$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa File: efbab09d-fb3d-3770-acbe-e66c34412d53.roa (raw, json) Hash identifier: Ct+4xdXC6lK44YHCvXsPOQXIVa2yVIcTJie9M1v9oDA= Subject key identifier: A6:D3:AE:BE:BF:11:AA:44:1B:2B:0A:61:AA:30:BD:B8:21:E0:2A:24 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6AF56E024016574C0B900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.108.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:af:56:e0:24:01:65:74:c0:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=c5a528a5-781b-4885-bce2-d0743b405421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:f2:1a:73:04:c0:b3:19:7c:33:6e:fc:a6: e1:a6:dc:97:1e:2c:b5:63:ca:29:80:db:b4:4f:58: bb:74:11:0e:e9:00:7c:35:7a:8a:1d:fd:cd:84:c8: 80:ae:dd:4d:36:8f:d1:cc:a0:f0:ad:ee:92:3f:51: ce:aa:56:8a:37:30:ae:94:b6:ec:db:9f:4d:c1:37: 88:f6:53:bd:c4:f9:83:79:53:d3:f4:db:96:7c:67: f8:63:a1:e2:ad:3a:d0:22:d0:fe:d0:12:da:c3:60: 09:08:95:d1:b3:ec:bc:3c:cd:19:b4:2d:30:4a:27: 13:a5:37:66:8a:44:91:0c:12:87:24:47:29:85:0a: 3b:8b:33:75:ac:1d:f2:dc:38:e7:8b:af:a8:c2:ec: c3:17:05:cd:a4:dd:84:ff:bc:31:c8:a6:b0:6f:d4: 98:d7:4c:a1:40:8e:c3:e4:e5:ed:7e:dc:31:dc:7f: 05:ae:c4:87:71:fe:ca:19:6e:17:27:bf:9a:8d:7b: df:2b:0f:b1:a8:4e:56:83:8e:ae:e9:e3:91:7d:71: d3:c8:de:d4:f0:b6:5e:5f:54:bf:1a:69:79:4f:ce: 51:57:06:dd:de:9f:6e:5c:f7:19:7f:e5:8d:35:8c: b1:98:90:e4:03:bd:78:86:ae:68:6a:bd:63:be:b1: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D3:AE:BE:BF:11:AA:44:1B:2B:0A:61:AA:30:BD:B8:21:E0:2A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:20:cd:2c:2e:e2:dd:45:23:a7:39:4d:4d:83:6d:c3:c9:80: 39:b6:69:93:15:69:79:03:38:60:ad:e5:5a:fa:d4:5a:fa:f0: 68:0b:49:59:73:bf:fd:19:29:88:46:5b:df:07:49:86:4f:16: 3c:74:ef:17:e5:c8:8f:ff:31:a8:ce:b5:de:0a:dc:76:67:12: 63:c8:17:8f:f8:9b:c6:87:30:c7:66:65:a2:3a:f3:44:ec:57: d4:23:d4:3b:95:d2:d2:07:4b:55:72:57:21:d5:74:c6:14:66: a7:34:6d:8c:ec:7c:57:12:0f:fe:b0:09:ef:32:31:68:1a:9b: b4:0e:b2:64:0e:b4:b7:50:c8:58:84:89:31:74:d5:9a:d2:7f: cb:77:2f:20:15:a5:30:90:8f:96:41:8e:13:97:67:9f:c3:d9: 1e:7c:a2:72:13:39:9e:af:39:97:f5:71:a4:77:1f:f8:95:ba: 6c:65:a4:91:8e:56:9c:d4:41:3d:85:b2:34:4d:20:fa:4b:41: f7:d2:a1:5b:13:b7:45:63:69:a6:9e:cb:98:71:ba:9d:5e:ae: 6e:4d:68:e7:53:12:d0:da:78:fe:80:5a:b0:36:b5:11:fa:5b: 56:ba:82:87:0c:fa:bc:44:d1:50:81:89:98:4f:40:09:ed:5b: 4b:c5:fb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5q9W4CQBZXTAuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YzVhNTI4YTUtNzgxYi00ODg1LWJjZTItZDA3NDNiNDA1NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW/yGnMEwLMZfDNu/KbhptyXHiy1Y8opgNu0 T1i7dBEO6QB8NXqKHf3NhMiArt1NNo/RzKDwre6SP1HOqlaKNzCulLbs259NwTeI 9lO9xPmDeVPT9NuWfGf4Y6HirTrQItD+0BLaw2AJCJXRs+y8PM0ZtC0wSicTpTdm ikSRDBKHJEcphQo7izN1rB3y3Djni6+owuzDFwXNpN2E/7wxyKawb9SY10yhQI7D 5OXtftwx3H8FrsSHcf7KGW4XJ7+ajXvfKw+xqE5Wg46u6eORfXHTyN7U8LZeX1S/ Gml5T85RVwbd3p9uXPcZf+WNNYyxmJDkA714hq5oar1jvrGFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbTrr6/EapEGysKYaowvbgh4CokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZiYWIwOWQtZmIzZC0z NzcwLWFjYmUtZTY2YzM0NDEyZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwgzSwu4t1FI6c5TU2DbcPJgDm2aZMVaXkDOGCt5Vr61Fr68GgLSVlz v/0ZKYhGW98HSYZPFjx07xflyI//MajOtd4K3HZnEmPIF4/4m8aHMMdmZaI680Ts V9Qj1DuV0tIHS1VyVyHVdMYUZqc0bYzsfFcSD/6wCe8yMWgam7QOsmQOtLdQyFiE iTF01ZrSf8t3LyAVpTCQj5ZBjhOXZ5/D2R58onITOZ6vOZf1caR3H/iVumxlpJGO VpzUQT2FsjRNIPpLQffSoVsTt0Vjaaaey5hxup1erm5NaOdTEtDaeP6AWrA2tRH6 W1a6gocM+rxE0VCBiZhPQAntW0vF+1M= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:20 2025 by rpki-client