$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9db63547-070b-3d95-9454-9a65e473a8fd.roa File: 9db63547-070b-3d95-9454-9a65e473a8fd.roa (raw, json) Hash identifier: pEBE6t2lNkt5RbyCMK4DX3Thry5CkrDhAeSjSBRCr5A= Subject key identifier: 75:A4:A7:C2:C2:1D:B8:1E:82:1C:61:81:B0:01:6C:27:44:41:93:55 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584B4A471935FB2BC8ED215A4570 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9db63547-070b-3d95-9454-9a65e473a8fd.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 7018 IP address blocks: 172.111.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:19:35:fb:2b:c8:ed:21:5a:45:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=4b5de99e-bc84-4d38-9d4f-17a4a48cbc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:fb:99:9b:01:23:5f:f4:64:f9:f3:48:ba: f3:79:d0:14:06:d6:f6:85:8c:08:61:d8:29:77:2c: 06:02:62:26:41:99:89:f8:de:b3:5e:94:e1:67:e6: 92:e6:49:9a:3c:fa:b8:b0:d2:bf:bf:e0:25:3d:fb: 34:8d:18:c8:ec:2c:07:2b:74:c9:49:41:bd:8e:44: 5c:c4:d2:7e:e3:d7:9a:cf:91:40:26:6e:97:25:71: 0a:64:e4:2f:a0:59:d5:51:4f:90:c3:48:60:a3:6f: 0d:64:59:67:71:40:a4:c8:e8:b4:b4:72:37:ad:70: a4:1e:32:68:d9:91:98:4a:ed:8b:02:ce:60:02:91: fd:14:0c:ec:01:40:bc:6f:2b:16:28:82:e4:b5:ef: de:d9:21:27:b6:6c:e8:76:4e:43:7d:85:a4:c4:30: 34:21:d0:ee:b1:50:4f:93:a3:a6:0d:f1:15:26:aa: ff:bd:13:85:d4:79:7f:33:da:ff:1e:7c:dd:e3:84: c8:9b:a7:74:88:32:48:3d:33:8b:53:9c:00:06:c1: 70:a4:e2:0d:67:d0:c5:7c:8e:80:ba:4a:ed:26:46: 8a:79:e2:2e:f9:82:fb:f6:88:2a:61:85:90:91:35: 8c:1b:14:f3:d7:f0:91:c3:bc:48:d7:6b:99:08:73: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A4:A7:C2:C2:1D:B8:1E:82:1C:61:81:B0:01:6C:27:44:41:93:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9db63547-070b-3d95-9454-9a65e473a8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:59:ae:90:89:21:8b:5e:a2:4b:14:b1:da:c4:67:4c:f5:75: 1e:42:14:bc:cc:8d:78:b9:03:0c:aa:a5:95:11:2f:5e:1c:bf: 96:24:35:69:98:75:6a:98:e4:84:c3:c4:80:ee:d2:49:39:73: 55:53:3c:aa:7a:7f:c6:54:90:43:f4:a7:89:ea:24:e8:c7:b5: 6d:a7:73:3c:ad:11:d6:e9:bd:e0:0b:b8:48:e4:5c:d8:0a:9a: 03:e9:64:d6:18:6e:2a:80:0f:ed:ae:e0:53:15:69:ab:ea:96: ec:3d:5c:5c:f6:3f:4f:c3:cc:3a:17:c2:cb:d6:af:d3:5e:8d: 4f:49:f6:01:d8:64:f3:fc:ec:d6:4b:1a:8b:74:30:fc:8c:cb: 27:0a:69:f7:18:67:5e:2b:1a:62:fe:07:29:4f:23:bd:e2:ae: 01:7d:d0:30:f6:51:cf:d8:56:bc:3b:58:6b:bf:5a:c7:88:c8: 63:77:3c:c4:c4:d2:1a:73:5f:01:5e:7f:64:83:61:19:82:a1: a1:56:f7:f0:33:d4:ce:2f:d0:69:0a:eb:11:0a:21:4d:c1:3f: e1:ad:27:0e:22:a4:45:5a:ba:b4:3a:1f:8a:11:1a:3c:80:4b: 37:4a:32:b1:44:35:14:3f:a4:b5:9a:3e:78:22:54:28:21:f0: 33:18:eb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxk1+yvI7SFaRXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NGI1ZGU5OWUtYmM4NC00ZDM4LTlkNGYtMTdhNGE0OGNiYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWX7mZsBI1/0ZPnzSLrzedAUBtb2hYwIYdgp dywGAmImQZmJ+N6zXpThZ+aS5kmaPPq4sNK/v+AlPfs0jRjI7CwHK3TJSUG9jkRc xNJ+49eaz5FAJm6XJXEKZOQvoFnVUU+Qw0hgo28NZFlncUCkyOi0tHI3rXCkHjJo 2ZGYSu2LAs5gApH9FAzsAUC8bysWKILkte/e2SEntmzodk5DfYWkxDA0IdDusVBP k6OmDfEVJqr/vROF1Hl/M9r/Hnzd44TIm6d0iDJIPTOLU5wABsFwpOINZ9DFfI6A ukrtJkaKeeIu+YL79ogqYYWQkTWMGxTz1/CRw7xI12uZCHNp7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWkp8LCHbgeghxhgbABbCdEQZNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvOWRiNjM1NDctMDcwYi0z ZDk1LTk0NTQtOWE2NWU0NzNhOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxZrpCJIYteoksUsdrEZ0z1dR5CFLzMjXi5AwyqpZURL14cv5YkNWmY dWqY5ITDxIDu0kk5c1VTPKp6f8ZUkEP0p4nqJOjHtW2nczytEdbpveALuEjkXNgK mgPpZNYYbiqAD+2u4FMVaavqluw9XFz2P0/DzDoXwsvWr9NejU9J9gHYZPP87NZL Got0MPyMyycKafcYZ14rGmL+BylPI73irgF90DD2Uc/YVrw7WGu/WseIyGN3PMTE 0hpzXwFef2SDYRmCoaFW9/Az1M4v0GkK6xEKIU3BP+GtJw4ipEVaurQ6H4oRGjyA SzdKMrFENRQ/pLWaPngiVCgh8DMY67Q= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:41 2025 by rpki-client