$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3fcf38-8123-381f-9640-d2fff1c83183.roa File: 4f3fcf38-8123-381f-9640-d2fff1c83183.roa (raw, json) Hash identifier: zAz4nAnRH8TJySyuQYsH/SHW36upzd2mOd24s0yYH68= Subject key identifier: 01:50:29:49:5D:E7:87:D1:71:88:55:2D:7C:6A:45:88:3B:C8:E0:E7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD27C675656E4C77681EA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3fcf38-8123-381f-9640-d2fff1c83183.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 72.79.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:27:c6:75:65:6e:4c:77:68:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=24c5703a-3659-40fe-b226-a3ffd01146c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:61:c2:3c:12:c8:ef:62:67:d9:94:9b:c8: 8e:01:e6:94:05:4d:38:a2:c2:f7:ce:6c:d3:47:0e: 73:23:11:49:de:a9:27:ba:0b:68:23:19:a8:f5:69: b1:5e:92:30:b5:2f:f7:19:19:e4:e5:63:e9:5c:76: bc:ad:de:54:48:8d:72:db:9e:74:68:df:c8:94:19: 0a:95:81:cf:d1:cb:d7:49:6d:62:cc:d4:5b:6d:63: 4d:ea:6b:d5:d6:9a:0b:72:1c:e8:67:ce:80:87:b5: f2:2c:48:a0:bf:cc:34:98:07:1c:99:2a:05:21:65: c8:5b:7e:8d:41:0f:52:00:16:e2:34:5a:02:29:a0: 4f:70:9a:95:24:91:db:4c:e3:80:e5:56:02:67:d0: 32:c3:d1:d2:14:77:f6:56:ab:12:8e:55:d6:62:57: b1:f7:91:21:64:38:61:67:98:b3:03:a3:ff:7d:96: 44:bf:6e:5a:1f:10:43:59:b5:1e:0d:da:94:b8:59: 0a:d0:36:45:fa:88:76:d8:ee:7c:3b:30:d1:14:66: b9:66:45:b3:c9:9a:7d:b0:64:08:29:28:62:6e:5e: 28:c8:9a:46:69:51:80:00:ac:63:cd:28:48:4b:66: 28:00:de:67:08:af:86:45:ad:e7:cf:aa:03:6e:24: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:29:49:5D:E7:87:D1:71:88:55:2D:7C:6A:45:88:3B:C8:E0:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3fcf38-8123-381f-9640-d2fff1c83183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.79.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:73:71:62:dc:20:8c:4b:b6:96:6d:20:b3:4b:46:80:f2:e6: 33:c6:ee:cd:bc:45:e2:03:bd:3c:98:1a:9f:5e:1d:dc:2d:6e: f5:42:a1:47:21:1c:89:43:69:a8:d5:bf:34:23:1b:2b:9d:d4: 8a:3d:ab:90:34:d3:ce:3f:eb:0b:1a:4d:9f:4d:ee:c8:08:97: d3:5b:3f:58:da:24:a7:81:54:b4:1f:00:82:17:d6:59:6f:00: 32:de:85:8b:5c:d4:7b:0a:a5:fc:11:d3:3e:e3:b2:0d:a1:31: 31:e9:45:33:56:eb:6d:80:a6:5a:bc:2f:0a:eb:d2:18:ba:39: 0f:bb:55:e5:0b:ae:0e:23:57:9e:e9:de:55:30:af:9e:f5:0e: f5:51:e4:17:73:89:d1:89:9f:4b:6e:e4:eb:21:2e:3a:9b:cf: b4:7b:27:26:29:dc:49:36:09:10:ba:53:cf:93:08:f9:c9:05: cf:1d:7a:3e:df:13:e0:04:16:54:7e:c4:cf:6c:17:b2:f4:11: b8:6e:c6:42:8b:69:99:bd:12:d6:aa:e8:b7:e8:6f:1b:50:7c: 7c:84:9d:6f:1a:53:71:68:c7:36:ec:2b:7b:61:12:d7:b8:cb: 4a:96:fa:0c:91:da:0b:80:54:a5:ee:40:2d:c5:73:ab:75:a9: 8e:42:5b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SfGdWVuTHdoHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjRjNTcwM2EtMzY1OS00MGZlLWIyMjYtYTNmZmQwMTE0NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+1hwjwSyO9iZ9mUm8iOAeaUBU04osL3zmzT Rw5zIxFJ3qknugtoIxmo9WmxXpIwtS/3GRnk5WPpXHa8rd5USI1y2550aN/IlBkK lYHP0cvXSW1izNRbbWNN6mvV1poLchzoZ86Ah7XyLEigv8w0mAccmSoFIWXIW36N QQ9SABbiNFoCKaBPcJqVJJHbTOOA5VYCZ9Ayw9HSFHf2VqsSjlXWYlex95EhZDhh Z5izA6P/fZZEv25aHxBDWbUeDdqUuFkK0DZF+oh22O58OzDRFGa5ZkWzyZp9sGQI KShibl4oyJpGaVGAAKxjzShIS2YoAN5nCK+GRa3nz6oDbiTN1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFQKUld54fRcYhVLXxqRYg7yODnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGYzZmNmMzgtODEyMy0z ODFmLTk2NDAtZDJmZmYxYzgzMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSE+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVzcWLcIIxLtpZtILNLRoDy5jPG7s28ReIDvTyYGp9eHdwtbvVCoUch HIlDaajVvzQjGyud1Io9q5A0084/6wsaTZ9N7sgIl9NbP1jaJKeBVLQfAIIX1llv ADLehYtc1HsKpfwR0z7jsg2hMTHpRTNW622Aplq8Lwrr0hi6OQ+7VeULrg4jV57p 3lUwr571DvVR5BdzidGJn0tu5OshLjqbz7R7JyYp3Ek2CRC6U8+TCPnJBc8dej7f E+AEFlR+xM9sF7L0EbhuxkKLaZm9Etaq6LfobxtQfHyEnW8aU3FoxzbsK3thEte4 y0qW+gyR2guAVKXuQC3Fc6t1qY5CWy8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:48 2025 by rpki-client