$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1596127-c061-3de4-951e-7469a2bdc246.roa File: d1596127-c061-3de4-951e-7469a2bdc246.roa (raw, json) Hash identifier: X/AF+932OwVV1J8iVkmhymiMl83+7nb0FlhXaupBJ4Q= Subject key identifier: CB:1D:79:FB:D3:D6:D5:DB:71:19:49:A3:69:8D:88:B1:C0:59:2B:38 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD285027A8E70B0ABBE180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1596127-c061-3de4-951e-7469a2bdc246.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 72.68.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:28:50:27:a8:e7:0b:0a:bb:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=7af5c38d-f26b-4bac-a99d-a1b66804bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:9a:5b:ed:40:69:05:bd:0f:69:8e:0d:74: 02:26:72:77:2e:6b:10:8f:36:65:1a:ce:fb:b6:c0: 61:9d:66:00:21:a5:02:a2:ae:c1:3f:35:bd:4f:c1: 44:3e:e0:7d:79:15:35:78:50:08:f2:0d:b6:de:25: 51:df:e2:32:6b:58:be:1b:29:87:eb:90:f9:c1:43: d6:33:c0:a0:df:1c:3a:58:4d:ce:ae:d3:38:27:a6: a4:a2:00:2f:67:9c:0b:a9:9f:a4:ac:7a:1c:3c:be: 50:b7:81:03:a3:02:18:1a:d4:10:44:be:d1:c3:dc: 26:67:67:4d:b9:ed:bd:ce:91:ee:cd:ab:0e:c8:01: 21:e7:a3:ce:20:e5:a8:6b:05:f6:6c:5f:3f:fb:e9: 02:b6:38:04:c7:6f:dd:08:99:a9:79:7a:e2:dc:3a: 01:6d:61:67:f4:d4:c6:c4:a2:d5:27:dd:44:43:ba: 8e:cc:2c:a7:26:94:03:e5:fa:c8:09:24:14:33:01: 62:18:f8:9f:b0:59:56:1f:ee:eb:9a:5e:e4:91:63: 93:65:7c:7c:9e:5a:81:5d:b9:9d:ef:e4:11:cf:27: 2b:4c:09:6e:f0:c1:74:ce:77:60:85:6e:c4:1a:02: 34:9f:45:9a:93:a3:a7:4f:1a:1b:b9:85:77:b7:b5: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:79:FB:D3:D6:D5:DB:71:19:49:A3:69:8D:88:B1:C0:59:2B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1596127-c061-3de4-951e-7469a2bdc246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.68.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:88:03:b1:83:1d:6f:d8:f5:86:57:2f:ca:48:e4:08:a0:f3: c2:7d:a0:7b:7e:b5:a5:3c:95:d1:19:01:45:76:0d:a4:83:d9: 9f:f6:8a:5f:aa:8a:7e:0b:c8:be:dc:5c:ef:d7:86:c9:ab:ae: 3a:20:45:46:21:23:17:08:31:22:5a:71:34:a5:98:7c:0b:86: 77:3c:88:2c:b2:75:72:78:0b:3a:6a:41:2a:be:f6:d3:a0:b8: a8:cf:3b:1c:13:b2:47:50:a3:18:cb:61:13:4a:a8:18:29:b4: 8a:8e:f9:60:b2:ff:84:ed:b6:49:90:0f:ac:6a:13:53:0d:17: 55:07:46:b6:83:01:30:23:8c:21:13:ef:79:d2:60:2b:14:ba: be:1a:48:d7:7d:5d:65:87:4d:a8:16:ce:69:58:ad:a0:cd:b2: 49:f3:00:91:0c:ae:1a:87:f2:99:1f:49:e0:f9:d5:ef:12:a2: cf:0b:f7:c9:89:57:16:60:43:c9:be:62:7d:8c:fe:b1:2b:a9: 70:e0:4e:86:31:55:58:7f:df:5b:4e:d7:57:b6:05:73:6a:83: ad:32:b8:95:2d:f5:e7:0b:eb:df:e3:d3:87:f9:c2:51:71:88: c6:40:f7:b9:66:44:1a:e5:2a:69:1b:e7:e1:8c:96:ea:f3:49: 2f:ce:43:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/ShQJ6jnCwq74YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk N2FmNWMzOGQtZjI2Yi00YmFjLWE5OWQtYTFiNjY4MDRiZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWGaW+1AaQW9D2mODXQCJnJ3LmsQjzZlGs77 tsBhnWYAIaUCoq7BPzW9T8FEPuB9eRU1eFAI8g223iVR3+Iya1i+GymH65D5wUPW M8Cg3xw6WE3OrtM4J6akogAvZ5wLqZ+krHocPL5Qt4EDowIYGtQQRL7Rw9wmZ2dN ue29zpHuzasOyAEh56POIOWoawX2bF8/++kCtjgEx2/dCJmpeXri3DoBbWFn9NTG xKLVJ91EQ7qOzCynJpQD5frICSQUMwFiGPifsFlWH+7rml7kkWOTZXx8nlqBXbmd 7+QRzycrTAlu8MF0zndghW7EGgI0n0Wak6OnTxobuYV3t7WMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsdefvT1tXbcRlJo2mNiLHAWSs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE1OTYxMjctYzA2MS0z ZGU0LTk1MWUtNzQ2OWEyYmRjMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSESAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWIA7GDHW/Y9YZXL8pI5Aig88J9oHt+taU8ldEZAUV2DaSD2Z/2il+q in4LyL7cXO/XhsmrrjogRUYhIxcIMSJacTSlmHwLhnc8iCyydXJ4CzpqQSq+9tOg uKjPOxwTskdQoxjLYRNKqBgptIqO+WCy/4TttkmQD6xqE1MNF1UHRraDATAjjCET 73nSYCsUur4aSNd9XWWHTagWzmlYraDNsknzAJEMrhqH8pkfSeD51e8Sos8L98mJ VxZgQ8m+Yn2M/rErqXDgToYxVVh/31tO11e2BXNqg60yuJUt9ecL69/j04f5wlFx iMZA97lmRBrlKmkb5+GMlurzSS/OQ9o= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:59 2025 by rpki-client