$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa File: 35060332-7e9f-3cbe-964f-8702fe08db28.roa (raw, json) Hash identifier: CF/70POx3ZbVD6OTBKKVtL1xr+SEtQ9G0mPF/JouWbM= Subject key identifier: 3C:70:5C:BC:CC:82:44:98:82:69:9C:6A:C0:85:33:2E:CF:6C:68:7B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B513F203EECCD0DFCD40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.108.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b5:13:f2:03:ee:cc:d0:df:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=1bc64fe1-309e-4a28-9ea0-1b1354efc007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:7c:69:1a:49:c1:7b:f9:0d:6f:20:cc:6a: 5f:ed:b2:86:1d:ce:c5:f7:b6:d0:95:27:97:74:c4: 8d:f2:05:3b:4e:f3:e3:df:6c:85:3e:24:92:be:d9: be:a4:b1:df:db:10:29:b6:5e:dc:60:06:24:81:ed: 14:dd:2c:25:9f:9f:76:b2:a0:dd:04:5e:d6:9b:f8: 9d:eb:0f:b6:06:dd:35:9b:89:ac:55:13:78:69:d4: cf:38:0e:dc:da:d0:0c:8b:26:a5:42:fc:37:2a:47: 9f:fe:69:a1:b2:49:27:a3:71:4f:09:a6:80:9a:f0: 46:ba:64:51:d8:3d:38:c7:f7:aa:8c:46:71:cd:5d: 55:a7:4c:3a:0d:5b:04:97:79:48:2a:f2:62:13:ea: 1c:87:4d:75:26:ce:c0:79:39:92:48:73:7c:32:9b: 1a:e2:4c:8e:c4:09:b0:6a:69:a0:d9:3d:d8:1b:e0: ae:1b:19:2b:06:0f:d8:92:18:c1:17:95:9c:1d:0b: f2:e3:c8:2f:61:76:b4:c0:4b:43:64:d3:af:9b:05: a0:18:a5:3f:6b:1e:bb:2a:81:91:ad:22:60:8a:69: 6f:6a:ba:9c:8a:4c:e5:23:aa:8e:51:84:9d:c6:b9: dd:11:79:f5:50:a1:9f:d2:5d:0c:e0:bc:d3:26:ad: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:70:5C:BC:CC:82:44:98:82:69:9C:6A:C0:85:33:2E:CF:6C:68:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:50:70:34:a7:a1:5f:c8:6a:44:d9:0b:8c:92:7f:4f:b7:47: 76:f4:0e:12:e2:e1:b7:ad:d9:b7:50:a3:d9:bc:68:c0:07:ad: 92:a3:d8:44:04:55:aa:54:4a:15:49:85:1e:85:1c:72:a5:be: 9c:bb:bc:b3:d4:0c:da:27:2d:e5:ff:89:66:82:62:b3:4a:d9: ad:b1:ba:3b:5b:be:39:49:b8:11:bd:bb:5d:df:de:1a:61:c2: 2a:5a:54:38:1e:a3:2c:2d:bc:3e:ca:39:07:53:39:ee:ad:35: 3f:14:cb:48:43:6a:18:53:4f:b6:bc:a4:1b:bb:13:7e:9f:7a: d3:d6:c3:18:91:e2:6b:27:c9:e0:98:73:a3:d3:ae:72:85:f0: 57:1c:f2:eb:93:a1:26:ff:74:4c:84:0d:c7:78:ef:be:ba:b5: 6d:63:08:45:a1:88:70:28:4c:b6:1b:47:6a:33:ba:65:04:95: f1:78:12:e5:58:ba:68:3c:b9:91:97:b9:6b:dd:57:0a:a5:e9: 77:ef:01:a4:ff:6b:e0:3c:a1:f9:41:62:f9:e6:28:c5:b8:4e: ae:9a:b1:a8:09:75:14:61:a2:38:04:27:58:d8:db:88:c7:69: 07:d7:55:83:59:13:ba:49:3d:b2:1e:b6:77:05:2c:e0:ec:83: d9:d9:2c:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rUT8gPuzNDfzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MWJjNjRmZTEtMzA5ZS00YTI4LTllYTAtMWIxMzU0ZWZjMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn298aRpJwXv5DW8gzGpf7bKGHc7F97bQlSeX dMSN8gU7TvPj32yFPiSSvtm+pLHf2xAptl7cYAYkge0U3Swln592sqDdBF7Wm/id 6w+2Bt01m4msVRN4adTPOA7c2tAMiyalQvw3Kkef/mmhskkno3FPCaaAmvBGumRR 2D04x/eqjEZxzV1Vp0w6DVsEl3lIKvJiE+och011Js7AeTmSSHN8Mpsa4kyOxAmw ammg2T3YG+CuGxkrBg/YkhjBF5WcHQvy48gvYXa0wEtDZNOvmwWgGKU/ax67KoGR rSJgimlvarqcikzlI6qOUYSdxrndEXn1UKGf0l0M4LzTJq2GDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxwXLzMgkSYgmmcasCFMy7PbGh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzUwNjAzMzItN2U5Zi0z Y2JlLTk2NGYtODcwMmZlMDhkYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVQcDSnoV/IakTZC4ySf0+3R3b0DhLi4bet2bdQo9m8aMAHrZKj2EQE VapUShVJhR6FHHKlvpy7vLPUDNonLeX/iWaCYrNK2a2xujtbvjlJuBG9u13f3hph wipaVDgeoywtvD7KOQdTOe6tNT8Uy0hDahhTT7a8pBu7E36fetPWwxiR4msnyeCY c6PTrnKF8Fcc8uuToSb/dEyEDcd47766tW1jCEWhiHAoTLYbR2ozumUElfF4EuVY umg8uZGXuWvdVwql6XfvAaT/a+A8oflBYvnmKMW4Tq6asagJdRRhojgEJ1jY24jH aQfXVYNZE7pJPbIetncFLODsg9nZLAU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:10:59 2025 by rpki-client