$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa File: 71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa (raw, json) Hash identifier: zaHvsrYTPGwHB5fziJNggpdRTrzBLX8B7tQNGdwQGsg= Subject key identifier: 28:8A:A6:0E:C8:5F:8C:8B:19:05:88:0D:AA:C2:29:3B:13:C5:65:77 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D4060D1C5DEA0DA3EB5C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.104.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:40:60:d1:c5:de:a0:da:3e:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=8c525b5e-5bed-4652-994c-d36a60292f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:bc:88:66:3a:0b:af:ef:f9:43:62:94:98: 81:0c:8b:fc:cb:87:fc:ce:cf:f2:81:1d:66:9b:ec: d5:f9:e7:2d:85:62:25:1c:a5:41:e6:e2:6a:24:7e: 62:02:9b:a7:a4:7c:6b:cb:f9:58:11:ec:10:6e:86: 4c:5c:55:57:57:4c:62:52:d7:c4:79:ce:32:4d:26: d8:e9:40:41:0b:a7:c4:32:8b:68:0a:3f:c4:0b:b4: 93:2f:e9:03:94:d0:8b:94:25:cf:bd:cd:8a:b6:c0: 45:18:f7:3f:9f:e7:5f:38:29:10:8b:cc:73:33:23: c7:a0:e0:5b:4f:30:74:a8:02:d7:c2:e8:65:ae:cf: 69:ba:79:76:3b:dc:5a:b3:76:3e:2d:c7:ae:9a:c5: 2f:cd:43:c0:ea:22:91:e1:ca:c8:0e:0d:f3:08:c5: 3e:6b:d7:d7:94:ab:fb:16:84:e0:83:71:ba:77:c7: b0:d9:90:2a:6b:6b:ec:f1:11:5a:1b:6c:ba:0c:8d: c1:af:df:8a:7f:8f:d9:48:76:f0:55:28:be:af:a9: 36:49:e9:6e:3c:84:c2:6d:49:c2:6d:a5:1a:99:cf: 53:21:3e:f2:56:23:cf:5a:b5:08:99:19:71:24:e5: 20:ca:a0:bd:98:59:0c:10:1a:3a:c5:9a:79:eb:f0: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8A:A6:0E:C8:5F:8C:8B:19:05:88:0D:AA:C2:29:3B:13:C5:65:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d9:7f:c3:be:39:0a:a9:18:32:7f:60:ac:50:c8:f6:43:5b: 81:0e:cb:ba:90:f7:c2:6a:4b:ca:ad:3b:4c:af:7b:e9:47:e3: ef:af:74:a6:21:e5:5e:1b:92:d3:a2:08:90:fe:50:22:b7:1e: 31:b9:fa:d7:46:c8:8d:ea:26:d3:5e:f8:f6:c5:0e:06:35:d5: 39:8a:c7:42:4c:6a:7d:20:fe:4e:8c:be:2d:e6:c4:40:59:f5: 3a:70:21:69:ae:8c:a2:6c:a1:f2:91:66:72:f9:13:1a:70:68: 3f:a1:2b:0c:6b:f6:77:1b:ea:21:92:03:71:dd:aa:07:88:e0: 6b:fc:bc:bc:c6:31:14:83:34:ab:7c:42:94:61:31:54:ac:15: 8a:c9:4c:13:04:f0:09:a4:bf:76:29:73:c8:f9:49:cf:21:6c: 0c:a9:c7:bf:3b:a7:4a:87:94:9e:1f:01:db:82:97:1d:3f:ca: ff:ed:2f:23:22:20:50:9d:f5:2e:73:3b:0a:95:f1:68:73:d2: 08:7a:55:de:3c:84:a9:8b:72:41:d2:3e:f4:bb:21:46:4f:23: ba:c1:06:f0:ca:de:64:c2:c7:84:c8:fb:f5:0f:6e:94:0e:aa: 16:71:6b:3d:c7:17:05:e7:ec:7d:d4:22:2e:aa:18:51:89:91: 37:3c:0e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUBg0cXeoNo+tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OGM1MjViNWUtNWJlZC00NjUyLTk5NGMtZDM2YTYwMjkyZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGi8iGY6C6/v+UNilJiBDIv8y4f8zs/ygR1m m+zV+ecthWIlHKVB5uJqJH5iApunpHxry/lYEewQboZMXFVXV0xiUtfEec4yTSbY 6UBBC6fEMotoCj/EC7STL+kDlNCLlCXPvc2KtsBFGPc/n+dfOCkQi8xzMyPHoOBb TzB0qALXwuhlrs9punl2O9xas3Y+LceumsUvzUPA6iKR4crIDg3zCMU+a9fXlKv7 FoTgg3G6d8ew2ZAqa2vs8RFaG2y6DI3Br9+Kf4/ZSHbwVSi+r6k2SeluPITCbUnC baUamc9TIT7yViPPWrUImRlxJOUgyqC9mFkMEBo6xZp56/C7ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiKpg7IX4yLGQWIDarCKTsTxWV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzFiOGQ2NzAtZTE3Mi0z YWEzLTkxZjEtOGQ1YzQ3MzFhY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTZf8O+OQqpGDJ/YKxQyPZDW4EOy7qQ98JqS8qtO0yve+lH4++vdKYh 5V4bktOiCJD+UCK3HjG5+tdGyI3qJtNe+PbFDgY11TmKx0JMan0g/k6Mvi3mxEBZ 9TpwIWmujKJsofKRZnL5ExpwaD+hKwxr9ncb6iGSA3HdqgeI4Gv8vLzGMRSDNKt8 QpRhMVSsFYrJTBME8Amkv3Ypc8j5Sc8hbAypx787p0qHlJ4fAduClx0/yv/tLyMi IFCd9S5zOwqV8Whz0gh6Vd48hKmLckHSPvS7IUZPI7rBBvDK3mTCx4TI+/UPbpQO qhZxaz3HFwXn7H3UIi6qGFGJkTc8Dmg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:42 2025 by rpki-client