$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa File: 972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa (raw, json) Hash identifier: mecqazTLdlTf9QIk7QaeFI1v+G0pxh2RvRiTOAGX+WQ= Subject key identifier: 5F:83:1C:1E:05:5B:B5:5A:E5:EA:02:42:A4:33:15:D9:A9:D9:F5:9F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F805CA4D2677B1951C60C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 72.87.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:05:ca:4d:26:77:b1:95:1c:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=976fbbbe-3452-4fa4-b58b-8ce1bd53c9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:c2:75:98:35:b6:a2:37:04:6b:79:6a:b2: 15:dd:30:06:75:a4:e4:a5:50:73:9b:3b:69:cd:1a: f3:52:6e:bf:95:a6:2c:e6:8a:d2:03:e6:2e:9f:99: 25:7e:e2:a4:81:23:02:6c:1c:dd:9e:3d:31:8e:08: 1f:ff:9e:54:8d:26:1d:23:b0:ee:63:83:1b:74:6f: 13:44:61:82:f3:8e:83:6d:fc:fc:57:e3:9b:d4:d7: 9b:10:c8:ee:53:77:c2:a1:bf:10:d2:6a:1b:21:8b: 7a:ba:c8:3a:e5:dc:bd:ee:3a:c2:77:fe:28:21:19: 71:7b:84:4f:4b:8f:36:2d:01:24:ea:fb:51:9f:bf: 86:cc:d6:f9:c4:10:5f:fa:95:5f:8e:ce:e1:84:4f: 2f:ab:ff:85:3d:e4:b9:ef:c3:74:ff:c4:85:9f:21: f5:02:4a:da:a0:de:4e:60:ed:13:84:af:32:bd:5f: 3b:0a:ab:c2:de:15:2c:f4:58:dc:f5:df:be:79:3d: da:cf:a7:5f:3b:c1:a5:f8:ad:0a:8d:35:b3:6f:eb: b5:ac:a1:18:43:3f:42:f4:31:0d:d0:15:e4:a1:31: 5b:1f:ea:cb:b4:33:22:91:23:57:6e:bb:84:87:17: 60:ee:e6:18:25:32:1a:49:8f:6d:d8:57:bd:9a:29: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:1C:1E:05:5B:B5:5A:E5:EA:02:42:A4:33:15:D9:A9:D9:F5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ae:3f:09:99:ab:29:d8:a1:82:ab:05:df:82:94:e1:70:88: d1:1d:d3:22:c4:4f:2f:52:53:8d:a3:f3:ac:db:ac:98:52:cb: 46:95:9d:f5:2c:fd:12:6f:33:06:d6:bc:5f:17:b4:59:3f:86: c0:d8:97:58:f1:5a:6a:c9:9a:4e:30:f3:97:f4:65:b6:92:68: b2:dd:65:90:b2:b7:cc:18:0f:0f:6c:ae:bd:4d:b0:1f:b3:1a: 66:40:9e:ec:13:3f:e3:c6:ce:94:2c:f6:95:ad:8e:16:e1:a2: 8f:7d:da:5b:56:b6:90:8c:c2:40:e9:9f:1d:b0:48:7e:ac:d3: 1a:cf:b7:fd:3b:b2:5d:a0:c7:96:c2:63:77:50:37:50:87:75: fc:d7:50:2d:66:63:35:e4:26:4a:ac:b0:d2:ed:35:f7:2f:ac: e8:4c:08:07:3f:33:b3:fe:11:56:f9:db:72:8d:13:9c:f7:4b: d5:64:3d:8d:ad:83:98:19:33:ac:9c:39:7a:1f:23:fe:da:03: fd:e6:0b:9f:e7:c2:80:d1:13:ab:a9:29:9a:f8:44:4c:fb:35: 7e:04:cb:f4:6c:a7:b1:9b:05:ea:3d:30:d6:9d:80:96:d5:c0: cd:90:c1:8f:17:7a:db:60:fa:d6:a5:d7:54:02:77:7b:03:2f: 14:bf:12:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AXKTSZ3sZUcYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OTc2ZmJiYmUtMzQ1Mi00ZmE0LWI1OGItOGNlMWJkNTNjOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIvCdZg1tqI3BGt5arIV3TAGdaTkpVBzmztp zRrzUm6/laYs5orSA+Yun5klfuKkgSMCbBzdnj0xjggf/55UjSYdI7DuY4MbdG8T RGGC846Dbfz8V+Ob1NebEMjuU3fCob8Q0mobIYt6usg65dy97jrCd/4oIRlxe4RP S482LQEk6vtRn7+GzNb5xBBf+pVfjs7hhE8vq/+FPeS578N0/8SFnyH1AkraoN5O YO0ThK8yvV87CqvC3hUs9Fjc9d++eT3az6dfO8Gl+K0KjTWzb+u1rKEYQz9C9DEN 0BXkoTFbH+rLtDMikSNXbruEhxdg7uYYJTIaSY9t2Fe9mimrXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+DHB4FW7Va5eoCQqQzFdmp2fWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTcyZDBlM2ItYmI0ZS0z N2U2LTkxZGYtMzE0YThjOTBiOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICuPwmZqynYoYKrBd+ClOFwiNEd0yLETy9SU42j86zbrJhSy0aVnfUs /RJvMwbWvF8XtFk/hsDYl1jxWmrJmk4w85f0ZbaSaLLdZZCyt8wYDw9srr1NsB+z GmZAnuwTP+PGzpQs9pWtjhbhoo992ltWtpCMwkDpnx2wSH6s0xrPt/07sl2gx5bC Y3dQN1CHdfzXUC1mYzXkJkqssNLtNfcvrOhMCAc/M7P+EVb523KNE5z3S9VkPY2t g5gZM6ycOXofI/7aA/3mC5/nwoDRE6upKZr4REz7NX4Ey/Rsp7GbBeo9MNadgJbV wM2QwY8Xettg+tal11QCd3sDLxS/EkA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:32 2025 by rpki-client