$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa File: 101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa (raw, json) Hash identifier: JL9yVAd3pgL0NMki3gH2ovBLjjS7p8vWcSI3k5/M2MU= Subject key identifier: 1F:1D:60:B1:98:1C:09:F2:69:C5:AA:AF:02:98:A9:2F:FC:DB:8A:D6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F73CA0DC53D9EC6839B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 72.88.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f7:3c:a0:dc:53:d9:ec:68:39:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=bd1e8bef-3887-4795-ac9e-a0fc690de82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:48:bb:a5:ed:94:b9:60:9e:e4:dc:d1:fa: 9f:09:64:6c:5a:6b:c1:a2:28:3e:34:0b:e3:4f:16: 38:eb:4a:b0:d5:76:33:4c:4d:88:7f:0f:95:6e:2b: fd:ed:42:21:58:6e:17:33:8b:b1:02:f5:06:97:45: dc:42:75:23:5c:11:84:73:18:9a:f0:f9:7d:84:79: 3f:65:b3:70:ce:54:7f:ed:fe:87:b6:93:81:14:99: df:0f:d6:ed:a9:1b:0f:8e:0c:c4:8d:66:04:16:cb: 07:da:00:86:b2:59:50:03:48:0c:60:f5:09:9d:60: aa:9f:44:19:c0:6a:17:1e:bf:00:e8:40:79:43:f7: 07:b6:db:e3:36:ab:3c:0e:7e:5d:1c:66:9c:e6:b2: f8:73:55:4a:eb:00:ef:ea:54:5f:bc:03:b1:47:07: 48:02:da:22:39:c8:d3:5f:f0:e7:a5:79:29:4c:9f: 95:75:1b:dd:82:1d:6b:36:ab:f4:d3:cc:2d:fb:0f: d6:8b:92:ac:fe:06:fd:48:0d:26:b6:2f:f1:17:01: 56:54:e3:36:6f:2e:5c:99:68:70:bd:02:22:39:7e: 93:71:8a:96:d7:54:2a:49:b7:d8:62:a8:e7:59:22: 45:94:71:d9:0c:f9:7c:3c:84:8b:50:d3:cd:6a:2b: 23:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1D:60:B1:98:1C:09:F2:69:C5:AA:AF:02:98:A9:2F:FC:DB:8A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.88.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2f:e0:19:6a:93:c7:e4:23:8b:f5:a9:a4:e7:e1:91:c5:c1: ef:25:93:89:23:3a:02:2b:c4:bc:13:4a:6d:6f:8e:2a:d3:5f: 32:48:e8:94:85:ea:c7:7b:12:88:ed:95:9a:da:54:35:d2:16: 99:af:b7:0f:2c:83:3f:ce:9f:f2:8d:9a:7c:ed:d9:6a:93:20: bb:32:fa:fb:b9:85:b5:ab:96:f5:4e:b2:f0:0a:ab:f8:36:09: 0a:43:13:1a:c2:df:da:aa:e0:fd:38:86:2b:eb:36:17:61:b5: 41:c7:e0:aa:f2:10:d8:87:07:22:93:34:1b:1f:c3:47:de:8d: 52:31:41:1a:db:72:97:60:52:09:d3:5f:e3:4b:50:79:6d:93: 8a:c8:6e:5f:ae:45:db:65:23:3c:d0:04:e1:b6:dd:56:e5:57: 41:66:92:34:6c:c8:04:c8:11:9e:f8:8a:b1:5c:f6:2e:66:95: 2d:39:b3:c7:e6:6e:f8:d3:f7:41:92:b4:4c:dc:d6:f5:e6:1c: 68:b6:e9:a9:cb:d6:a5:d5:26:17:e5:a1:7f:49:0e:37:3e:fe: 3e:27:b7:b8:31:ec:08:b2:04:be:81:40:a2:70:da:07:56:38: d5:ef:32:34:0f:bc:c6:6b:aa:20:de:d6:5a:d2:58:22:cf:1d: 62:78:21:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPc8oNxT2exoObAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmQxZThiZWYtMzg4Ny00Nzk1LWFjOWUtYTBmYzY5MGRlODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mhIu6XtlLlgnuTc0fqfCWRsWmvBoig+NAvj TxY460qw1XYzTE2Ifw+Vbiv97UIhWG4XM4uxAvUGl0XcQnUjXBGEcxia8Pl9hHk/ ZbNwzlR/7f6HtpOBFJnfD9btqRsPjgzEjWYEFssH2gCGsllQA0gMYPUJnWCqn0QZ wGoXHr8A6EB5Q/cHttvjNqs8Dn5dHGac5rL4c1VK6wDv6lRfvAOxRwdIAtoiOcjT X/DnpXkpTJ+VdRvdgh1rNqv008wt+w/Wi5Ks/gb9SA0mti/xFwFWVOM2by5cmWhw vQIiOX6TcYqW11QqSbfYYqjnWSJFlHHZDPl8PISLUNPNaisjSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8dYLGYHAnyacWqrwKYqS/824rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTAxZjRhOGUtZTgzZC0z YWVmLWI4ZWEtZGY4MjNjODYyNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwv4Blqk8fkI4v1qaTn4ZHFwe8lk4kjOgIrxLwTSm1vjirTXzJI6JSF 6sd7EojtlZraVDXSFpmvtw8sgz/On/KNmnzt2WqTILsy+vu5hbWrlvVOsvAKq/g2 CQpDExrC39qq4P04hivrNhdhtUHH4KryENiHByKTNBsfw0fejVIxQRrbcpdgUgnT X+NLUHltk4rIbl+uRdtlIzzQBOG23VblV0FmkjRsyATIEZ74irFc9i5mlS05s8fm bvjT90GStEzc1vXmHGi26anL1qXVJhfloX9JDjc+/j4nt7gx7AiyBL6BQKJw2gdW ONXvMjQPvMZrqiDe1lrSWCLPHWJ4IZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:01 2025 by rpki-client