$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa File: 97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa (raw, json) Hash identifier: kaGCnZjEtfj099xc8qSwOfqeLcdgPhbMkvnb3TBmCXg= Subject key identifier: C2:2E:02:E5:1B:40:65:D3:F9:A4:12:75:41:C0:22:F7:DC:7C:27:B2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6AEB2967A6F5C9D115980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.111.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:ae:b2:96:7a:6f:5c:9d:11:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=db9122fb-b698-40a3-bc02-2cc76e1f43cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:30:67:b1:f5:91:56:60:9e:28:ef:55:57: b6:68:d3:c9:f4:58:c1:dd:7d:26:67:2d:d1:00:38: bf:87:07:43:c2:2c:84:aa:35:9f:ca:45:ae:9e:58: d1:44:9d:f8:d2:a4:8e:ef:58:f9:4c:65:e3:ab:b6: f1:8f:3d:26:97:95:c3:ea:1b:c9:bf:ac:08:17:ca: 1e:c6:55:c3:91:d4:b5:10:5c:7d:e6:34:e6:89:f4: cc:64:62:2b:bb:7e:42:0c:b0:c0:12:08:54:a8:a3: 6b:55:ed:b6:a6:50:9b:5e:f7:ba:a5:49:b0:d4:dd: c4:d2:05:18:a4:b5:f9:7e:af:e1:17:9d:a1:2f:f8: 73:aa:38:65:26:99:f1:7b:2a:70:ba:e4:53:07:10: bc:5f:74:95:d3:dc:f8:6b:a1:b4:97:9d:db:dd:76: 8d:38:6e:f6:95:fe:21:95:84:b9:fd:8f:90:cb:31: 68:25:54:46:97:39:f1:99:74:35:c7:9b:55:08:b1: 1a:b8:76:ef:f6:29:c2:e9:11:1f:9b:ca:e4:7c:18: 03:ff:ce:e5:54:13:06:93:23:29:ba:56:29:e9:92: e8:33:87:d6:7e:e3:1a:a1:22:4c:6b:35:2c:e3:c5: 9c:c4:8f:ba:ae:62:0c:97:5c:cb:a9:28:82:1c:da: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2E:02:E5:1B:40:65:D3:F9:A4:12:75:41:C0:22:F7:DC:7C:27:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.111.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:33:cb:1a:c5:ea:4b:bd:26:65:b4:2c:c6:20:f6:58:3f:3e: 8e:76:d4:e9:8e:21:3e:55:96:4f:14:47:9c:0e:85:45:30:d5: 42:f3:ee:77:c1:9c:5f:0f:76:db:dc:f4:04:e6:c9:0a:59:be: 25:ee:b3:7d:36:eb:ce:32:86:0b:98:58:ef:93:2b:a6:49:93: 4c:41:d6:ec:b1:cf:35:ab:f8:82:d1:69:15:eb:2b:2a:61:7b: 8f:54:37:e9:d9:fb:67:f1:37:eb:02:a5:90:28:df:9e:57:33: c2:81:e4:11:1a:1d:65:c7:ab:8f:66:66:ac:5f:2f:1a:30:a0: 74:93:06:24:c9:4a:f8:69:aa:3d:c3:f9:63:6e:8c:66:88:69: 44:3e:ef:75:ab:af:48:34:5e:76:59:2a:05:3e:3c:e5:ba:0f: 80:c2:a0:fb:96:64:df:42:50:f5:3c:cc:73:a0:d5:0f:3d:92: 28:e3:96:aa:15:1c:16:46:70:fc:bb:44:0a:02:f2:94:e3:6d: de:f7:9b:12:5d:1a:8d:6a:dd:a5:bb:58:10:2e:42:20:5a:5e: fc:a4:05:80:c4:1f:6d:24:4c:ab:dc:b5:1e:31:95:74:60:da: fd:80:d1:bf:d9:da:12:c0:97:7b:20:75:e5:ec:37:e4:7e:8a: b0:1e:0c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5q6ylnpvXJ0RWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGI5MTIyZmItYjY5OC00MGEzLWJjMDItMmNjNzZlMWY0M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF4wZ7H1kVZgnijvVVe2aNPJ9FjB3X0mZy3R ADi/hwdDwiyEqjWfykWunljRRJ340qSO71j5TGXjq7bxjz0ml5XD6hvJv6wIF8oe xlXDkdS1EFx95jTmifTMZGIru35CDLDAEghUqKNrVe22plCbXve6pUmw1N3E0gUY pLX5fq/hF52hL/hzqjhlJpnxeypwuuRTBxC8X3SV09z4a6G0l53b3XaNOG72lf4h lYS5/Y+QyzFoJVRGlznxmXQ1x5tVCLEauHbv9inC6REfm8rkfBgD/87lVBMGkyMp ulYp6ZLoM4fWfuMaoSJMazUs48WcxI+6rmIMl1zLqSiCHNrcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIuAuUbQGXT+aQSdUHAIvfcfCeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTdjY2U1YjMtMDA2Ny0z N2M5LWJkNGEtMGFjODRlZDIyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASG+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEzyxrF6ku9JmW0LMYg9lg/Po521OmOIT5Vlk8UR5wOhUUw1ULz7nfB nF8Pdtvc9ATmyQpZviXus302684yhguYWO+TK6ZJk0xB1uyxzzWr+ILRaRXrKyph e49UN+nZ+2fxN+sCpZAo355XM8KB5BEaHWXHq49mZqxfLxowoHSTBiTJSvhpqj3D +WNujGaIaUQ+73Wrr0g0XnZZKgU+POW6D4DCoPuWZN9CUPU8zHOg1Q89kijjlqoV HBZGcPy7RAoC8pTjbd73mxJdGo1q3aW7WBAuQiBaXvykBYDEH20kTKvctR4xlXRg 2v2A0b/Z2hLAl3sgdeXsN+R+irAeDAo= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:51 2025 by rpki-client