$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa File: db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa (raw, json) Hash identifier: 9sSHsT295ShbwrMk1d5gzyDr9NT04mv0Lmw/UPoJtxQ= Subject key identifier: 67:F5:5C:B6:AC:B6:0F:B1:33:00:0F:2C:B0:36:AB:86:A9:98:0E:7B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD28C1710EACB67A6765A8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 72.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:28:c1:71:0e:ac:b6:7a:67:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=893daec2-d608-476d-aa8f-bf9e5d8e380c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:b4:04:5c:6a:77:be:6d:b4:b4:88:89:c7: 2b:65:de:28:4d:91:ca:05:fb:a9:60:86:4d:ef:51: ac:ad:54:0c:45:73:05:ae:4e:81:ea:16:3c:ec:1f: 03:47:77:08:aa:59:27:f8:61:dd:8f:47:8e:18:e7: 3c:05:4e:27:ab:b3:7c:31:b8:19:00:d1:91:19:fc: 83:e4:8c:56:84:eb:31:db:64:46:86:33:1d:21:61: 5f:35:ac:9e:54:ab:04:85:62:c7:84:32:bc:d5:8a: 60:b6:9f:f0:56:35:8c:75:c7:e7:e8:8a:32:21:fb: 80:d2:f5:81:c3:96:0e:3d:fe:a9:66:51:2e:59:e1: d1:a2:69:18:d6:05:6c:dc:51:da:ab:1b:5d:ca:fa: 51:f7:c0:32:7e:bd:f7:70:e5:f0:2f:cb:f8:26:e0: ab:0e:fb:ee:c2:e5:93:55:a7:af:4c:bd:0b:48:9c: 7d:e2:f7:a6:3d:c4:7b:dc:23:94:65:40:d5:47:07: af:dc:c8:97:e5:63:73:6e:bd:d3:53:de:80:b0:2b: 9a:99:45:cf:2d:b3:68:36:e6:54:d8:98:ab:d1:9b: 97:ab:05:c5:a7:0d:ba:5a:63:b2:d5:96:a1:c9:a5: 20:c1:49:b1:ba:c8:84:03:9b:16:25:0b:33:30:11: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:5C:B6:AC:B6:0F:B1:33:00:0F:2C:B0:36:AB:86:A9:98:0E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7a:66:00:fd:33:4c:98:d9:52:98:cd:50:8d:52:ac:72:1a: fd:f4:7b:ff:66:8d:a5:bb:d8:b7:96:26:5b:77:7f:9d:f6:b5: 9f:f3:7e:3b:27:e0:7e:e9:e2:36:0a:27:b4:7c:67:da:6c:b7: d2:43:d7:1d:19:a8:bf:4b:02:00:e8:28:4d:e7:b6:6d:fd:cd: 5e:51:f1:03:bf:f3:d1:0d:be:86:27:2f:d5:e8:49:7b:1d:bb: ce:e5:5e:25:31:27:cf:fd:d8:6f:f6:53:4a:b6:f4:b1:0f:ba: b4:6e:ef:bd:65:c3:97:7b:e1:97:bd:10:00:b1:9a:c0:04:d1: 7c:0a:e7:5d:4a:56:aa:1a:31:22:45:26:42:ea:67:19:3c:cd: 1e:6e:0f:c9:5c:15:9b:17:5b:fa:9e:a5:52:50:41:7a:4a:9d: 05:d2:62:73:56:76:15:b4:f1:cb:9b:f8:a1:1f:f9:88:1b:02: d9:17:88:23:c8:10:a0:bf:1d:10:85:94:25:99:a7:03:b4:d5: 87:db:03:09:35:41:02:d8:91:f7:e5:e3:f8:17:dd:99:5e:68: 7c:f5:fd:5e:1b:3c:59:0e:f5:2e:cc:61:28:23:d4:ee:bd:2b: f6:8d:c4:85:09:ac:50:bd:18:7e:ac:4d:b7:3c:1a:ec:7b:88: 9f:e1:bf:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SjBcQ6stnpnZagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ODkzZGFlYzItZDYwOC00NzZkLWFhOGYtYmY5ZTVkOGUzODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhu0BFxqd75ttLSIiccrZd4oTZHKBfupYIZN 71GsrVQMRXMFrk6B6hY87B8DR3cIqlkn+GHdj0eOGOc8BU4nq7N8MbgZANGRGfyD 5IxWhOsx22RGhjMdIWFfNayeVKsEhWLHhDK81Ypgtp/wVjWMdcfn6IoyIfuA0vWB w5YOPf6pZlEuWeHRomkY1gVs3FHaqxtdyvpR98Ayfr33cOXwL8v4JuCrDvvuwuWT VaevTL0LSJx94vemPcR73COUZUDVRwev3MiX5WNzbr3TU96AsCuamUXPLbNoNuZU 2Jir0ZuXqwXFpw26WmOy1ZahyaUgwUmxusiEA5sWJQszMBE9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf1XLastg+xMwAPLLA2q4apmA57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDQxMjgtZmEyNy0z YTE4LWJmYjItNjRjZjk2YzgzMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ6ZgD9M0yY2VKYzVCNUqxyGv30e/9mjaW72LeWJlt3f532tZ/zfjsn 4H7p4jYKJ7R8Z9pst9JD1x0ZqL9LAgDoKE3ntm39zV5R8QO/89ENvoYnL9XoSXsd u87lXiUxJ8/92G/2U0q29LEPurRu771lw5d74Ze9EACxmsAE0XwK511KVqoaMSJF JkLqZxk8zR5uD8lcFZsXW/qepVJQQXpKnQXSYnNWdhW08cub+KEf+YgbAtkXiCPI EKC/HRCFlCWZpwO01YfbAwk1QQLYkffl4/gX3ZleaHz1/V4bPFkO9S7MYSgj1O69 K/aNxIUJrFC9GH6sTbc8Gux7iJ/hv0I= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:00 2025 by rpki-client