$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa File: 2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa (raw, json) Hash identifier: AfHgGHFn3mtUyE+8Fo5bvfCYM9694i2B2QZzwOrrgaA= Subject key identifier: 5F:50:D0:40:98:F0:B4:FC:DA:F1:D0:90:A6:04:C7:B4:3B:6A:59:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D401AE158E3B3DC32F600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.97.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:40:1a:e1:58:e3:b3:dc:32:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=001180eb-02e2-4735-9a11-dc72d7b57c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:47:7b:f1:08:64:13:d3:6c:ed:ac:a0:4e: f9:ce:b1:1b:e8:54:80:d0:31:53:83:84:36:1d:00: 73:a0:10:44:b3:0a:78:ca:44:7e:29:f0:fb:a1:48: 36:a7:b9:fd:da:4c:b6:80:c8:b0:80:88:9c:27:eb: 3c:99:a1:d7:f0:ac:70:50:78:9b:be:9c:ca:15:39: 51:c0:00:a5:c9:61:91:7d:cd:f8:22:0a:20:e6:68: 89:aa:06:14:67:f7:7e:f0:24:f9:07:47:d4:ab:5d: e7:73:51:e8:f9:3c:f0:2a:b5:1a:16:68:da:82:ff: 9f:14:68:86:e1:44:a4:6f:0b:d5:8a:86:ed:60:4c: b4:c6:5a:91:ae:a1:b4:72:fa:a9:7c:aa:a0:03:39: 39:d5:09:6c:28:00:6e:6a:7f:13:41:c8:ce:3e:a8: 95:14:3c:2b:cb:f5:aa:d2:c1:4b:7f:8f:1a:91:17: ef:22:46:80:54:dc:f8:d6:6c:7d:e6:e5:f0:7b:d7: c3:85:1a:ca:5b:c6:31:f8:50:dc:d7:d4:6f:e2:d6: 02:ff:d3:49:26:4b:e4:0a:83:45:85:39:7b:b3:2f: bb:59:30:d8:b1:5a:f7:b6:1e:cc:1c:10:1e:89:1c: 50:52:2c:6b:12:0f:df:04:0f:21:f8:e7:35:ac:f0: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:D0:40:98:F0:B4:FC:DA:F1:D0:90:A6:04:C7:B4:3B:6A:59:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7f:b7:65:ee:ba:1a:7f:c5:56:4c:fe:1d:30:9a:d1:5a:ac: 36:9e:91:ea:82:f3:a8:3d:4d:84:e8:b3:e6:c4:d6:75:4f:e5: 83:d6:e5:4e:0d:f9:27:60:44:54:5c:32:01:c7:50:1c:ce:63: 83:74:14:80:e9:9e:60:4e:e2:d5:07:3d:15:6d:68:6b:8e:2c: 18:ec:81:15:04:7f:56:9a:06:f1:f6:72:0d:55:8f:bb:13:7e: fa:1f:2e:f3:d9:db:6e:98:fc:6e:6b:4c:d1:97:44:f8:bc:a0: b6:1f:bf:01:f6:a0:3a:28:b7:9a:06:1b:83:d7:63:79:09:67: 45:56:5f:f4:0d:03:7d:ad:7a:0e:82:31:57:37:eb:e1:26:e3: 49:d2:13:d8:ff:9a:91:8c:56:49:ef:b2:ae:d3:45:24:b3:f3: 45:a3:3f:e1:72:b8:f6:7c:b8:7c:cc:20:02:0d:44:57:82:94: 7f:1a:de:b3:56:14:d7:51:c4:3c:46:2c:ca:56:2d:15:39:30: d5:ab:d4:de:6e:da:68:f7:8e:38:4d:39:81:c9:5d:3d:5c:be: f2:6c:a0:3e:a9:f2:f7:cf:b8:5a:09:e5:1e:10:50:a9:57:20: 4e:be:78:5b:a4:84:cf:dd:fc:1c:b5:30:33:c3:9a:c9:7e:58: 4d:64:89:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUAa4Vjjs9wy9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDAxMTgwZWItMDJlMi00NzM1LTlhMTEtZGM3MmQ3YjU3YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln9He/EIZBPTbO2soE75zrEb6FSA0DFTg4Q2 HQBzoBBEswp4ykR+KfD7oUg2p7n92ky2gMiwgIicJ+s8maHX8KxwUHibvpzKFTlR wAClyWGRfc34Igog5miJqgYUZ/d+8CT5B0fUq13nc1Ho+TzwKrUaFmjagv+fFGiG 4USkbwvViobtYEy0xlqRrqG0cvqpfKqgAzk51QlsKABuan8TQcjOPqiVFDwry/Wq 0sFLf48akRfvIkaAVNz41mx95uXwe9fDhRrKW8Yx+FDc19Rv4tYC/9NJJkvkCoNF hTl7sy+7WTDYsVr3th7MHBAeiRxQUixrEg/fBA8h+Oc1rPCogwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9Q0ECY8LT82vHQkKYEx7Q7alkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjE3OGZlNmItN2UxZS0z ZTUwLThhNGEtNzljMmU4ZDQ1ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh/t2Xuuhp/xVZM/h0wmtFarDaekeqC86g9TYTos+bE1nVP5YPW5U4N +SdgRFRcMgHHUBzOY4N0FIDpnmBO4tUHPRVtaGuOLBjsgRUEf1aaBvH2cg1Vj7sT fvofLvPZ226Y/G5rTNGXRPi8oLYfvwH2oDoot5oGG4PXY3kJZ0VWX/QNA32teg6C MVc36+Em40nSE9j/mpGMVknvsq7TRSSz80WjP+FyuPZ8uHzMIAINRFeClH8a3rNW FNdRxDxGLMpWLRU5MNWr1N5u2mj3jjhNOYHJXT1cvvJsoD6p8vfPuFoJ5R4QUKlX IE6+eFukhM/d/By1MDPDmsl+WE1kiQc= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:08 2025 by rpki-client