$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa File: 3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa (raw, json) Hash identifier: RxT0Nuf+Bob04reB6KnVpp7IAh+U1QZKXBucMkeumQE= Subject key identifier: C2:93:77:D5:1A:BB:05:9C:F3:F8:27:4C:66:E9:2C:F1:75:F9:4B:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D42187EA634C782E78A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.105.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:42:18:7e:a6:34:c7:82:e7:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=d6243313-9759-4b81-8640-99a94cacd898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:a7:0c:03:17:bb:c4:6d:cd:b8:2a:e0:ad: ee:45:9a:00:42:31:93:6d:3b:13:96:70:38:14:11: c0:f2:91:f8:4a:a9:07:3e:de:e2:f1:bb:61:41:3f: d7:5c:c0:86:aa:fb:8a:03:0a:65:22:e5:94:b8:83: 03:a3:97:5a:1a:d2:fa:ff:3b:18:46:8e:e4:3c:a6: 33:f6:75:c4:ec:92:76:f9:b4:4b:f9:2c:07:6c:c4: 89:38:9b:e9:0f:a5:27:43:c6:f2:46:0c:f2:7c:75: 7d:4f:fd:c7:d8:40:ae:e0:f9:a5:95:65:5d:70:f1: 28:1b:c8:77:aa:d5:f5:0c:37:9d:9d:f4:67:21:61: f4:29:fa:38:be:4e:18:9c:a9:6a:14:6c:4c:75:e2: 5a:e4:77:98:84:fe:5a:43:72:05:81:71:6f:16:20: 01:4f:e5:cb:22:89:62:7e:9c:f0:b6:da:50:93:31: ea:22:02:db:8f:5d:b8:c1:0a:ad:0c:f9:4a:e1:19: ca:f6:cb:b1:b6:e3:eb:69:8b:da:ca:fe:a5:e6:de: 22:14:a8:96:20:08:1c:cf:08:0e:a9:8b:73:56:03: 1e:b5:f5:b7:a3:3b:bc:90:43:8d:5f:67:37:3b:fd: 23:e2:60:cf:5b:1e:8f:0c:7e:c9:c7:10:04:1f:cd: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:77:D5:1A:BB:05:9C:F3:F8:27:4C:66:E9:2C:F1:75:F9:4B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.105.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:34:ed:32:5d:46:db:60:0a:2c:c6:9d:df:6d:c5:b4:2f:93: b6:0e:da:44:0e:29:86:08:47:9c:1a:73:1a:a5:57:1b:27:36: ba:96:11:00:89:01:d8:48:94:d9:68:58:e9:c9:e5:31:69:a3: 58:4b:aa:ac:97:fb:c7:0a:dc:d7:f0:03:d9:36:c2:33:27:e1: 84:6d:10:b8:e6:11:57:8c:de:25:2c:2c:28:47:b1:6a:14:ef: 41:f4:23:51:3d:ff:98:59:2d:a1:ff:96:f4:ad:ac:50:a1:2d: 52:0c:eb:eb:e6:72:36:69:d0:92:41:54:43:d7:38:c9:dc:4c: d8:3b:14:5f:19:d9:98:ee:21:a3:a3:ee:82:64:fd:6f:b7:3c: 2a:bf:bb:d9:07:b6:37:09:c3:17:cd:73:72:5e:55:13:36:70: 88:83:c0:56:aa:a2:b1:0f:1c:87:b3:2a:ce:f7:d6:7c:00:ef: 81:bf:a1:a2:89:80:ad:98:7c:d1:12:e6:59:75:28:6d:7f:ba: 68:84:81:64:33:e4:cb:01:26:40:a4:d4:ab:91:7a:b7:a9:4e: ba:1e:c2:01:06:71:82:d5:26:03:10:f8:70:06:3b:11:f2:89: 99:fb:1b:0d:24:2d:b7:b5:35:2f:ec:74:6d:4f:45:cb:43:ae: ef:b3:16:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUIYfqY0x4LnigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDYyNDMzMTMtOTc1OS00YjgxLTg2NDAtOTlhOTRjYWNkODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6SnDAMXu8Rtzbgq4K3uRZoAQjGTbTsTlnA4 FBHA8pH4SqkHPt7i8bthQT/XXMCGqvuKAwplIuWUuIMDo5daGtL6/zsYRo7kPKYz 9nXE7JJ2+bRL+SwHbMSJOJvpD6UnQ8byRgzyfHV9T/3H2ECu4PmllWVdcPEoG8h3 qtX1DDednfRnIWH0Kfo4vk4YnKlqFGxMdeJa5HeYhP5aQ3IFgXFvFiABT+XLIoli fpzwttpQkzHqIgLbj124wQqtDPlK4RnK9suxtuPraYvayv6l5t4iFKiWIAgczwgO qYtzVgMetfW3ozu8kEONX2c3O/0j4mDPWx6PDH7JxxAEH81X1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKTd9UauwWc8/gnTGbpLPF1+Uu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2RkYmRjODItODg4OS0z ZjM4LWE2NWUtM2E3MmQyOTU1NmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo07TJdRttgCizGnd9txbQvk7YO2kQOKYYIR5wacxqlVxsnNrqWEQCJ AdhIlNloWOnJ5TFpo1hLqqyX+8cK3NfwA9k2wjMn4YRtELjmEVeM3iUsLChHsWoU 70H0I1E9/5hZLaH/lvStrFChLVIM6+vmcjZp0JJBVEPXOMncTNg7FF8Z2ZjuIaOj 7oJk/W+3PCq/u9kHtjcJwxfNc3JeVRM2cIiDwFaqorEPHIezKs731nwA74G/oaKJ gK2YfNES5ll1KG1/umiEgWQz5MsBJkCk1KuRerepTroewgEGcYLVJgMQ+HAGOxHy iZn7Gw0kLbe1NS/sdG1PRctDru+zFks= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:59 2025 by rpki-client