$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa File: 15579d4a-f809-324a-a127-7f002dd6963c.roa (raw, json) Hash identifier: RAU0nqo4TmY2HH2DxbOZgep/GziTJ2sPHzanxnKsYIM= Subject key identifier: 68:8E:8D:BA:0F:E0:1B:B6:F8:77:23:3B:AF:1C:48:53:FD:55:3F:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3FFC8351D298F9AE9128 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:fc:83:51:d2:98:f9:ae:91:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=18e92efc-9300-4396-a625-38859e085fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:c8:2e:33:3d:0d:09:d4:4b:51:ac:42:28: 60:79:38:bd:c8:13:ac:32:61:c3:76:5e:6c:a2:35: ff:f7:93:96:23:de:62:e7:b8:cb:9d:12:0a:55:42: a3:95:d8:7e:df:b2:cc:22:ca:8e:04:79:54:8d:27: 0d:fe:59:3d:f6:9a:ad:83:22:d6:e8:73:9c:87:14: fd:ad:c3:58:20:26:f2:9d:ea:fc:96:2e:7d:87:a7: 0a:6e:b1:a3:1b:ce:fd:ab:eb:e1:29:64:18:ae:d1: 25:a2:fa:d9:e8:16:5e:bf:5b:62:04:24:a6:dc:89: 9b:c4:ac:47:71:c5:4b:7b:2d:dd:5d:1e:22:85:d2: 2f:46:86:91:5f:30:1d:e6:14:49:9e:85:7f:da:28: 89:5a:13:a3:a2:65:cb:7e:79:d1:75:74:60:c6:e7: d0:55:bf:67:4f:16:10:dc:94:26:8c:9f:f7:22:a7: 5f:08:f2:dc:d9:6e:82:4b:34:95:dd:ef:5f:54:c0: a6:8a:a0:a5:5f:dd:66:0c:16:3a:15:d9:ca:02:6f: 24:77:46:82:bc:8c:b4:f2:f8:e1:8f:de:79:a5:16: 2a:d4:3e:9e:16:60:41:e5:ed:b2:12:27:56:29:73: 95:e9:d2:36:6b:8c:05:70:0d:e1:93:46:ff:22:4e: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:8D:BA:0F:E0:1B:B6:F8:77:23:3B:AF:1C:48:53:FD:55:3F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:bb:ff:aa:39:f5:55:72:ef:cc:f2:91:da:f0:a9:3e:1f:6a: 40:b4:93:ba:81:c2:71:40:7c:9f:ec:08:32:22:09:e8:f7:eb: 4d:b3:51:45:53:31:f7:c5:df:11:8a:bd:cd:c2:a4:f2:57:b3: 86:d1:d3:9a:a0:0d:77:5d:60:93:3b:59:dd:64:23:84:ae:ed: 56:c9:22:1f:88:09:3b:e3:02:0b:8c:61:76:e5:a2:e7:03:04: cf:ca:ce:19:4d:40:05:85:62:a3:e6:70:4f:9e:4a:81:a6:27: 5d:a5:ce:3b:56:1d:01:10:c5:ec:64:5a:44:62:4a:e4:f1:49: b7:a5:06:42:70:43:56:62:ec:01:22:fc:05:51:56:94:e4:45: 6b:8f:f3:48:9f:6c:6a:c0:77:7b:20:e0:bb:f5:84:d5:28:dc: 92:30:65:cf:19:27:1e:e7:26:98:a2:6c:d4:11:05:cd:27:5f: 4a:59:00:6b:f2:8f:b0:c3:19:05:29:d5:0d:c5:18:7f:da:c1: 5e:91:d7:6a:fb:41:b9:a0:4f:a8:0a:c4:a0:fe:df:b9:19:55: 94:93:3d:09:b4:22:f7:53:c7:24:21:1e:55:39:3e:6d:00:be: 8b:04:93:1b:97:75:fc:4f:1b:3d:32:3b:7b:08:3b:ad:5d:04: 07:f3:07:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT/8g1HSmPmukSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MThlOTJlZmMtOTMwMC00Mzk2LWE2MjUtMzg4NTllMDg1ZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLDILjM9DQnUS1GsQihgeTi9yBOsMmHDdl5s ojX/95OWI95i57jLnRIKVUKjldh+37LMIsqOBHlUjScN/lk99pqtgyLW6HOchxT9 rcNYICbyner8li59h6cKbrGjG879q+vhKWQYrtElovrZ6BZev1tiBCSm3ImbxKxH ccVLey3dXR4ihdIvRoaRXzAd5hRJnoV/2iiJWhOjomXLfnnRdXRgxufQVb9nTxYQ 3JQmjJ/3IqdfCPLc2W6CSzSV3e9fVMCmiqClX91mDBY6FdnKAm8kd0aCvIy08vjh j955pRYq1D6eFmBB5e2yEidWKXOV6dI2a4wFcA3hk0b/Ik7gNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiOjboP4Bu2+HcjO68cSFP9VT+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTU1NzlkNGEtZjgwOS0z MjRhLWExMjctN2YwMDJkZDY5NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG67/6o59VVy78zykdrwqT4fakC0k7qBwnFAfJ/sCDIiCej3602zUUVT MffF3xGKvc3CpPJXs4bR05qgDXddYJM7Wd1kI4Su7VbJIh+ICTvjAguMYXbloucD BM/KzhlNQAWFYqPmcE+eSoGmJ12lzjtWHQEQxexkWkRiSuTxSbelBkJwQ1Zi7AEi /AVRVpTkRWuP80ifbGrAd3sg4Lv1hNUo3JIwZc8ZJx7nJpiibNQRBc0nX0pZAGvy j7DDGQUp1Q3FGH/awV6R12r7QbmgT6gKxKD+37kZVZSTPQm0IvdTxyQhHlU5Pm0A vosEkxuXdfxPGz0yO3sIO61dBAfzByU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:31 2025 by rpki-client