$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46c0d396-c653-32dc-b473-5b26b91d6595.roa File: 46c0d396-c653-32dc-b473-5b26b91d6595.roa (raw, json) Hash identifier: OJPtSjpsWoi/bj8TcDoHHCD0HjkwJ4ZWtK+Z2MLoTn0= Subject key identifier: F1:6B:95:64:DE:5E:29:7E:31:65:D6:31:D9:5C:1B:65:C5:69:15:08 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D424A51B16E63F1156C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46c0d396-c653-32dc-b473-5b26b91d6595.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.105.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:42:4a:51:b1:6e:63:f1:15:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=05d52f8a-38c6-4dbc-a511-6dccef83dd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:d4:6a:1d:6f:a8:c4:88:fd:3e:17:a8:ba: 98:d2:96:67:c4:f7:9a:06:dc:a6:2d:24:1c:62:67: 9a:f2:d6:61:18:7c:33:c6:5f:25:0e:b5:df:cb:92: a5:ae:d3:d2:64:58:73:24:6f:1f:83:11:31:b2:f6: db:37:99:87:75:f1:14:b6:a7:2e:3a:c4:a0:4d:e9: 70:fb:8f:01:28:20:39:2f:fe:f6:da:24:9c:34:a2: 4c:79:0c:88:99:be:ce:ff:2c:e3:f9:1d:ee:7e:e2: 47:29:cd:07:1a:89:29:2d:87:85:9a:a4:80:f7:ab: da:c8:e7:93:09:25:0b:a5:2c:98:80:fe:4e:de:d5: 76:c5:e8:0b:41:e3:6a:08:24:6d:50:84:a6:b5:c4: 41:e8:9b:0d:dd:28:57:42:f4:e1:12:75:eb:9f:bc: 86:ab:71:1b:23:6b:35:15:4f:bb:74:25:96:bd:5f: ec:77:84:f4:3e:76:90:91:97:8c:1d:40:dd:3e:1b: 79:7b:37:15:13:fa:b1:3c:60:7e:38:cb:bb:13:1e: a4:35:bc:0f:7e:47:eb:cb:fc:fc:3d:52:e8:5c:e0: d8:38:26:b1:2c:9f:d6:b8:94:f9:9f:91:8d:98:98: 84:5e:2d:28:ff:36:25:05:c9:56:0c:2f:1a:71:65: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6B:95:64:DE:5E:29:7E:31:65:D6:31:D9:5C:1B:65:C5:69:15:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46c0d396-c653-32dc-b473-5b26b91d6595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.105.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2b:80:3e:03:09:48:0e:05:67:68:dd:de:75:9d:83:1f:b5: 23:1d:d6:a8:aa:81:97:dd:e0:8e:ba:81:67:64:33:92:a3:58: b7:7c:b1:d1:25:73:2c:86:b8:6e:bf:d7:f1:e6:2f:de:ca:c5: 4e:d1:4e:cc:31:37:b5:b4:3f:e7:37:87:10:81:ce:50:39:cc: f0:0f:27:08:5b:a5:44:4c:84:2c:41:24:83:6d:67:b5:2a:a3: 2b:7a:a1:b2:38:33:f7:ce:c1:46:57:8a:01:f6:52:02:8e:94: 73:62:ed:97:ba:ea:83:80:e6:4d:74:68:29:d1:ea:90:22:23: da:91:fe:0f:81:1b:f0:41:51:55:91:8e:db:22:9f:a5:18:66: e8:1f:96:45:21:4b:09:bb:e4:4c:89:ec:dd:84:26:bf:6b:bc: d6:39:2e:91:60:31:a6:ab:23:60:8b:9e:a9:7f:84:bc:0d:a4: ea:cf:fa:ab:4c:7d:f1:b1:b7:02:eb:15:3e:cb:e5:59:63:9a: ae:a3:85:b5:5c:38:5b:e1:cc:94:e2:36:98:1c:22:ba:e5:50: ad:a7:12:6b:9a:e6:3f:b4:60:49:f5:b5:49:c3:8e:2b:e6:bc: db:86:f8:99:ee:30:f4:43:81:77:10:d4:4e:a8:8c:a3:aa:aa: 95:6b:2a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUJKUbFuY/EVbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDVkNTJmOGEtMzhjNi00ZGJjLWE1MTEtNmRjY2VmODNkZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7Uah1vqMSI/T4XqLqY0pZnxPeaBtymLSQc Ymea8tZhGHwzxl8lDrXfy5KlrtPSZFhzJG8fgxExsvbbN5mHdfEUtqcuOsSgTelw +48BKCA5L/722iScNKJMeQyImb7O/yzj+R3ufuJHKc0HGokpLYeFmqSA96vayOeT CSULpSyYgP5O3tV2xegLQeNqCCRtUISmtcRB6JsN3ShXQvThEnXrn7yGq3EbI2s1 FU+7dCWWvV/sd4T0PnaQkZeMHUDdPht5ezcVE/qxPGB+OMu7Ex6kNbwPfkfry/z8 PVLoXODYOCaxLJ/WuJT5n5GNmJiEXi0o/zYlBclWDC8acWUMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFrlWTeXil+MWXWMdlcG2XFaRUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDZjMGQzOTYtYzY1My0z MmRjLWI0NzMtNWIyNmI5MWQ2NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4rgD4DCUgOBWdo3d51nYMftSMd1qiqgZfd4I66gWdkM5KjWLd8sdEl cyyGuG6/1/HmL97KxU7RTswxN7W0P+c3hxCBzlA5zPAPJwhbpURMhCxBJINtZ7Uq oyt6obI4M/fOwUZXigH2UgKOlHNi7Ze66oOA5k10aCnR6pAiI9qR/g+BG/BBUVWR jtsin6UYZugflkUhSwm75EyJ7N2EJr9rvNY5LpFgMaarI2CLnql/hLwNpOrP+qtM ffGxtwLrFT7L5Vljmq6jhbVcOFvhzJTiNpgcIrrlUK2nEmua5j+0YEn1tUnDjivm vNuG+JnuMPRDgXcQ1E6ojKOqqpVrKlY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:36 2025 by rpki-client