$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c67ed835-80db-355d-96f5-4d8d1785a774.roa File: c67ed835-80db-355d-96f5-4d8d1785a774.roa (raw, json) Hash identifier: CykyyRBxw3jr5T1rfAZ+rM/GyVAHz7WEWCQ0CZozCl4= Subject key identifier: D7:65:F2:79:A6:0F:72:20:3B:1F:80:DC:66:6D:16:B3:65:7B:DE:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFEE6B08D7E375E5E7D430380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c67ed835-80db-355d-96f5-4d8d1785a774.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.97.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b0:8d:7e:37:5e:5e:7d:43:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=c090aad2-f786-45ba-969b-9e5e45f85122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:18:aa:e0:c1:76:56:b8:8e:2d:49:25:b0: c0:a4:6b:d8:e7:98:14:6c:fb:d5:13:cf:e0:77:05: ad:e8:06:b7:ab:90:d4:41:ad:22:11:11:cf:d5:d6: eb:46:fb:0e:49:1b:7f:15:b2:e0:83:05:38:86:14: f7:67:2a:f7:d0:c2:6c:95:ca:f5:fc:80:a4:25:50: 3c:8c:50:aa:ec:5e:a9:3f:c7:e3:84:a4:b7:24:03: 89:1e:57:30:15:d2:8d:ee:0e:70:76:62:7e:7b:87: 2b:84:4c:c8:fd:a8:5f:a0:67:e6:2c:6f:8f:56:44: 78:60:d8:32:09:f5:ae:47:58:bb:7b:26:0a:55:36: 47:a2:b7:74:e3:d7:bc:4c:4b:dc:d9:28:32:a7:b0: 54:36:34:e1:f5:78:fa:08:37:59:cc:f0:12:2c:93: f2:13:90:6a:b5:84:01:80:96:ab:26:ff:0b:dc:5e: b9:35:ac:52:5d:f0:45:c2:c7:db:ac:b1:7f:e1:16: 49:74:61:28:ba:93:7f:75:5a:f3:ef:e2:10:89:d6: 9d:a1:e5:0e:3d:27:ea:0b:24:18:0c:38:00:f5:d3: fb:d0:c2:0b:ce:7e:c9:75:3d:2f:81:99:09:63:69: cc:97:c2:68:6c:4e:60:13:58:5d:69:2a:14:7f:23: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:65:F2:79:A6:0F:72:20:3B:1F:80:DC:66:6D:16:B3:65:7B:DE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c67ed835-80db-355d-96f5-4d8d1785a774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:85:03:41:a9:40:1f:98:a0:ea:ba:8d:31:7e:5b:19:03:90: cf:09:b2:be:03:b6:c5:11:df:aa:21:d3:16:1f:a1:70:b8:29: fc:b9:61:57:4a:22:b6:1a:15:87:13:c1:15:14:89:16:7f:2f: 84:0f:81:fa:ee:47:16:31:22:27:7c:59:93:9c:82:d5:e8:e0: d2:f5:ac:85:c7:fc:fe:78:08:88:4f:cf:c3:d0:6a:b8:5c:78: bd:55:e9:5c:d8:03:54:3b:fb:b9:8e:38:bf:55:36:c4:b7:26: 23:84:80:32:f4:8e:99:82:bb:ab:75:b4:84:ba:91:7e:83:84: ef:06:07:af:e7:28:bb:ff:ea:8d:f5:27:24:e5:6f:4d:03:b1: 54:8a:be:9e:ed:2a:56:15:eb:61:e0:2b:6d:95:49:08:88:1e: 16:94:72:54:6a:84:83:9e:85:23:28:77:ef:3e:11:5a:26:d6: 94:c8:a8:14:90:27:2a:32:7d:7d:8b:28:47:d1:45:87:5c:87: 52:e2:40:e9:b7:c6:b8:b8:67:3b:52:59:35:69:49:61:5e:ae: c6:fe:92:30:7d:91:39:1d:bf:03:03:5b:b0:71:41:d6:24:81: b8:28:06:24:0d:7f:04:4e:21:1b:c8:b2:6d:9d:7d:aa:99:95: a9:2f:64:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rCNfjdeXn1DA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YzA5MGFhZDItZjc4Ni00NWJhLTk2OWItOWU1ZTQ1Zjg1MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHoYquDBdla4ji1JJbDApGvY55gUbPvVE8/g dwWt6Aa3q5DUQa0iERHP1dbrRvsOSRt/FbLggwU4hhT3Zyr30MJslcr1/ICkJVA8 jFCq7F6pP8fjhKS3JAOJHlcwFdKN7g5wdmJ+e4crhEzI/ahfoGfmLG+PVkR4YNgy CfWuR1i7eyYKVTZHord049e8TEvc2Sgyp7BUNjTh9Xj6CDdZzPASLJPyE5BqtYQB gJarJv8L3F65NaxSXfBFwsfbrLF/4RZJdGEoupN/dVrz7+IQidadoeUOPSfqCyQY DDgA9dP70MILzn7JdT0vgZkJY2nMl8JobE5gE1hdaSoUfyNVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdl8nmmD3IgOx+A3GZtFrNle96WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzY3ZWQ4MzUtODBkYi0z NTVkLTk2ZjUtNGQ4ZDE3ODVhNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSFA0GpQB+YoOq6jTF+WxkDkM8Jsr4DtsUR36oh0xYfoXC4Kfy5YVdK IrYaFYcTwRUUiRZ/L4QPgfruRxYxIid8WZOcgtXo4NL1rIXH/P54CIhPz8PQarhc eL1V6VzYA1Q7+7mOOL9VNsS3JiOEgDL0jpmCu6t1tIS6kX6DhO8GB6/nKLv/6o31 JyTlb00DsVSKvp7tKlYV62HgK22VSQiIHhaUclRqhIOehSMod+8+EVom1pTIqBSQ JyoyfX2LKEfRRYdch1LiQOm3xri4ZztSWTVpSWFersb+kjB9kTkdvwMDW7BxQdYk gbgoBiQNfwROIRvIsm2dfaqZlakvZIk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:46 2025 by rpki-client