$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/237f2fbb-50b2-3b89-9a48-d22a1106d08f.roa File: 237f2fbb-50b2-3b89-9a48-d22a1106d08f.roa (raw, json) Hash identifier: pH8qEu0Lc5jPYqGtk1FtqyQbw+A3/6uyA4sdr2pK6T0= Subject key identifier: E2:22:C5:0E:72:37:32:56:60:E1:AC:AF:C5:3A:57:1D:D0:F9:DA:18 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B53A6B7187B16E813480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/237f2fbb-50b2-3b89-9a48-d22a1106d08f.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.108.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b5:3a:6b:71:87:b1:6e:81:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=a3f862a7-253d-4677-8593-13dc778ae50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:8a:4d:80:10:3e:6f:18:8f:2f:7c:58:83: 86:10:cc:53:cc:10:69:5e:94:b8:6b:18:cf:7b:a7: c0:e5:fa:5b:32:95:eb:13:19:fe:cd:4f:a9:31:bb: 4e:10:05:91:0f:fb:d2:85:e1:87:20:d7:ad:ed:28: 06:df:f6:bf:da:73:84:5b:56:07:e0:25:df:7c:e0: 75:88:24:5b:45:8e:2c:0f:08:ae:fe:a3:fb:b9:0e: da:d2:1f:68:68:ef:18:76:8c:b1:38:a3:69:98:42: b8:df:f6:6c:fd:ac:4c:fe:fd:95:6c:02:a8:25:c0: 4f:5a:fb:35:e8:91:51:a2:ac:4d:63:02:fa:1e:45: d1:08:ac:37:ca:ef:be:ce:14:85:00:ce:72:eb:94: c0:29:9f:9a:89:00:81:13:91:56:e7:03:e7:09:33: 19:97:f0:fe:b7:a7:b1:8f:16:46:3c:4b:b8:8c:28: 2e:16:07:c9:78:15:e0:ba:32:e2:5f:a7:84:77:12: ff:5a:50:1c:5b:4b:88:51:db:50:89:ab:ac:53:1a: c0:1c:4d:d5:46:bf:00:c8:3a:e7:ed:23:58:1f:16: 75:a4:d9:d5:2d:fe:fe:5c:08:85:00:1c:82:3c:5c: f2:12:8b:58:19:79:a2:de:2d:09:9b:22:d2:b9:e8: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:22:C5:0E:72:37:32:56:60:E1:AC:AF:C5:3A:57:1D:D0:F9:DA:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/237f2fbb-50b2-3b89-9a48-d22a1106d08f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b5:9f:9f:eb:7f:f4:62:ab:0f:51:31:83:8c:d3:8b:27:1b: a1:7c:03:90:a9:5e:90:f5:1b:3e:84:f5:81:9e:18:78:14:c5: ff:8f:b8:cc:8a:5f:80:4d:4c:a1:bd:dd:c9:59:8f:a6:3b:2a: ec:65:e5:34:8f:0a:2d:0d:85:38:f0:e9:72:97:05:e2:83:3b: ac:1d:a4:d8:cf:00:9c:1c:f0:a6:14:c1:59:a3:b5:c2:77:95: 84:31:25:8e:06:ae:01:fa:f8:3e:fe:bf:c4:b2:ef:3c:99:82: bb:2e:23:5c:df:19:51:38:34:d0:f0:bf:d7:14:3e:00:bf:74: 8b:2e:29:e1:41:7f:86:b7:15:5e:73:83:99:ef:47:1b:d2:c6: 56:d2:5d:fd:c5:74:48:d6:d0:c4:5b:31:c1:0b:7c:a7:eb:b1: 24:27:e5:51:68:2f:07:91:b8:16:53:cb:6d:47:99:33:99:33: 43:17:7b:20:59:5b:bb:f3:14:88:ce:d5:75:5b:77:3f:5c:16: 6d:d0:44:be:33:b0:64:c7:93:0a:e5:2e:6e:03:b0:71:0e:57: 01:9c:ac:c0:e1:14:2e:63:ca:a5:88:ba:aa:70:f6:9c:2a:75: c5:78:52:a7:67:a9:6a:37:7e:9a:07:24:fd:43:03:c8:01:7c: 2a:6c:c6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rU6a3GHsW6BNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YTNmODYyYTctMjUzZC00Njc3LTg1OTMtMTNkYzc3OGFlNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueeKTYAQPm8Yjy98WIOGEMxTzBBpXpS4axjP e6fA5fpbMpXrExn+zU+pMbtOEAWRD/vSheGHINet7SgG3/a/2nOEW1YH4CXffOB1 iCRbRY4sDwiu/qP7uQ7a0h9oaO8YdoyxOKNpmEK43/Zs/axM/v2VbAKoJcBPWvs1 6JFRoqxNYwL6HkXRCKw3yu++zhSFAM5y65TAKZ+aiQCBE5FW5wPnCTMZl/D+t6ex jxZGPEu4jCguFgfJeBXgujLiX6eEdxL/WlAcW0uIUdtQiausUxrAHE3VRr8AyDrn 7SNYHxZ1pNnVLf7+XAiFAByCPFzyEotYGXmi3i0JmyLSueicEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIixQ5yNzJWYOGsr8U6Vx3Q+doYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjM3ZjJmYmItNTBiMi0z Yjg5LTlhNDgtZDIyYTExMDZkMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC1n5/rf/Riqw9RMYOM04snG6F8A5CpXpD1Gz6E9YGeGHgUxf+PuMyK X4BNTKG93clZj6Y7Kuxl5TSPCi0NhTjw6XKXBeKDO6wdpNjPAJwc8KYUwVmjtcJ3 lYQxJY4GrgH6+D7+v8Sy7zyZgrsuI1zfGVE4NNDwv9cUPgC/dIsuKeFBf4a3FV5z g5nvRxvSxlbSXf3FdEjW0MRbMcELfKfrsSQn5VFoLweRuBZTy21HmTOZM0MXeyBZ W7vzFIjO1XVbdz9cFm3QRL4zsGTHkwrlLm4DsHEOVwGcrMDhFC5jyqWIuqpw9pwq dcV4UqdnqWo3fpoHJP1DA8gBfCpsxkc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:41 2025 by rpki-client