$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa File: 821b4c9f-d1f4-39de-bddb-539d083748cb.roa (raw, json) Hash identifier: 88wKTjKRPEHJiXoUrTqtBwG3CHxrDUjlYDfjMs17o88= Subject key identifier: BD:0F:C0:8B:46:CA:A2:79:99:C3:8F:81:01:77:C0:30:72:85:D6:23 Certificate issuer: /CN=084cdd3f-c178-4428-8992-9e1b2922de98 Certificate serial: 010D0C9F4328584B8BE21531118641D7A98C6F80 Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 72.1.32.0/21 maxlen: 21 72.1.40.0/22 maxlen: 22 72.1.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:15:31:11:86:41:d7:a9:8c:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=0b4521b2-18b3-4a75-b0b4-b0426155c235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:c3:54:48:85:89:53:c3:e9:f4:30:dd:7d: fd:d2:c6:5c:85:a6:e3:34:a8:fb:cc:8d:02:5a:3a: 72:5a:56:fc:67:65:b0:97:d2:e4:01:ed:8b:d9:98: 9d:c7:f7:74:b7:ce:45:09:ac:84:f0:79:b8:ce:24: a4:47:5b:6f:19:6f:3b:e5:3a:75:17:e1:ad:43:b6: f6:0a:b1:41:19:b2:83:ed:df:92:64:9d:63:9f:55: bc:98:73:29:61:18:a4:38:6e:f5:cf:79:b6:c5:5b: b5:3c:29:f0:d5:d5:59:a7:9a:f1:9e:cf:06:d2:09: 4c:4b:4d:de:53:fa:6a:7d:60:33:b1:26:46:16:48: c9:02:13:15:72:01:ef:f5:5c:e9:28:cd:95:42:51: 61:9c:7c:29:05:c6:a6:80:f8:a8:55:b5:2e:2c:96: ac:0a:cb:38:15:c0:bb:3d:b4:1f:86:30:dc:98:f2: c7:4b:2f:e8:01:a0:53:9d:f7:0e:fb:3b:7c:57:73: 7b:ee:9d:36:63:0c:a2:63:d8:35:2a:2f:79:da:76: 0b:52:26:3a:ad:ad:53:cf:77:8f:63:1f:dd:bf:1c: cd:29:4c:60:a8:c0:02:f3:75:71:e8:b0:c1:e5:8d: 76:bd:bf:70:43:e8:0d:23:c9:85:b3:7e:8b:8b:87: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0F:C0:8B:46:CA:A2:79:99:C3:8F:81:01:77:C0:30:72:85:D6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl X509v3 Authority Key Identifier: keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer sbgp-ipAddrBlock: critical IPv4: 72.1.32.0-72.1.45.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:98:42:a0:35:1c:da:87:84:26:0d:01:c7:27:20:d3:4d:d0: 5c:df:20:d9:da:eb:a7:e4:32:e4:c9:d7:05:ca:43:6b:92:4e: 3e:89:ee:8c:18:05:b6:7e:3c:bb:30:ed:5b:06:73:0b:af:a1: 23:8e:fe:31:3a:31:fd:d6:83:c4:2c:44:58:ce:ff:83:ea:c7: 70:87:61:14:11:2e:93:92:e6:f3:c1:53:3c:5f:f0:9c:73:d8: ce:77:cc:c9:91:a7:9f:7e:31:40:85:9e:62:f9:4b:1e:30:21: 9b:40:78:d6:ae:4d:ff:34:33:f9:47:c8:4e:93:a7:92:de:fa: b6:75:d9:54:54:3b:89:43:05:4e:b2:4e:62:c7:25:dd:99:c9: ce:f8:2f:f1:a5:58:ff:61:75:f8:0b:4d:f5:5b:91:ba:60:ce: d8:6f:e3:8e:ab:b2:cc:88:e6:64:09:c2:b7:a0:c1:09:53:b7: e3:71:81:8a:d0:38:11:fd:ca:f9:82:57:19:22:a2:c1:e1:b6: b4:ea:b2:a2:72:8a:8c:b6:30:7d:68:40:df:95:a2:1a:84:7b: f5:ec:de:13:74:7c:48:91:c4:3e:5c:d4:9d:a9:49:09:7a:6c: d1:43:63:45:a0:6c:c5:53:6e:d2:79:91:69:c5:60:9b:3d:75: c5:6d:95:35 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuL4hUxEYZB16mMb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJk ZTk4MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MGI0NTIxYjItMThiMy00YTc1LWIwYjQtYjA0MjYxNTVjMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0PDVEiFiVPD6fQw3X390sZchabjNKj7zI0C WjpyWlb8Z2Wwl9LkAe2L2Zidx/d0t85FCayE8Hm4ziSkR1tvGW875Tp1F+GtQ7b2 CrFBGbKD7d+SZJ1jn1W8mHMpYRikOG71z3m2xVu1PCnw1dVZp5rxns8G0glMS03e U/pqfWAzsSZGFkjJAhMVcgHv9VzpKM2VQlFhnHwpBcamgPioVbUuLJasCss4FcC7 PbQfhjDcmPLHSy/oAaBTnfcO+zt8V3N77p02YwyiY9g1Ki952nYLUiY6ra1Tz3eP Yx/dvxzNKUxgqMAC83Vx6LDB5Y12vb9wQ+gNI8mFs36Li4feywIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFL0PwItGyqJ5mcOPgQF3wDByhdYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wODRj ZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvODIxYjRjOWYtZDFmNC0z OWRlLWJkZGItNTM5ZDA4Mzc0OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDg0Y2RkM2YtYzE3OC00NDI4LTg5 OTItOWUxYjI5MjJkZTk4LzA4NGNkZDNmLWMxNzgtNDQyOC04OTkyLTllMWIyOTIy ZGU5OC5jcmwwHwYDVR0jBBgwFoAUa7qSaWoduYwL8eLYAcm3oYXsfmUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFi MjkyMmRlOTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVIASAD BAFIASwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGZhCoDUc2oeEJg0Bxycg003QXN8g2drrp+Qy5MnXBcpD a5JOPonujBgFtn48uzDtWwZzC6+hI47+MTox/daDxCxEWM7/g+rHcIdhFBEuk5Lm 88FTPF/wnHPYznfMyZGnn34xQIWeYvlLHjAhm0B41q5N/zQz+UfITpOnkt76tnXZ VFQ7iUMFTrJOYscl3ZnJzvgv8aVY/2F1+AtN9VuRumDO2G/jjquyzIjmZAnCt6DB CVO343GBitA4Ef3K+YJXGSKiweG2tOqyonKKjLYwfWhA35WiGoR79ezeE3R8SJHE PlzUnalJCXps0UNjRaBsxVNu0nmRacVgmz11xW2VNQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:31 2025 by rpki-client