$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa File: 458603c9-3531-346e-9347-36a9d0e900eb.roa (raw, json) Hash identifier: nyv9CvEPuz0v5a2ZvULAPfWCCcDAOndJVnMCEtCT3KE= Subject key identifier: DD:20:0D:79:96:25:0A:23:21:9D:83:73:13:87:DE:D0:72:65:F6:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6BFD28DC1DA53ADBB9780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.107.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:bf:d2:8d:c1:da:53:ad:bb:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=d8d2112d-6365-409c-986f-565a2cb0c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:90:9b:40:12:12:40:bc:ff:d9:7c:99:9b: 1a:65:85:3b:bd:fa:9e:43:7a:a5:77:8d:7e:55:d5: 53:12:b8:1b:fc:2e:81:61:55:3a:3a:d4:63:55:25: ad:26:2f:f9:fe:fb:90:c3:6a:e4:59:5b:14:65:c0: a8:c1:e6:93:42:2f:01:99:fb:13:aa:a6:09:71:93: 61:8c:74:c4:37:e0:db:e3:f1:5e:c8:f5:f5:f1:ad: 8d:6a:cc:68:84:32:ba:0a:89:f3:bb:03:1c:12:4e: e6:ef:fc:d2:e4:82:41:6e:cb:72:16:d8:ec:ec:e0: 82:ea:49:73:8a:fd:bc:71:e3:d1:e6:59:a7:43:88: 2b:d5:47:b7:5b:68:84:6b:8c:a8:52:d0:b4:92:c9: 3f:2a:e1:63:89:61:f1:73:89:2b:f9:13:56:f9:c9: 08:95:4b:8a:02:2f:10:71:cd:35:a9:61:8f:c9:39: 19:f9:b2:3f:fa:a9:c2:a2:8f:42:62:80:4c:0c:60: 9a:5f:3e:fd:77:40:1c:f2:11:0e:d9:45:69:6f:a7: 3b:6d:e8:e0:16:94:ab:6a:3d:f2:02:cc:43:c6:12: 98:82:fd:80:45:69:b1:6c:89:61:97:73:05:e5:2f: d0:d2:64:12:1a:fa:8f:4f:05:39:d0:6b:9b:fc:41: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:20:0D:79:96:25:0A:23:21:9D:83:73:13:87:DE:D0:72:65:F6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:df:63:31:32:00:d6:1b:af:14:86:54:2a:0b:b7:db:df:dc: 17:c6:ee:60:af:56:31:c8:9e:33:f0:89:bb:f8:f4:44:8c:8e: a9:93:75:8c:69:c7:19:54:97:4e:97:12:01:be:2b:07:e6:70: 8e:9d:f6:51:fb:ee:f5:d9:52:f5:23:d4:b4:d4:bc:ac:f8:96: 50:1d:7a:71:27:2c:39:38:39:46:2d:20:a0:0c:cd:dd:08:cd: ba:e3:a2:af:38:8a:fd:55:05:17:04:dd:dc:91:9d:1c:33:6a: b2:af:03:df:fe:29:7d:a2:11:80:fb:26:d8:59:57:6d:2c:9a: 03:1c:6a:f6:5b:62:8e:69:3d:53:a3:3f:0b:8e:3a:4a:f6:be: eb:6f:a3:11:4e:62:42:f3:45:f2:5d:59:21:42:db:86:f6:6e: 28:a5:eb:39:9f:4d:28:de:08:e4:86:bb:17:fc:90:58:d7:18: 53:d3:0f:1d:45:35:b2:dc:ad:43:4e:cd:17:e3:cd:10:57:3f: 94:c2:18:1f:f6:bc:cd:f9:8a:58:fe:76:94:63:98:2d:c1:76: a4:72:79:6b:da:68:ec:ae:c7:90:fd:86:54:4e:a1:a0:ff:5f: 6e:42:ec:a4:5a:ac:98:39:a9:2c:44:c0:34:17:0e:c5:30:71: f0:d3:6d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5r/SjcHaU627l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDhkMjExMmQtNjM2NS00MDljLTk4NmYtNTY1YTJjYjBjM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxuQm0ASEkC8/9l8mZsaZYU7vfqeQ3qld41+ VdVTErgb/C6BYVU6OtRjVSWtJi/5/vuQw2rkWVsUZcCoweaTQi8BmfsTqqYJcZNh jHTEN+Db4/FeyPX18a2NasxohDK6ConzuwMcEk7m7/zS5IJBbstyFtjs7OCC6klz iv28cePR5lmnQ4gr1Ue3W2iEa4yoUtC0ksk/KuFjiWHxc4kr+RNW+ckIlUuKAi8Q cc01qWGPyTkZ+bI/+qnCoo9CYoBMDGCaXz79d0Ac8hEO2UVpb6c7bejgFpSraj3y AsxDxhKYgv2ARWmxbIlhl3MF5S/Q0mQSGvqPTwU50Gub/EFutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0gDXmWJQojIZ2DcxOH3tByZfYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDU4NjAzYzktMzUzMS0z NDZlLTkzNDctMzZhOWQwZTkwMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzfYzEyANYbrxSGVCoLt9vf3BfG7mCvVjHInjPwibv49ESMjqmTdYxp xxlUl06XEgG+KwfmcI6d9lH77vXZUvUj1LTUvKz4llAdenEnLDk4OUYtIKAMzd0I zbrjoq84iv1VBRcE3dyRnRwzarKvA9/+KX2iEYD7JthZV20smgMcavZbYo5pPVOj PwuOOkr2vutvoxFOYkLzRfJdWSFC24b2biil6zmfTSjeCOSGuxf8kFjXGFPTDx1F NbLcrUNOzRfjzRBXP5TCGB/2vM35ilj+dpRjmC3BdqRyeWvaaOyux5D9hlROoaD/ X25C7KRarJg5qSxEwDQXDsUwcfDTbaQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:35 2025 by rpki-client