$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7eabfb2-67d5-3a50-ba21-ed738d399756.roa File: d7eabfb2-67d5-3a50-ba21-ed738d399756.roa (raw, json) Hash identifier: U0HIfWc+nPtVarmQwyfoJus/T2xIs+kfQFfPyPUOT30= Subject key identifier: 33:B2:34:3D:0B:EF:EF:76:D4:DD:5C:85:14:25:FE:9D:A4:12:07:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B500FB2CB4E43A075F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7eabfb2-67d5-3a50-ba21-ed738d399756.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.107.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b5:00:fb:2c:b4:e4:3a:07:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=2e7265b6-bb4d-49d3-9afe-a9a8ac4c413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:22:67:bb:4e:0a:c7:fe:2f:db:80:c3:c9: 00:d5:f1:1b:cd:58:41:d1:3f:8f:2f:47:4f:d5:0a: 67:f2:da:b7:52:53:84:fe:d2:24:1a:c4:a5:1e:a7: b5:4c:c2:c6:f9:0e:fc:27:44:b2:ee:0e:9f:36:3d: 1a:a2:33:73:4d:55:67:f6:d4:fc:f3:4d:b2:02:41: 64:b2:f0:b7:b3:b4:ca:c0:5c:e6:6d:1c:91:45:fe: 88:47:f1:da:9a:db:86:86:ba:c2:2c:1a:c8:de:5e: 4c:e7:03:5b:3b:5b:f7:1c:43:a3:8f:b3:b2:94:19: 41:54:d9:c1:f3:76:c9:6d:43:e0:bd:ab:64:9e:c3: 15:ef:d2:c8:ed:d3:bd:05:ee:a8:fd:ac:21:d7:26: 01:f4:25:b8:ba:81:d3:52:ef:fd:ff:6d:bf:bd:94: a8:60:32:a8:56:e5:cd:77:bb:54:d9:13:dd:5f:70: b2:1c:dd:c0:33:a5:83:9d:c2:1a:33:c9:04:5a:6e: c3:b3:b9:46:62:e1:4f:0e:1e:5a:32:fd:30:7a:c4: 71:70:cf:0c:3d:e8:f2:90:8f:50:0c:71:db:5b:12: 9b:60:4f:f8:0b:ce:38:80:6c:2b:f5:e5:b8:93:67: 68:a9:2f:05:ee:01:3b:48:8d:25:ae:d9:a1:28:63: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:34:3D:0B:EF:EF:76:D4:DD:5C:85:14:25:FE:9D:A4:12:07:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7eabfb2-67d5-3a50-ba21-ed738d399756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:46:17:5f:06:28:10:4e:39:76:cf:86:06:c6:a7:71:a0:3a: 42:36:6a:5c:c3:5a:90:b6:bf:db:3c:71:c0:e6:76:cc:22:2d: ac:45:6c:2a:ec:96:ce:04:c0:90:a5:1e:cf:4b:ca:51:3d:fd: 33:9c:33:eb:4a:94:2e:86:c5:0a:6b:f4:f8:cb:94:92:8b:f8: 74:5a:26:3d:c0:ac:ce:2c:49:b2:1e:61:e0:6d:da:14:f0:ca: a1:d6:da:c4:07:43:b2:6e:3c:97:87:d0:3c:f8:04:9e:4b:59: 34:67:b6:f5:cd:ce:39:cd:9f:4c:41:14:ba:3a:a1:3b:ac:bd: a8:65:be:d0:26:96:d6:51:f2:e4:3e:3e:f1:90:d8:14:c8:5c: c5:3e:a5:e8:a7:7a:be:38:f7:5f:62:34:18:da:0b:53:59:2b: 1e:61:d2:8f:8e:ae:98:41:2a:b6:6c:e9:a7:be:24:b0:dc:ac: 61:1e:7a:1e:43:2b:60:85:ca:5c:3d:b6:3b:fc:18:9c:37:98: 37:95:b6:7c:fb:f9:71:af:cf:a5:8e:5b:e3:0b:bf:7c:4d:7c: 8d:30:11:f7:b3:71:23:ee:03:01:50:2b:4c:b2:ad:b7:6e:ef: 41:a7:56:34:bf:5a:20:65:0d:83:80:8e:42:82:8e:44:fa:8a: f7:1f:e0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rUA+yy05DoHX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MmU3MjY1YjYtYmI0ZC00OWQzLTlhZmUtYTlhOGFjNGM0MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrwiZ7tOCsf+L9uAw8kA1fEbzVhB0T+PL0dP 1Qpn8tq3UlOE/tIkGsSlHqe1TMLG+Q78J0Sy7g6fNj0aojNzTVVn9tT8802yAkFk svC3s7TKwFzmbRyRRf6IR/HamtuGhrrCLBrI3l5M5wNbO1v3HEOjj7OylBlBVNnB 83bJbUPgvatknsMV79LI7dO9Be6o/awh1yYB9CW4uoHTUu/9/22/vZSoYDKoVuXN d7tU2RPdX3CyHN3AM6WDncIaM8kEWm7Ds7lGYuFPDh5aMv0wesRxcM8MPejykI9Q DHHbWxKbYE/4C844gGwr9eW4k2doqS8F7gE7SI0lrtmhKGNjwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOyND0L7+921N1chRQl/p2kEgdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDdlYWJmYjItNjdkNS0z YTUwLWJhMjEtZWQ3MzhkMzk5NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5GF18GKBBOOXbPhgbGp3GgOkI2alzDWpC2v9s8ccDmdswiLaxFbCrs ls4EwJClHs9LylE9/TOcM+tKlC6GxQpr9PjLlJKL+HRaJj3ArM4sSbIeYeBt2hTw yqHW2sQHQ7JuPJeH0Dz4BJ5LWTRntvXNzjnNn0xBFLo6oTusvahlvtAmltZR8uQ+ PvGQ2BTIXMU+peiner44919iNBjaC1NZKx5h0o+OrphBKrZs6ae+JLDcrGEeeh5D K2CFylw9tjv8GJw3mDeVtnz7+XGvz6WOW+MLv3xNfI0wEfezcSPuAwFQK0yyrbdu 70GnVjS/WiBlDYOAjkKCjkT6ivcf4MY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:33 2025 by rpki-client