$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa File: 15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa (raw, json) Hash identifier: zaCY5jnXIuzOOdl1sRx7v0An4gs1lgXqN/O8wv90YiA= Subject key identifier: 59:28:DD:CC:21:29:94:01:48:3F:72:5D:B1:9A:6C:B1:66:9E:B8:62 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D12F5E5C8327F69108CC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.104.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2f:5e:5c:83:27:f6:91:08:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=adf77ecd-096b-4898-b839-a0bea99e98f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2f:9d:68:61:d8:86:5d:bf:90:c0:22:ff:c9: e9:17:70:b4:f1:e8:ee:54:9b:57:76:6a:66:bd:92: 4d:7e:8b:ca:2a:f7:84:d1:4b:29:2e:56:a2:b8:5b: 36:17:07:1c:4a:ab:03:2c:d6:67:99:09:0b:94:95: bc:5f:52:94:6e:6e:cd:ea:3d:03:f2:9c:10:96:aa: 19:a2:db:cf:13:7a:96:d1:08:9d:7e:e7:47:e9:15: 45:c4:15:60:58:37:c0:b9:00:1f:fc:11:d1:9e:13: 8b:22:56:26:a4:76:3c:00:30:90:9d:d2:48:36:1a: 8f:28:83:64:15:bb:ad:d8:b4:36:de:39:c6:0f:31: 81:7f:69:c6:36:2d:f9:ad:76:7e:5f:63:5d:c7:7e: 34:9f:85:33:7e:17:18:a7:8f:1f:18:28:5a:9b:d1: bd:24:88:88:d9:56:90:9a:0f:1e:6d:27:d1:65:29: fb:ff:35:9a:63:c1:8b:e1:b9:b2:9a:f5:1f:5f:41: 83:58:08:7f:b8:d7:ee:08:ef:9e:a5:58:9c:5f:8f: 5f:2e:96:e1:50:20:b1:2c:08:44:d6:13:51:85:e5: 68:a0:98:81:2b:3a:f9:3e:68:a9:20:74:fe:1e:d7: 6b:18:f5:91:d9:37:12:2e:99:e0:b8:aa:ba:80:14: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:DD:CC:21:29:94:01:48:3F:72:5D:B1:9A:6C:B1:66:9E:B8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:72:67:20:27:50:96:37:65:76:ed:b3:32:96:a4:47:eb:75: 04:33:f8:a2:11:ef:5b:c2:cc:dd:c1:6c:4d:43:ff:dc:ec:1b: 9a:06:0f:50:30:16:d7:e1:dd:cc:24:e1:f2:92:83:d6:77:30: f8:ba:36:e6:a8:fa:5d:1b:c8:38:66:0a:65:d2:d2:17:ef:eb: 80:b9:f4:ec:44:3a:5e:85:4d:4a:56:66:af:97:bb:9c:a5:02: c7:69:87:d5:41:af:86:36:04:01:8a:0c:76:b2:ac:95:e9:75: da:c0:73:33:4e:91:d7:6e:a2:c7:4c:6b:04:5f:84:30:da:0d: e0:89:11:e1:01:55:50:70:2f:de:2e:b6:07:81:f0:ff:2a:31: 33:30:b4:6b:05:b6:f7:b4:33:49:cb:e5:b9:39:f3:6e:ef:3b: c2:c9:1a:99:ae:32:d5:ad:60:ff:7a:bd:e5:0f:97:4d:32:8d: a6:4e:6e:41:17:53:ea:15:bb:9f:89:54:e0:ed:e9:0e:6a:3d: 21:da:f6:e3:0f:86:e9:d8:e5:8d:0f:5e:3d:f2:eb:1c:04:24: 36:6a:e1:77:b9:f0:15:d4:3a:fb:bf:6d:2c:cf:b3:d4:3a:5d: d9:2a:5d:01:11:55:3a:34:a9:43:c0:3e:6b:7d:cd:52:e1:54: 69:ba:35:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S9eXIMn9pEIzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YWRmNzdlY2QtMDk2Yi00ODk4LWI4MzktYTBiZWE5OWU5OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+C+daGHYhl2/kMAi/8npF3C08ejuVJtXdmpm vZJNfovKKveE0UspLlaiuFs2FwccSqsDLNZnmQkLlJW8X1KUbm7N6j0D8pwQlqoZ otvPE3qW0QidfudH6RVFxBVgWDfAuQAf/BHRnhOLIlYmpHY8ADCQndJINhqPKINk Fbut2LQ23jnGDzGBf2nGNi35rXZ+X2Ndx340n4UzfhcYp48fGCham9G9JIiI2VaQ mg8ebSfRZSn7/zWaY8GL4bmymvUfX0GDWAh/uNfuCO+epVicX49fLpbhUCCxLAhE 1hNRheVooJiBKzr5PmipIHT+HtdrGPWR2TcSLpnguKq6gBRKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFko3cwhKZQBSD9yXbGabLFmnrhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTVjMmE0MzEtMGRhZi0z MWQ2LWFhZjMtZWI1NTJjNTRhNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEByZyAnUJY3ZXbtszKWpEfrdQQz+KIR71vCzN3BbE1D/9zsG5oGD1Aw Ftfh3cwk4fKSg9Z3MPi6Nuao+l0byDhmCmXS0hfv64C59OxEOl6FTUpWZq+Xu5yl Asdph9VBr4Y2BAGKDHayrJXpddrAczNOkdduosdMawRfhDDaDeCJEeEBVVBwL94u tgeB8P8qMTMwtGsFtve0M0nL5bk5827vO8LJGpmuMtWtYP96veUPl00yjaZObkEX U+oVu5+JVODt6Q5qPSHa9uMPhunY5Y0PXj3y6xwEJDZq4Xe58BXUOvu/bSzPs9Q6 XdkqXQERVTo0qUPAPmt9zVLhVGm6Nfs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:22:56 2025 by rpki-client