$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa File: 4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa (raw, json) Hash identifier: 83LI/wYTBDQs40fSb0IIVpUXylfLNDo9y91dOnMMLzY= Subject key identifier: BA:4B:A4:C5:07:4C:3F:EA:25:BF:E7:6E:17:D7:FC:6A:35:55:79:03 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6BAA8F0C8B5568E418700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.111.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:ba:a8:f0:c8:b5:56:8e:41:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=ded9c324-f851-409c-838c-e0710f990dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:32:2b:40:a8:0d:9f:88:f4:d8:b0:59:b3: 69:9e:16:61:af:a1:cb:ef:6d:62:b8:55:b2:6b:9f: 79:86:a4:ba:98:ce:0e:35:5e:7c:23:09:0c:07:19: 8f:37:cc:ae:6e:f3:9e:cd:82:f1:b5:9d:15:a8:43: 3b:bb:fe:8d:86:17:c0:3d:ac:0a:99:d6:16:44:8e: e8:fc:af:27:3c:4b:19:de:85:1a:9c:09:dd:1a:7a: 3b:71:56:5d:62:73:06:d3:e2:64:8a:cd:76:49:cb: 42:1d:0d:05:dc:4b:e3:6a:e0:1b:09:c6:7b:51:d4: fe:49:79:53:35:f2:fa:c3:94:6f:52:a8:6b:87:80: e1:38:ba:bb:63:7d:5c:a9:ce:1e:07:f9:a4:a9:df: b5:f0:b9:07:b8:b0:fa:d9:d4:98:de:6b:24:71:32: dd:c9:36:b6:67:b1:c2:05:35:74:c1:15:52:67:dc: 68:62:bd:66:2f:78:66:90:e5:41:e2:fa:a6:f7:e5: d6:b9:14:7f:d7:79:50:b0:7c:9b:29:14:85:c5:03: 4d:fc:7c:73:86:be:d9:85:e3:a5:e0:6e:40:dc:52: cd:1d:b2:27:d3:47:8c:57:f8:10:85:b4:f7:2e:df: fd:40:21:d8:24:4b:5d:45:9a:da:1a:1c:5a:a5:cc: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4B:A4:C5:07:4C:3F:EA:25:BF:E7:6E:17:D7:FC:6A:35:55:79:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.111.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dd:75:a1:91:36:1e:39:20:31:10:f8:c0:26:09:67:55:e2: a1:1b:0c:b5:fc:42:91:eb:21:bf:5a:6e:fa:1b:b7:02:5e:11: b6:13:28:07:46:eb:45:7a:e7:ac:11:51:76:72:c2:4e:ca:a9: 17:a9:10:82:1d:4b:05:3f:de:bc:19:20:dc:b5:ad:a5:11:a0: 67:9b:7c:b1:6c:e9:97:93:78:42:2c:ec:4b:13:a2:ee:c9:d0: 64:ab:2d:d4:98:32:6b:20:71:8c:48:5d:65:94:5a:53:23:07: 1e:5c:7a:62:c3:66:4b:28:92:40:7e:3f:4b:58:99:b3:e6:67: 3c:6b:c8:a2:d8:00:0d:bf:8c:64:be:82:87:22:01:70:f7:38: 40:4d:3e:cc:d5:ce:6d:b5:bb:e1:78:04:ab:d0:e9:90:dd:b3: ca:fc:50:84:68:a2:d3:9e:63:22:50:f1:57:1f:09:0a:33:d1: d6:80:d7:fe:46:2e:f2:7c:c1:ab:e4:e2:ba:66:d7:b5:ad:f7: 5b:81:28:3f:fb:2b:03:39:a1:10:3d:73:6d:c0:e9:81:2f:31: 90:46:5e:f5:81:22:76:a4:cb:5a:70:64:5b:17:3a:07:22:89: 6b:e6:7b:e2:de:08:11:19:d7:4f:09:04:24:94:e8:fe:17:49: db:fd:8d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rqo8Mi1Vo5BhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGVkOWMzMjQtZjg1MS00MDljLTgzOGMtZTA3MTBmOTkwZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs8yK0CoDZ+I9NiwWbNpnhZhr6HL721iuFWy a595hqS6mM4ONV58IwkMBxmPN8yubvOezYLxtZ0VqEM7u/6NhhfAPawKmdYWRI7o /K8nPEsZ3oUanAndGno7cVZdYnMG0+Jkis12SctCHQ0F3EvjauAbCcZ7UdT+SXlT NfL6w5RvUqhrh4DhOLq7Y31cqc4eB/mkqd+18LkHuLD62dSY3mskcTLdyTa2Z7HC BTV0wRVSZ9xoYr1mL3hmkOVB4vqm9+XWuRR/13lQsHybKRSFxQNN/Hxzhr7ZheOl 4G5A3FLNHbIn00eMV/gQhbT3Lt/9QCHYJEtdRZraGhxapcwm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpLpMUHTD/qJb/nbhfX/Go1VXkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGJmYTZjYWMtMWNhYi0z ZmJmLTk3ZmItODY1YWMzOTE0ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvddaGRNh45IDEQ+MAmCWdV4qEbDLX8QpHrIb9abvobtwJeEbYTKAdG 60V656wRUXZywk7KqRepEIIdSwU/3rwZINy1raURoGebfLFs6ZeTeEIs7EsTou7J 0GSrLdSYMmsgcYxIXWWUWlMjBx5cemLDZksokkB+P0tYmbPmZzxryKLYAA2/jGS+ gociAXD3OEBNPszVzm21u+F4BKvQ6ZDds8r8UIRootOeYyJQ8VcfCQoz0daA1/5G LvJ8wavk4rpm17Wt91uBKD/7KwM5oRA9c23A6YEvMZBGXvWBInaky1pwZFsXOgci iWvme+LeCBEZ108JBCSU6P4XSdv9jWo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:46 2025 by rpki-client