$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa File: 2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa (raw, json) Hash identifier: T6pa70MIupE/9GCHGn1TygJeiXZui2Ssu60vuFIVoxY= Subject key identifier: 31:94:DA:A9:0C:68:5F:D9:C3:06:F4:48:2C:DE:06:83:17:7C:E8:7A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3F4296AD270E86FDD800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:42:96:ad:27:0e:86:fd:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=3884e629-bb78-4814-8907-02363953069e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:77:44:f8:6b:75:03:6c:23:7b:83:ff:5f: d2:b4:76:fd:40:db:b5:8e:ad:c7:b9:6f:9d:e3:fe: c4:cb:51:3d:eb:f0:0b:98:c8:41:92:ec:bb:bb:67: 36:a8:1c:f6:cb:41:e4:22:f8:8f:0c:63:e7:a1:f6: f1:4e:53:b4:eb:d5:51:7f:06:6f:e1:34:81:74:70: 7f:86:29:c4:bb:b2:b9:4a:aa:31:34:34:4e:59:1b: 47:17:1a:d9:54:3d:bd:55:48:a5:34:c9:2a:75:c4: e3:b2:1b:d3:2c:7e:97:0f:7e:4c:d9:b6:62:83:9d: b9:7e:02:02:97:34:ac:03:08:71:f1:59:8e:0b:91: ab:08:03:94:bd:b2:64:ee:c4:5b:a0:75:3d:67:f4: 5b:c6:76:c6:69:55:5a:e9:2d:a5:27:8c:be:ef:ee: 86:67:b2:5a:ba:21:cb:3e:f6:1b:a6:8c:30:48:91: a2:c4:23:c7:7c:bf:91:91:36:63:0a:13:5a:c7:35: 77:13:41:aa:15:a1:ce:4a:86:c0:25:3b:cb:67:4e: de:0f:6c:da:f4:c1:63:50:3b:09:cb:b9:04:f6:9e: b6:9b:5c:92:7a:08:0e:4d:9d:99:ca:f2:a8:22:1d: 9d:01:fb:c5:cc:fa:e5:df:56:fc:db:e3:69:ec:6c: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:DA:A9:0C:68:5F:D9:C3:06:F4:48:2C:DE:06:83:17:7C:E8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7b:94:a6:5b:04:08:4a:98:0a:98:a6:2d:5a:86:6e:d6:69: 1a:1e:c8:a1:7a:17:76:5d:bf:c7:13:86:4a:57:e1:1a:72:3f: 92:92:e0:37:96:74:76:a3:11:1b:49:e5:2c:1c:2e:1a:8f:e5: bb:40:31:b9:f7:4f:82:fc:39:3e:7f:a6:6b:ee:4a:98:ad:88: 5d:d1:b6:aa:3d:32:cf:a5:d3:11:b0:26:86:e4:b7:14:db:a8: 31:14:2a:f3:2c:03:a6:0a:df:17:22:36:19:79:75:67:1d:45: d1:93:28:5a:cb:01:0e:2b:2c:96:a9:28:f3:86:44:44:6a:14: 96:42:4f:45:47:4f:a7:8a:24:f1:3e:26:b4:56:29:24:da:33: 74:20:76:8c:81:69:5c:b3:2c:07:65:c4:07:6b:75:cc:55:8c: 34:5d:8f:dc:d0:7f:51:6e:e5:ba:d0:ee:14:53:d5:9a:02:21: 5f:d9:f1:b5:9b:22:e6:8b:a0:b6:c2:3d:4c:a6:6d:85:65:e3: fe:04:28:37:90:c3:6c:c8:84:2c:d3:6f:47:5b:8c:58:20:55: bc:8b:18:06:93:1b:2a:2e:f5:f8:b8:12:74:24:b6:20:21:16: 71:6c:73:71:0b:49:78:68:5b:83:38:59:11:41:e7:9c:3f:65: 02:b7:6a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT9Clq0nDob92AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk Mzg4NGU2MjktYmI3OC00ODE0LTg5MDctMDIzNjM5NTMwNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ix3RPhrdQNsI3uD/1/StHb9QNu1jq3HuW+d 4/7Ey1E96/ALmMhBkuy7u2c2qBz2y0HkIviPDGPnofbxTlO069VRfwZv4TSBdHB/ hinEu7K5SqoxNDROWRtHFxrZVD29VUilNMkqdcTjshvTLH6XD35M2bZig525fgIC lzSsAwhx8VmOC5GrCAOUvbJk7sRboHU9Z/RbxnbGaVVa6S2lJ4y+7+6GZ7JauiHL PvYbpowwSJGixCPHfL+RkTZjChNaxzV3E0GqFaHOSobAJTvLZ07eD2za9MFjUDsJ y7kE9p62m1ySeggOTZ2ZyvKoIh2dAfvFzPrl31b82+Np7GygfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGU2qkMaF/Zwwb0SCzeBoMXfOh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmU3NTcwZTMtMWMxMi0z YzA0LWFiMmMtMWIzNWUyNTUwYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ7lKZbBAhKmAqYpi1ahm7WaRoeyKF6F3Zdv8cThkpX4RpyP5KS4DeW dHajERtJ5SwcLhqP5btAMbn3T4L8OT5/pmvuSpitiF3Rtqo9Ms+l0xGwJobktxTb qDEUKvMsA6YK3xciNhl5dWcdRdGTKFrLAQ4rLJapKPOGRERqFJZCT0VHT6eKJPE+ JrRWKSTaM3QgdoyBaVyzLAdlxAdrdcxVjDRdj9zQf1Fu5brQ7hRT1ZoCIV/Z8bWb IuaLoLbCPUymbYVl4/4EKDeQw2zIhCzTb0dbjFggVbyLGAaTGyou9fi4EnQktiAh FnFsc3ELSXhoW4M4WRFB55w/ZQK3aoQ= -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:07 2025 by rpki-client