$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa File: 84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa (raw, json) Hash identifier: ihAwAI/4eicYOTyXdmKhcrlcAeU3rjrhjHaCp+teWZI= Subject key identifier: B0:FF:14:F9:5E:EC:4F:27:5E:05:55:58:89:02:2D:8F:C9:70:25:9D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D41A360FB95FBDA0D3AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.104.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:41:a3:60:fb:95:fb:da:0d:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=0ff3e908-86f6-4680-9fd7-731e83edbe90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:66:24:b8:c4:79:5a:7e:8d:5f:49:70:27: b4:44:55:55:3b:b0:d3:d7:4a:db:db:03:5b:6d:3b: d9:7f:e6:63:65:63:b8:67:a6:1b:87:89:1a:ce:cb: 87:15:ce:b4:4f:3c:79:b8:b5:e3:3e:4a:39:36:64: 21:24:ea:c6:65:87:2e:f5:62:e3:ab:03:47:39:75: 9a:95:39:b1:a3:5e:04:74:b1:40:72:f6:b6:d9:c9: 45:61:5c:33:bc:b0:1a:67:8f:c0:cf:00:f7:36:0b: 46:11:7c:c6:8b:ed:8f:6b:34:9a:ff:cf:0b:dc:b6: 02:af:9b:51:92:76:ba:3c:a0:39:67:51:fa:52:0b: 40:4d:51:44:0c:fb:87:03:9c:76:0d:c1:23:c0:ed: 07:ef:bc:0d:d3:ea:92:d4:af:f0:96:3a:91:db:d7: cb:af:bc:7b:56:ea:da:e2:60:4f:49:08:81:46:cb: 5b:a4:ad:f7:db:81:f5:1a:54:0c:f5:d0:a7:d9:f6: 4e:96:7e:45:57:0e:70:95:ab:d0:78:c7:34:f0:7a: 39:25:d1:72:7d:45:a7:41:ec:00:2c:41:a1:51:a0: 02:59:f8:47:ca:34:58:d6:4d:a7:65:e0:64:19:e9: 73:36:ef:76:78:3a:01:75:66:4c:3f:d3:57:72:7d: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FF:14:F9:5E:EC:4F:27:5E:05:55:58:89:02:2D:8F:C9:70:25:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c3131c-e9aa-3559-b93a-de1c1bd3fa07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f4:65:59:55:53:d6:a7:8c:a7:da:da:df:8b:3a:77:dc:ee: 55:40:a5:3b:85:93:94:ef:9e:ea:3d:e6:02:4a:ee:d7:a4:78: 03:97:5b:bf:de:1c:36:43:cd:61:c7:2d:6c:d6:66:86:c7:33: 1d:d7:f8:28:1f:56:ef:a6:b1:40:52:34:76:a7:5c:2a:74:1c: b0:1b:7a:a6:6f:07:e8:a5:be:c4:04:09:83:b8:20:c8:a1:1a: 90:1d:f0:06:bd:ac:ec:3b:05:56:d8:fa:3d:83:fc:28:7c:34: de:bb:10:6c:3f:a0:c4:a0:1b:15:34:1a:6f:fe:56:98:74:aa: ed:d1:f3:d7:71:8a:79:e8:a9:ad:46:15:b9:25:eb:33:a1:62: 6a:b7:38:a0:eb:b3:50:4c:54:dd:67:88:c8:75:54:62:6f:29: 3b:81:9d:8d:1a:77:fe:88:8b:a0:d6:91:29:ff:c9:a2:45:b4: 67:96:57:8a:d5:02:de:5f:cd:b8:38:9a:4e:d2:fb:8e:ed:90: f7:d2:de:8a:54:e5:c3:a0:a7:f6:ac:1b:21:0e:14:89:e2:44: 02:4a:3a:73:fe:0f:30:80:4f:21:30:a1:6b:63:03:83:fd:20: 5e:1d:fb:0f:eb:62:f2:a6:fb:33:f3:55:ca:0c:7f:57:13:af: 23:3b:8d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUGjYPuV+9oNOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGZmM2U5MDgtODZmNi00NjgwLTlmZDctNzMxZTgzZWRiZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUxmJLjEeVp+jV9JcCe0RFVVO7DT10rb2wNb bTvZf+ZjZWO4Z6Ybh4kazsuHFc60Tzx5uLXjPko5NmQhJOrGZYcu9WLjqwNHOXWa lTmxo14EdLFAcva22clFYVwzvLAaZ4/AzwD3NgtGEXzGi+2PazSa/88L3LYCr5tR kna6PKA5Z1H6UgtATVFEDPuHA5x2DcEjwO0H77wN0+qS1K/wljqR29fLr7x7Vura 4mBPSQiBRstbpK3324H1GlQM9dCn2fZOln5FVw5wlavQeMc08Ho5JdFyfUWnQewA LEGhUaACWfhHyjRY1k2nZeBkGelzNu92eDoBdWZMP9NXcn0WKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD/FPle7E8nXgVVWIkCLY/JcCWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODRjMzEzMWMtZTlhYS0z NTU5LWI5M2EtZGUxYzFiZDNmYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX0ZVlVU9anjKfa2t+LOnfc7lVApTuFk5Tvnuo95gJK7tekeAOXW7/e HDZDzWHHLWzWZobHMx3X+CgfVu+msUBSNHanXCp0HLAbeqZvB+ilvsQECYO4IMih GpAd8Aa9rOw7BVbY+j2D/Ch8NN67EGw/oMSgGxU0Gm/+Vph0qu3R89dxinnoqa1G Fbkl6zOhYmq3OKDrs1BMVN1niMh1VGJvKTuBnY0ad/6Ii6DWkSn/yaJFtGeWV4rV At5fzbg4mk7S+47tkPfS3opU5cOgp/asGyEOFIniRAJKOnP+DzCATyEwoWtjA4P9 IF4d+w/rYvKm+zPzVcoMf1cTryM7jV0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:33 2025 by rpki-client