$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91a5e28a-7e3f-3f5e-b7a8-0db6621f3a51.roa File: 91a5e28a-7e3f-3f5e-b7a8-0db6621f3a51.roa (raw, json) Hash identifier: iA9Ftlrz5CfLzy8R79+md40MYMkzN0A3jCxJFh1C9ks= Subject key identifier: A5:28:2A:59:1F:BE:B1:5A:99:D2:22:9A:8A:5B:4B:88:DF:F3:16:55 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B4C2152ADC6BEB735E40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91a5e28a-7e3f-3f5e-b7a8-0db6621f3a51.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.107.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b4:c2:15:2a:dc:6b:eb:73:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=8d3e4606-81cf-43bb-91b3-97b6d40953a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:16:18:41:50:92:b9:80:d9:90:4f:f0:b4: 64:e6:5b:f7:b6:78:d7:b9:fe:f6:59:a8:28:9d:09: a6:c0:1e:a7:b1:1b:cf:05:8d:d6:7d:2b:bc:22:14: 36:18:20:67:5f:36:be:4a:1b:86:f9:36:7a:97:eb: de:ab:68:ce:99:e5:29:54:c2:d2:69:6e:d2:4a:c7: 12:5f:52:e7:7f:52:c0:b3:90:a5:25:09:17:a1:ee: b5:8f:33:32:d4:12:21:9f:43:8d:d6:7a:32:96:68: 23:a8:64:69:c4:14:1e:da:45:ba:5c:4f:9a:60:4e: be:d9:c8:3e:af:9e:d3:97:48:38:69:1c:18:86:66: 5b:ee:c3:95:48:ea:da:68:58:0a:5c:41:1b:97:06: bd:4c:60:7e:71:54:ef:7d:5a:3f:71:d0:df:08:17: c8:ce:0d:96:e8:11:c5:ae:ec:56:b7:08:e8:fe:d6: 1a:96:96:d9:94:95:40:5e:52:72:4a:a7:e0:af:f3: 7c:91:fc:2c:49:4d:0d:39:65:5c:7f:7c:cb:88:b8: cd:a3:54:c0:77:30:5b:8a:76:9b:0b:a9:71:b2:6f: ed:27:93:34:47:ed:03:07:ef:03:08:37:aa:13:f0: 9c:df:64:c1:de:17:fa:5b:2e:18:1f:f6:6b:25:dd: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:28:2A:59:1F:BE:B1:5A:99:D2:22:9A:8A:5B:4B:88:DF:F3:16:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91a5e28a-7e3f-3f5e-b7a8-0db6621f3a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:57:77:f5:db:b2:e4:84:79:a2:c0:6d:d4:c0:05:62:4b:5b: 31:07:15:64:25:c4:13:10:6a:08:69:a9:be:d2:0f:df:e5:4a: ee:c0:44:fa:fa:73:38:44:f9:96:94:10:5e:1d:f2:0d:d1:7e: ab:2e:dd:9f:47:aa:06:7d:0f:5c:7b:1e:d8:9f:13:cb:19:8c: 0e:89:f0:a3:a6:88:43:94:b5:25:e0:82:22:ff:c7:f3:80:8c: f5:7b:2f:40:3f:06:96:02:a4:f4:ca:c8:01:be:15:54:03:5e: fd:db:be:42:6f:fc:de:67:9b:1c:11:23:73:18:8f:72:0f:21: 8b:a9:4b:7e:6b:04:f6:3d:70:7f:c9:d2:28:f2:fa:2f:4a:4a: 08:3d:32:5a:62:4f:80:77:79:b6:90:12:42:01:db:cf:f3:97: bf:bc:d8:54:83:37:a2:71:aa:3f:3b:03:5f:19:d7:a8:d2:83: 36:39:ab:40:3a:b4:38:96:dd:21:b7:f0:e0:55:1d:78:02:34: e4:15:f6:d2:b6:14:fb:51:9b:78:0c:14:f7:5f:6f:45:06:85: a0:93:f1:4f:6b:be:22:67:cb:9d:c2:af:b3:0b:d8:01:86:9f: 83:3b:aa:83:77:b9:d6:2d:bb:60:a2:52:9c:cf:0a:27:d1:4c: 37:8a:db:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rTCFSrca+tzXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OGQzZTQ2MDYtODFjZi00M2JiLTkxYjMtOTdiNmQ0MDk1M2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSkWGEFQkrmA2ZBP8LRk5lv3tnjXuf72Wago nQmmwB6nsRvPBY3WfSu8IhQ2GCBnXza+ShuG+TZ6l+veq2jOmeUpVMLSaW7SSscS X1Lnf1LAs5ClJQkXoe61jzMy1BIhn0ON1noylmgjqGRpxBQe2kW6XE+aYE6+2cg+ r57Tl0g4aRwYhmZb7sOVSOraaFgKXEEblwa9TGB+cVTvfVo/cdDfCBfIzg2W6BHF ruxWtwjo/tYalpbZlJVAXlJySqfgr/N8kfwsSU0NOWVcf3zLiLjNo1TAdzBbinab C6lxsm/tJ5M0R+0DB+8DCDeqE/Cc32TB3hf6Wy4YH/ZrJd1ZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUoKlkfvrFamdIimopbS4jf8xZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTFhNWUyOGEtN2UzZi0z ZjVlLWI3YTgtMGRiNjYyMWYzYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdXd/XbsuSEeaLAbdTABWJLWzEHFWQlxBMQaghpqb7SD9/lSu7ARPr6 czhE+ZaUEF4d8g3Rfqsu3Z9HqgZ9D1x7HtifE8sZjA6J8KOmiEOUtSXggiL/x/OA jPV7L0A/BpYCpPTKyAG+FVQDXv3bvkJv/N5nmxwRI3MYj3IPIYupS35rBPY9cH/J 0ijy+i9KSgg9MlpiT4B3ebaQEkIB28/zl7+82FSDN6Jxqj87A18Z16jSgzY5q0A6 tDiW3SG38OBVHXgCNOQV9tK2FPtRm3gMFPdfb0UGhaCT8U9rviJny53Cr7ML2AGG n4M7qoN3udYtu2CiUpzPCifRTDeK238= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:28 2025 by rpki-client