$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f6ceb35-e836-30a4-8d7f-a951900d327c.roa File: 4f6ceb35-e836-30a4-8d7f-a951900d327c.roa (raw, json) Hash identifier: Y13DIgCmdCVwY07cTNci8cqBbT3WD2SCUQ/7FO+o0eM= Subject key identifier: B2:F9:60:25:7A:66:9F:E0:CA:D0:4D:55:94:97:BC:B3:65:F8:08:41 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6BF8C1E55E3B8F3306580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f6ceb35-e836-30a4-8d7f-a951900d327c.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.107.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:bf:8c:1e:55:e3:b8:f3:30:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=89a060a1-d28c-4557-91e2-0b6912bb6c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:33:e3:00:2f:4e:da:26:dc:17:c8:ae:6d: 1b:27:23:2a:5d:c7:44:45:a8:08:0d:9d:2b:9b:48: 85:55:0a:45:a4:cd:64:52:91:58:b9:c1:d7:96:5e: 21:08:6d:6f:e3:0f:a8:a5:19:8c:e1:b7:9b:47:de: 12:6e:26:b9:bd:28:b8:35:1f:2e:ad:08:04:4a:c0: 45:4b:02:a9:fb:f6:63:50:9e:ad:5f:a7:b1:ce:93: c4:0b:49:99:c4:63:6c:c5:16:83:7a:cf:58:d6:04: 25:d3:a9:b5:2a:1c:e9:d9:94:11:eb:0c:0d:73:02: 24:b2:3b:aa:3e:ed:a1:d1:2d:ac:74:4a:14:cb:ae: 89:e8:e2:9c:1e:f1:ca:72:de:ee:f4:4a:db:72:8d: 86:2e:1b:ac:d4:7a:11:2b:74:56:2e:f6:d8:5a:a8: 1b:64:19:77:07:b7:41:d7:fc:66:86:13:74:08:df: ed:13:ca:10:0d:9a:28:87:bd:63:33:9e:d9:c0:e6: 27:9a:20:40:77:a5:fc:91:d2:a6:d9:a5:09:85:8d: 13:fa:98:98:f7:10:da:44:ee:50:5b:1d:ae:05:8e: 5a:00:3c:7b:be:f2:13:d5:67:b0:c4:74:4b:83:f6: a7:80:f4:fd:04:90:4e:4c:6e:23:5e:4f:3f:24:a5: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:60:25:7A:66:9F:E0:CA:D0:4D:55:94:97:BC:B3:65:F8:08:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f6ceb35-e836-30a4-8d7f-a951900d327c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b1:29:bf:fd:c5:e2:33:96:44:47:0d:46:d0:6e:66:d2:04: 54:d2:ed:f2:bc:26:c6:d2:dc:da:56:04:fc:8c:fc:10:be:57: 81:f6:c8:29:7f:00:4e:d2:c6:65:55:8f:88:84:7a:eb:97:5e: ba:aa:54:14:83:f8:d2:07:c3:9a:1a:e3:bb:95:32:ba:e9:15: ee:2d:6e:1a:b8:e5:38:19:6c:d6:0a:2a:5c:37:2f:63:94:a1: e3:30:9b:61:c5:83:12:9c:fd:b2:94:dd:08:c5:78:b9:ce:c4: 52:0f:5e:01:cf:9e:21:c7:5c:da:fa:e8:95:c5:2e:02:8b:6b: 6a:89:42:25:76:13:f6:59:bf:43:0f:14:a1:57:c4:6b:67:4d: d0:79:c6:b7:8b:02:98:ba:5f:c4:e7:65:da:8b:23:20:1b:ac: 69:d5:15:92:fa:a5:6a:0d:ef:ad:c8:18:1b:59:76:0d:63:23: ee:55:d6:a9:da:59:55:27:b0:6b:3f:01:17:06:51:81:6a:0b: e1:9c:98:db:36:21:e7:50:d1:77:df:f1:a9:a0:e8:69:0f:2a: 94:14:77:da:ed:44:f6:31:0d:8e:c4:a8:05:84:52:f4:39:61: 56:9b:e8:ab:21:78:af:10:7b:f7:df:b4:6d:62:c6:d8:79:b3: 18:7e:9f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5r+MHlXjuPMwZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ODlhMDYwYTEtZDI4Yy00NTU3LTkxZTItMGI2OTEyYmI2YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYoz4wAvTtom3BfIrm0bJyMqXcdERagIDZ0r m0iFVQpFpM1kUpFYucHXll4hCG1v4w+opRmM4bebR94Sbia5vSi4NR8urQgESsBF SwKp+/ZjUJ6tX6exzpPEC0mZxGNsxRaDes9Y1gQl06m1Khzp2ZQR6wwNcwIksjuq Pu2h0S2sdEoUy66J6OKcHvHKct7u9Erbco2GLhus1HoRK3RWLvbYWqgbZBl3B7dB 1/xmhhN0CN/tE8oQDZooh71jM57ZwOYnmiBAd6X8kdKm2aUJhY0T+piY9xDaRO5Q Wx2uBY5aADx7vvIT1WewxHRLg/angPT9BJBOTG4jXk8/JKXkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL5YCV6Zp/gytBNVZSXvLNl+AhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGY2Y2ViMzUtZTgzNi0z MGE0LThkN2YtYTk1MTkwMGQzMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOxKb/9xeIzlkRHDUbQbmbSBFTS7fK8JsbS3NpWBPyM/BC+V4H2yCl/ AE7SxmVVj4iEeuuXXrqqVBSD+NIHw5oa47uVMrrpFe4tbhq45TgZbNYKKlw3L2OU oeMwm2HFgxKc/bKU3QjFeLnOxFIPXgHPniHHXNr66JXFLgKLa2qJQiV2E/ZZv0MP FKFXxGtnTdB5xreLApi6X8TnZdqLIyAbrGnVFZL6pWoN763IGBtZdg1jI+5V1qna WVUnsGs/ARcGUYFqC+GcmNs2IedQ0Xff8amg6GkPKpQUd9rtRPYxDY7EqAWEUvQ5 YVab6KsheK8Qe/fftG1ixth5sxh+n/w= -----END CERTIFICATE-----Generated at Wed Nov 5 16:09:51 2025 by rpki-client