$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa File: b38fa417-68e2-35fd-be67-57faa973b58f.roa (raw, json) Hash identifier: Bvv+FI0IJvfNwT5xt6Xyz5o6f51nok5bnPx9UmB6dkc= Subject key identifier: E3:16:E6:30:0F:7A:97:97:DC:57:EC:1D:D9:83:76:11:35:89:C3:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B5FD9EED1465D70A4300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.111.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b5:fd:9e:ed:14:65:d7:0a:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=a1975f44-c29d-4d75-a795-c00bab3e540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:80:d1:d5:14:89:34:b1:bc:83:0e:8b:15: 3e:c5:f7:2a:92:0a:4a:9f:03:f4:90:dc:d9:6f:11: 29:43:5d:dc:69:59:88:dd:61:c9:80:3b:a9:53:59: 96:3b:20:9e:e2:9c:b5:2b:13:aa:ad:75:86:b8:95: e2:43:6f:fb:af:af:b6:b6:59:9a:c2:b2:f4:a7:0c: a6:b3:57:69:fb:f4:8f:7a:97:0f:ea:ad:cc:00:54: 70:d9:3e:58:06:fc:5a:c9:d5:1c:c5:20:da:29:d3: dc:10:04:fb:8b:90:0a:95:0c:81:fb:62:33:fa:bf: 39:cb:dd:25:01:72:43:c3:f0:2a:ee:88:78:13:7d: 60:4e:39:8d:16:68:c0:85:5a:41:f0:96:81:b0:53: 34:c2:04:55:16:b2:1e:6c:2d:83:1a:10:3c:55:9a: 99:d1:ba:87:4d:61:41:94:fd:47:10:f6:33:99:cf: c5:26:6f:1e:5a:4d:78:43:37:74:f4:cf:62:83:8e: 15:6e:58:c0:8b:6d:10:c7:94:88:21:ff:35:52:6e: ea:91:85:6f:c8:1e:98:95:9a:c3:fe:a7:23:17:98: 47:01:a8:01:9f:34:36:45:e4:65:70:50:d0:59:1f: 77:a1:e3:4e:28:9c:9f:e8:51:d5:9d:f5:20:8a:d8: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:16:E6:30:0F:7A:97:97:DC:57:EC:1D:D9:83:76:11:35:89:C3:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.111.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:32:0e:db:21:f8:1f:3d:9c:5f:c6:5b:dc:fb:d1:e3:2d:f3: b0:8b:02:0d:e9:90:be:2a:ba:be:55:09:de:7f:68:0e:dc:78: d3:3e:8c:64:3f:2c:9a:89:7d:05:84:50:6b:1c:c0:6a:38:34: 77:9a:0d:7d:df:4f:66:20:e0:a8:56:e3:15:09:2f:7d:fa:10: 9d:95:20:0b:75:8d:cc:ce:7a:4a:6d:68:e1:cc:80:8b:29:b2: 41:7f:4e:8e:7c:78:bd:c5:f9:9e:1a:27:19:fc:73:c4:f5:ea: 99:98:5f:b7:22:81:03:6f:74:57:42:00:0c:87:e9:eb:5a:6a: e2:ab:db:8e:93:76:8c:2a:6f:b1:18:86:60:c6:b1:20:f7:b3: e4:80:c2:80:a1:60:36:1e:7d:9e:8c:df:42:d5:c5:f0:ea:b1: fc:25:48:c5:8c:70:fe:45:5e:f0:92:0b:11:c7:f4:eb:4c:f9: 35:50:b1:37:c6:a4:21:26:bb:f3:b5:98:5a:74:7b:3b:ff:d1: bd:1e:ba:a9:aa:56:eb:29:3e:ae:89:26:37:1a:ed:8d:bf:41: 41:cc:81:c6:7b:5d:22:a0:b0:f3:37:89:e3:b5:40:fe:04:5a: 4b:f7:c1:4c:64:0c:aa:22:29:79:01:54:8e:d7:4b:68:e3:ce: 14:29:33:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rX9nu0UZdcKQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YTE5NzVmNDQtYzI5ZC00ZDc1LWE3OTUtYzAwYmFiM2U1NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFaA0dUUiTSxvIMOixU+xfcqkgpKnwP0kNzZ bxEpQ13caVmI3WHJgDupU1mWOyCe4py1KxOqrXWGuJXiQ2/7r6+2tlmawrL0pwym s1dp+/SPepcP6q3MAFRw2T5YBvxaydUcxSDaKdPcEAT7i5AKlQyB+2Iz+r85y90l AXJDw/Aq7oh4E31gTjmNFmjAhVpB8JaBsFM0wgRVFrIebC2DGhA8VZqZ0bqHTWFB lP1HEPYzmc/FJm8eWk14Qzd09M9ig44VbljAi20Qx5SIIf81Um7qkYVvyB6YlZrD /qcjF5hHAagBnzQ2ReRlcFDQWR93oeNOKJyf6FHVnfUgitjl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMW5jAPepeX3FfsHdmDdhE1icNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjM4ZmE0MTctNjhlMi0z NWZkLWJlNjctNTdmYWE5NzNiNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAyDtsh+B89nF/GW9z70eMt87CLAg3pkL4qur5VCd5/aA7ceNM+jGQ/ LJqJfQWEUGscwGo4NHeaDX3fT2Yg4KhW4xUJL336EJ2VIAt1jczOekptaOHMgIsp skF/To58eL3F+Z4aJxn8c8T16pmYX7cigQNvdFdCAAyH6etaauKr246Tdowqb7EY hmDGsSD3s+SAwoChYDYefZ6M30LVxfDqsfwlSMWMcP5FXvCSCxHH9OtM+TVQsTfG pCEmu/O1mFp0ezv/0b0euqmqVuspPq6JJjca7Y2/QUHMgcZ7XSKgsPM3ieO1QP4E Wkv3wUxkDKoiKXkBVI7XS2jjzhQpM+Y= -----END CERTIFICATE-----Generated at Sat Oct 11 00:12:31 2025 by rpki-client