$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87884fed-ce34-31ff-ac63-010b7f156a48.roa File: 87884fed-ce34-31ff-ac63-010b7f156a48.roa (raw, json) Hash identifier: H9S8UK99I5AVCw4AN4D2PNivvgitYVN/H+4hJQ1yV7A= Subject key identifier: 57:7A:AA:3D:F7:B7:60:34:CE:A9:5F:02:D9:08:B2:A7:46:26:9F:3F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D327FE6A2E28000B44000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87884fed-ce34-31ff-ac63-010b7f156a48.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.104.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:32:7f:e6:a2:e2:80:00:b4:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=6fbe9095-94a7-45a7-8a43-7492649a9b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:25:0f:d2:85:85:1b:cb:3c:ec:fe:8e:2e:64: be:a4:c9:82:7c:f8:d9:a2:63:54:6d:4e:57:1f:5c: 57:d9:ac:76:e6:98:3e:0b:14:fe:92:3e:83:5b:12: 30:1f:73:27:d7:2b:b5:1e:0c:2d:0f:bb:22:99:f7: 81:be:7b:84:a5:67:82:68:5c:b1:4b:7d:47:e1:f3: c7:65:a1:4a:2c:03:6e:55:5d:98:2d:c9:56:7a:c3: 88:f4:d2:03:25:32:70:c4:0b:ee:51:8f:41:73:51: ff:a6:1e:85:e5:44:1d:5b:94:20:b3:e6:50:d4:98: 01:b0:d3:e9:8a:59:cb:3a:c0:59:25:74:e4:7a:d9: 22:ba:60:67:c2:ef:6f:f6:1f:45:8c:fc:a1:d8:82: e4:0a:15:17:c8:de:36:52:63:d5:b6:92:b1:16:ce: c3:6e:cf:fe:34:c2:91:24:e4:d7:c3:db:c5:37:7e: 75:eb:fb:d8:33:65:83:c2:d3:16:cd:43:2a:59:a5: 08:11:6f:c2:09:47:a1:8f:88:6c:69:5b:1d:a2:a3: d6:8e:67:1a:82:fc:d6:0a:ff:a2:96:ab:b4:52:9d: 6d:e7:04:c3:ec:58:52:b8:98:54:02:68:cc:03:e8: 7b:15:9b:e5:ee:26:36:dd:ab:ca:fe:48:8e:40:1f: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:AA:3D:F7:B7:60:34:CE:A9:5F:02:D9:08:B2:A7:46:26:9F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87884fed-ce34-31ff-ac63-010b7f156a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:51:de:c6:1e:d6:d7:ea:15:8c:be:ac:a7:15:c0:da:1a:05: 61:90:29:52:85:c2:ff:97:86:2c:81:0b:44:90:e2:6d:55:60: 04:87:0f:d2:25:66:c0:89:66:14:17:00:26:a5:93:61:4c:e1: 8e:1d:dd:63:06:44:5f:9b:2c:de:d3:43:c0:7b:ec:24:88:39: ab:69:4a:37:df:59:8c:b3:b0:b5:1a:7a:52:66:1a:73:16:a7: 40:b1:57:d4:d4:d9:ec:5c:b9:fd:09:6b:ca:4d:de:68:82:0c: c0:6d:2e:e7:95:ff:41:5a:d7:1f:fd:70:d0:a4:f9:5a:af:47: e4:a5:24:9c:07:4d:f8:dd:e4:c5:c2:5d:0f:b1:97:91:84:55: 5a:67:e5:06:a0:03:62:ad:ba:eb:0b:0b:f9:91:2e:1c:8e:24: ae:83:0e:1b:9e:e8:74:fc:eb:78:50:5d:cb:68:a0:f1:e0:81: 71:35:92:f3:00:5b:eb:b8:2f:51:df:90:34:d8:6f:2c:24:1b: 31:bd:dd:3a:74:a2:ff:90:1f:1f:88:71:c1:c1:5b:0d:f4:05: 11:58:d0:d6:11:33:37:3b:d2:67:1b:c0:26:aa:30:b2:1b:20: 50:bd:fd:a5:bd:52:a0:6a:d1:71:1a:ea:f2:ed:93:e4:23:a4: d2:33:fe:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jTJ/5qLigAC0QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmZiZTkwOTUtOTRhNy00NWE3LThhNDMtNzQ5MjY0OWE5YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiUP0oWFG8s87P6OLmS+pMmCfPjZomNUbU5X H1xX2ax25pg+CxT+kj6DWxIwH3Mn1yu1HgwtD7simfeBvnuEpWeCaFyxS31H4fPH ZaFKLANuVV2YLclWesOI9NIDJTJwxAvuUY9Bc1H/ph6F5UQdW5Qgs+ZQ1JgBsNPp ilnLOsBZJXTketkiumBnwu9v9h9FjPyh2ILkChUXyN42UmPVtpKxFs7Dbs/+NMKR JOTXw9vFN3516/vYM2WDwtMWzUMqWaUIEW/CCUehj4hsaVsdoqPWjmcagvzWCv+i lqu0Up1t5wTD7FhSuJhUAmjMA+h7FZvl7iY23avK/kiOQB+kzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd6qj33t2A0zqlfAtkIsqdGJp8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODc4ODRmZWQtY2UzNC0z MWZmLWFjNjMtMDEwYjdmMTU2YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5R3sYe1tfqFYy+rKcVwNoaBWGQKVKFwv+XhiyBC0SQ4m1VYASHD9Il ZsCJZhQXACalk2FM4Y4d3WMGRF+bLN7TQ8B77CSIOatpSjffWYyzsLUaelJmGnMW p0CxV9TU2excuf0Ja8pN3miCDMBtLueV/0Fa1x/9cNCk+VqvR+SlJJwHTfjd5MXC XQ+xl5GEVVpn5QagA2KtuusLC/mRLhyOJK6DDhue6HT863hQXctooPHggXE1kvMA W+u4L1HfkDTYbywkGzG93Tp0ov+QHx+IccHBWw30BRFY0NYRMzc70mcbwCaqMLIb IFC9/aW9UqBq0XEa6vLtk+QjpNIz/vQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:57 2025 by rpki-client