$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa File: 3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa (raw, json) Hash identifier: Uw5DVo8FnBcTNYiOzXaEJIWjP+VqcmwBImXGsxWHj94= Subject key identifier: B9:6E:09:70:6C:15:AB:E6:2D:F4:DA:1E:7F:A1:2A:5B:72:C8:20:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B9F57ABE384AE5DA40A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.108.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b9:f5:7a:be:38:4a:e5:da:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=e37932d5-78c2-4b3f-9908-b327ee611efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:37:dc:64:a9:e4:db:52:f5:a4:d2:3d:a3: 36:c6:42:68:78:89:e5:97:d3:60:1a:74:c4:03:80: fd:f0:db:b3:d6:6e:a3:a1:76:f2:e6:3e:0c:48:3c: 86:79:21:0d:2a:a0:ae:1f:b0:ff:5a:cf:81:07:89: 18:22:7f:0f:34:66:10:ff:50:f4:12:c7:44:72:2a: dd:43:49:40:a5:a3:6a:7f:04:d4:91:07:e8:71:00: 66:39:fc:fc:38:36:1f:e2:a8:ea:c6:30:18:26:15: 2b:6f:a6:37:21:24:fc:4e:40:84:95:be:51:bb:23: 42:a4:c5:ad:f8:70:3e:c1:a4:eb:01:f9:19:7e:79: 89:c4:07:15:aa:2a:45:e1:ae:8d:c8:66:48:21:a6: f7:4d:9d:36:b3:b1:92:fa:a9:13:b3:8e:df:78:fb: fb:6e:5f:b6:1a:74:d5:90:f1:53:12:dc:e1:9c:ea: 61:0e:c9:86:f8:30:fb:1c:10:e1:13:62:43:87:ad: 96:ae:ef:8e:c2:db:54:59:c6:81:62:48:bc:14:b0: 06:72:cc:59:74:74:75:11:e2:66:4b:1a:76:49:4f: fa:fe:85:db:6e:c9:b1:59:da:d3:28:26:48:4b:97: a8:ed:d0:2d:31:ea:25:02:cf:ba:f5:95:6f:d8:2f: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6E:09:70:6C:15:AB:E6:2D:F4:DA:1E:7F:A1:2A:5B:72:C8:20:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e3:6d:28:fe:3f:56:d7:1f:10:92:8b:2b:0d:33:52:1d:92: 76:9f:7a:66:5f:52:ee:14:16:15:74:a4:4e:90:96:89:01:7a: 5d:05:2b:aa:43:36:9a:07:f1:28:83:ca:be:c4:92:f2:97:fa: da:27:92:4b:2e:7f:9a:1d:de:f9:de:10:a6:6c:fb:2a:20:76: d3:48:04:63:ee:f4:00:61:43:76:40:c2:39:74:20:33:5c:47: 6e:ba:b7:dd:de:ee:92:af:5e:5a:16:2c:c2:47:db:3e:0d:fb: 23:04:f5:e5:1d:3d:14:11:ab:73:d9:88:e7:59:13:75:5b:70: 55:86:ce:da:5c:5c:f4:4c:8e:24:1f:12:d5:54:80:c6:42:02: dd:1f:f9:5e:21:39:38:ad:2b:84:7a:3b:35:43:6b:77:9e:31: bd:7a:4d:f2:cb:8f:3a:d6:9d:27:2c:41:71:80:c1:d8:ef:d8: f0:8c:45:79:5e:97:1d:4b:d2:a1:b8:a0:37:93:b5:1b:60:88: 21:0b:0b:da:f5:fd:ea:fb:21:2f:fc:52:3d:0e:d5:72:57:8f: e5:f8:93:a3:f6:71:6f:28:33:51:48:d5:69:c3:3c:35:40:e8: 90:6d:b4:d8:70:30:89:4f:8c:2d:e6:37:6b:e6:43:fd:c4:00: f3:3f:ef:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rn1er44SuXaQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTM3OTMyZDUtNzhjMi00YjNmLTk5MDgtYjMyN2VlNjExZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqM33GSp5NtS9aTSPaM2xkJoeInll9NgGnTE A4D98Nuz1m6joXby5j4MSDyGeSENKqCuH7D/Ws+BB4kYIn8PNGYQ/1D0EsdEcird Q0lApaNqfwTUkQfocQBmOfz8ODYf4qjqxjAYJhUrb6Y3IST8TkCElb5RuyNCpMWt +HA+waTrAfkZfnmJxAcVqipF4a6NyGZIIab3TZ02s7GS+qkTs47fePv7bl+2GnTV kPFTEtzhnOphDsmG+DD7HBDhE2JDh62Wru+OwttUWcaBYki8FLAGcsxZdHR1EeJm Sxp2SU/6/oXbbsmxWdrTKCZIS5eo7dAtMeolAs+69ZVv2C9krwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLluCXBsFavmLfTaHn+hKltyyCBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VlMDY5NWYtODQ0OC0z NDYxLThjZWItNmMyOWI3NDQ4ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDjbSj+P1bXHxCSiysNM1IdknafemZfUu4UFhV0pE6QlokBel0FK6pD NpoH8SiDyr7EkvKX+tonkksuf5od3vneEKZs+yogdtNIBGPu9ABhQ3ZAwjl0IDNc R266t93e7pKvXloWLMJH2z4N+yME9eUdPRQRq3PZiOdZE3VbcFWGztpcXPRMjiQf EtVUgMZCAt0f+V4hOTitK4R6OzVDa3eeMb16TfLLjzrWnScsQXGAwdjv2PCMRXle lx1L0qG4oDeTtRtgiCELC9r1/er7IS/8Uj0O1XJXj+X4k6P2cW8oM1FI1WnDPDVA 6JBttNhwMIlPjC3mN2vmQ/3EAPM/760= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:24 2025 by rpki-client