$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa File: aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa (raw, json) Hash identifier: A7/VJUpfTq3YS29RX5A4fXGtNTBNPo8QxvsusN0rtJY= Subject key identifier: 21:23:93:2C:61:C1:A2:FE:E2:E6:17:D5:50:43:DF:E7:67:96:65:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B3FD5621BA24A003B600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.107.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b3:fd:56:21:ba:24:a0:03:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=2675a0a8-18e2-4cb8-a598-ec07ce4cf517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:a5:a9:24:fd:95:19:44:66:75:36:d0:fd: 8f:9a:38:11:bc:21:51:f2:ad:ec:58:7a:38:82:a6: 0b:41:e1:a8:ed:be:a5:29:c7:86:3f:b9:bc:fc:47: e7:06:07:d6:7d:5e:5b:2c:14:be:11:96:52:93:b2: 88:99:9c:bd:4f:17:b8:25:53:c7:fe:2e:38:93:6e: 50:54:0e:d1:34:c8:a6:b7:6e:ed:b1:e2:bc:ae:0e: 38:57:25:5e:e1:e8:e3:74:b1:b3:f1:87:8f:a0:c5: e0:a5:ce:6d:8d:a8:40:3f:f4:c8:23:e6:6d:60:a9: 99:39:e4:47:d2:92:91:6f:ea:2f:e6:d6:e8:d1:38: 6f:36:5a:2c:46:67:a2:c1:5e:73:f1:14:05:6c:54: 28:61:d3:59:e2:e6:93:50:83:8d:58:05:58:91:11: 62:f3:19:a9:15:85:2d:6b:73:cd:8c:2a:34:ac:25: 84:da:6f:7f:94:e5:6a:f9:21:c0:42:37:ab:95:be: 99:46:38:3f:d5:82:c4:8c:ad:8f:d9:9d:a6:87:1d: 31:15:d2:ee:b7:08:f2:c0:72:5e:dd:3e:07:07:ee: 65:ed:e0:12:b6:70:5c:05:b4:63:8e:03:8d:e4:cc: 7b:0d:79:be:e1:5a:d5:53:50:cc:eb:67:8b:52:74: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:93:2C:61:C1:A2:FE:E2:E6:17:D5:50:43:DF:E7:67:96:65:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ed:c2:fa:7d:f8:77:ef:65:22:56:bb:fc:d5:52:17:91:ca: 68:8b:9b:1e:f4:a8:b4:8a:17:a0:61:9d:97:cd:b3:82:5d:d1: c1:18:fa:e3:73:9c:5b:0c:df:13:c1:b6:07:ce:0c:e3:ff:ea: d4:a8:ff:56:d8:12:7b:59:55:f9:8f:d6:a4:88:3b:4a:cb:cf: 3e:a8:28:31:93:aa:35:8f:d2:bf:01:bc:8b:f1:4a:c2:a5:9c: a3:9e:cd:6c:29:60:0d:ab:27:cf:2c:fc:01:d6:f8:e5:97:b1: cd:89:5e:4f:ae:6b:89:0a:5f:d0:2b:c2:9d:b7:50:5d:43:f3: 4e:ba:e9:54:90:3f:8f:5f:ae:1b:70:43:3c:4f:16:2d:d2:ac: 1c:82:81:0d:3b:da:a9:26:ce:d6:68:02:fe:3c:43:93:92:7e: 71:ff:7b:66:4c:b1:98:9c:e5:5a:11:27:02:2e:2d:9a:e5:4a: 51:4e:1e:21:a0:e1:f2:c7:ed:7a:2a:d4:07:4a:19:52:a4:9e: f8:b6:e2:05:64:98:6f:c3:37:52:cc:1d:d2:3c:4b:15:72:04: 12:04:9e:f5:2c:a2:32:c1:5b:b7:a7:72:d1:9a:82:e2:f2:70: e6:9f:55:b2:21:13:3d:0b:10:94:1e:04:99:67:a1:9f:4f:9e: 3d:ed:18:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rP9ViG6JKADtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MjY3NWEwYTgtMThlMi00Y2I4LWE1OTgtZWMwN2NlNGNmNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37alqST9lRlEZnU20P2PmjgRvCFR8q3sWHo4 gqYLQeGo7b6lKceGP7m8/EfnBgfWfV5bLBS+EZZSk7KImZy9Txe4JVPH/i44k25Q VA7RNMimt27tseK8rg44VyVe4ejjdLGz8YePoMXgpc5tjahAP/TII+ZtYKmZOeRH 0pKRb+ov5tbo0ThvNlosRmeiwV5z8RQFbFQoYdNZ4uaTUIONWAVYkRFi8xmpFYUt a3PNjCo0rCWE2m9/lOVq+SHAQjerlb6ZRjg/1YLEjK2P2Z2mhx0xFdLutwjywHJe 3T4HB+5l7eAStnBcBbRjjgON5Mx7DXm+4VrVU1DM62eLUnQgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEjkyxhwaL+4uYX1VBD3+dnlmVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWEyYTM0MzUtMGYxYy0z YmMyLTljMDQtYmFiN2JkMjdlYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/twvp9+HfvZSJWu/zVUheRymiLmx70qLSKF6BhnZfNs4Jd0cEY+uNz nFsM3xPBtgfODOP/6tSo/1bYEntZVfmP1qSIO0rLzz6oKDGTqjWP0r8BvIvxSsKl nKOezWwpYA2rJ88s/AHW+OWXsc2JXk+ua4kKX9Arwp23UF1D80666VSQP49frhtw QzxPFi3SrByCgQ072qkmztZoAv48Q5OSfnH/e2ZMsZic5VoRJwIuLZrlSlFOHiGg 4fLH7Xoq1AdKGVKknvi24gVkmG/DN1LMHdI8SxVyBBIEnvUsojLBW7enctGaguLy cOafVbIhEz0LEJQeBJlnoZ9Pnj3tGF4= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:36 2025 by rpki-client