b9:7f:e1:80:75:b4:ca:69:3f:d9:4b:7f:1d:80:46:e9:0a: 67:33:98:ec:e3:77:7b:98:94:77:0d:66:ae:37:9f:fa:ab:ea: 2f:83:ff:65:66:e0:59:f6:5b:4a:73:83:1c:3d:7f:60:18:20: 85:39:d3:d4:c0:e7:e3:b4:e2:d6:d8:15:a8:48:a1:7f:57:17: d0:58:66:e2:df:75:9a:12:f0:28:51:b1:d5:4e:39:a8:01:0b: 6c:c2:8f:88:62:36:27:80:9c:84:c6:3e:bb:24:5d:0a:53:25: ed:7d:f7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+CVDu4IVm3u0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDlhN2NkYjAtOGJlYS00MmQzLTg3ZjktMTY5NmU1YjQxZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioBKggAHNge+D3M2kUW8nZ9iI/OzqbF/lGCf Vi1WQgM0dcduCeN/fCbdFKXfD72x/beM9dsSZUUODc96iV7kuc2qXpUYUR4G4m/o 8udL+8hBmQ2A/Uy+2suw+ivWWWbPB4COnimlr+3+81edwPZfS44CdcwADL21FqGp mb29raZP2ncxwHigmXGAJF7VGhyjS16KCccADRRnFdt2h6PTnKxMg0Fhdx/bgydl ItOFgx4U/RGbw1wvif14LnzhCAxMYT01KdUd/SJq5LcVMwbXyVkQIoGg0z5mlmQa /B7F2jrEscg+taT1Z/d8QUX+CkksjfLE+VieCXX0CAlxNnLwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL6LZN5RQIuGdEj/r3CfKSQpVTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmNhZWQzNzItYTc1MC0z YmExLThlMzUtYjE3NTQyZWE1ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVSGPfp03zghARLyD2KHMpeIgyYd3FBN4sUgIfsoaMEjGLZs66opfjN VNhc04UtQSAxIrZGRLU//1LkwUXRAP8i6WhFpuFkFEb4Ghba1Ku63amtI4622Qt5 d7+nGwTQqGIEbUDpIKoI+nWq05T9qndsibnjBvlPRrsYS2kd+vIgQ9ngPAhEQ2Kn QsHKu2TlhGm5f+GAdbTKaT/ZS38dgEbpCmczmOzjd3uYlHcNZq43n/qr6i+D/2Vm 4Fn2W0pzgxw9f2AYIIU509TA5+O04tbYFahIoX9XF9BYZuLfdZoS8ChRsdVOOagB C2zCj4hiNieAnITGPrskXQpTJe199xk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:26 2025 by rpki-client