$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa File: aa02fca3-26d8-3669-8782-539da2332fb0.roa (raw, json) Hash identifier: VpePkvuxCgxuM8jMy4a9xNXxCDU1S4i0YuVlkd6UwDw= Subject key identifier: 0E:55:02:56:0E:BD:B9:18:4B:0D:CA:B9:75:48:83:80:F0:BA:FB:28 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6BF6375AEC1050F9B5F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.107.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:bf:63:75:ae:c1:05:0f:9b:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=6db07dab-fb4e-45b2-b26d-8acc06c4cddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:a4:d2:04:78:56:98:41:7c:ce:74:35:7c: 58:d6:1f:3f:2e:88:5d:74:02:63:e7:aa:86:c9:af: a7:3b:5c:67:29:d1:60:dc:0f:c2:f4:d3:ea:e9:96: 35:57:93:ff:19:f3:38:16:51:ac:73:ee:ea:05:68: 7e:e2:5b:c4:17:20:f2:b6:66:6f:ae:d2:86:29:3b: ea:9a:85:f3:aa:2c:00:2e:18:f5:cf:5b:4a:34:7d: e0:c3:f2:bb:31:fb:8f:85:1d:91:dc:8b:f8:b4:45: 27:ce:a5:dc:9a:1f:84:ad:6f:7a:36:20:de:ad:9b: 03:ad:bc:c7:a7:0e:5a:99:c1:7b:04:c8:13:e3:a9: 8d:33:9f:10:39:d8:90:ca:81:43:56:88:a4:b2:ad: ac:7d:a8:d5:e7:3f:bb:96:7c:5d:82:0c:b5:58:44: 15:b9:9a:9f:9e:9a:4e:40:89:d5:c4:f0:23:df:d9: d3:0d:13:c0:99:c1:d7:c5:2b:33:fa:b1:ba:3e:89: e3:17:f5:cf:1f:07:37:29:13:4a:3b:a0:75:81:06: 36:b9:34:5a:c1:e7:36:d8:62:be:06:c8:21:6d:d6: e3:48:92:91:5d:4e:90:29:94:ed:14:a0:b5:3c:23: bf:a4:f1:9e:18:fe:94:f8:07:ca:30:30:20:06:68: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:55:02:56:0E:BD:B9:18:4B:0D:CA:B9:75:48:83:80:F0:BA:FB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1a:3c:4d:5f:24:21:fd:a9:81:98:aa:fc:df:91:01:da:ca: 5a:41:4f:51:8b:93:a8:6e:7e:a5:53:4c:8d:0e:ac:1c:76:53: fa:39:a2:b7:34:67:1a:3e:89:58:57:b7:50:6e:d6:06:13:f0: 6f:16:71:f0:68:cc:c8:50:99:47:5a:5c:9f:9d:70:71:41:39: 67:a4:1c:96:1f:0e:2f:27:ff:6a:a3:12:3e:92:44:3a:5d:c9: 4c:16:b3:4d:fe:06:a0:82:2a:67:ef:9d:06:2f:36:fd:cb:04: 5f:17:d4:63:f7:3a:9b:72:3f:8a:be:7b:97:59:eb:2d:dc:e2: 74:4b:82:eb:57:e8:fa:28:57:db:9f:3c:a4:cf:fc:9c:80:bd: d2:da:c0:e5:ed:4f:70:ce:b2:e3:ef:3c:57:35:d6:fe:6b:28: 54:77:7c:e6:cb:a9:49:8f:48:93:4d:6b:c9:89:dc:2e:40:3d: 38:49:8f:0d:16:12:62:9e:23:7f:97:91:e0:d5:24:3e:29:2b: 86:50:42:fe:79:42:f3:3d:ed:62:cc:67:02:41:37:02:fa:02: 11:79:be:ca:c3:da:c6:83:7c:11:74:5f:c9:a8:7b:eb:70:69: 09:b6:5f:78:37:1e:d0:a4:b0:52:cb:c4:2e:a2:0e:f8:b9:ac: 0b:07:95:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5r9jda7BBQ+bXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NmRiMDdkYWItZmI0ZS00NWIyLWIyNmQtOGFjYzA2YzRjZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl86k0gR4VphBfM50NXxY1h8/LohddAJj56qG ya+nO1xnKdFg3A/C9NPq6ZY1V5P/GfM4FlGsc+7qBWh+4lvEFyDytmZvrtKGKTvq moXzqiwALhj1z1tKNH3gw/K7MfuPhR2R3Iv4tEUnzqXcmh+ErW96NiDerZsDrbzH pw5amcF7BMgT46mNM58QOdiQyoFDVoiksq2sfajV5z+7lnxdggy1WEQVuZqfnppO QInVxPAj39nTDRPAmcHXxSsz+rG6PonjF/XPHwc3KRNKO6B1gQY2uTRawec22GK+ BsghbdbjSJKRXU6QKZTtFKC1PCO/pPGeGP6U+AfKMDAgBmjH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5VAlYOvbkYSw3KuXVIg4DwuvsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWEwMmZjYTMtMjZkOC0z NjY5LTg3ODItNTM5ZGEyMzMyZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4aPE1fJCH9qYGYqvzfkQHaylpBT1GLk6hufqVTTI0OrBx2U/o5orc0 Zxo+iVhXt1Bu1gYT8G8WcfBozMhQmUdaXJ+dcHFBOWekHJYfDi8n/2qjEj6SRDpd yUwWs03+BqCCKmfvnQYvNv3LBF8X1GP3OptyP4q+e5dZ6y3c4nRLgutX6PooV9uf PKTP/JyAvdLawOXtT3DOsuPvPFc11v5rKFR3fObLqUmPSJNNa8mJ3C5APThJjw0W EmKeI3+XkeDVJD4pK4ZQQv55QvM97WLMZwJBNwL6AhF5vsrD2saDfBF0X8moe+tw aQm2X3g3HtCksFLLxC6iDvi5rAsHlY4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:30 2025 by rpki-client