$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa File: 36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa (raw, json) Hash identifier: tHMVA6L3R6MpqXYyqjeeqFuN3Kxsj9s2gdReetOuGwY= Subject key identifier: 4E:32:63:0C:05:0D:4B:32:04:3C:1C:67:44:03:1D:9F:58:9A:45:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC270837C909B040E824A3CE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 6167 IP address blocks: 97.132.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:83:7c:90:9b:04:0e:82:4a:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=6dfeaac8-20d8-4f79-bbd4-59b47a086b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:50:ed:51:6b:97:1b:16:12:1f:de:b4:1d: d8:4a:d9:47:70:a1:29:e4:41:24:79:d1:02:12:8d: 98:a3:7a:72:87:5d:2f:f0:8e:1c:3b:b9:43:43:e2: 08:ae:e3:41:2f:38:e8:50:d8:0e:59:9d:c3:45:4b: 46:0a:d2:57:02:77:72:8c:a7:72:bb:81:d0:4a:ab: 71:19:16:95:ad:aa:be:fb:f1:a6:5d:a1:44:fb:ba: 0a:b6:27:49:02:cd:d8:91:bf:b6:03:f0:29:28:c7: 13:16:96:12:98:d0:40:f2:50:3e:d1:81:41:b2:7e: 1f:7d:23:ba:e8:a9:f5:4d:60:37:4a:54:c4:4f:e0: 25:db:dc:72:f7:64:1c:68:a6:e0:c4:e7:14:32:15: b8:ba:5c:cb:2a:37:67:4b:e4:8f:e5:9b:c7:97:1c: 6d:3d:aa:73:44:ef:b4:1a:2e:a0:e1:2c:11:19:53: 59:47:7b:72:a0:74:9a:6e:34:20:81:14:7d:dc:62: ca:6c:31:7b:57:8d:1e:63:f7:3f:39:c0:cf:7f:51: 28:28:d1:9a:04:aa:a3:ab:61:51:24:2f:cc:f7:56: 9e:87:5c:7c:dc:ea:fe:f5:8e:96:93:4c:05:f7:d3: 30:35:d3:28:d5:b7:c0:e1:52:bc:73:4e:ac:19:1d: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:32:63:0C:05:0D:4B:32:04:3C:1C:67:44:03:1D:9F:58:9A:45:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.132.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:11:a5:4e:15:74:33:24:79:3c:45:30:40:da:eb:8c:a0:fc: b0:38:28:c1:a5:d2:6b:82:af:4e:e0:ff:32:db:80:9e:2a:96: 6f:94:40:83:ac:48:18:0e:24:c4:bc:d9:81:8a:35:53:b0:44: 7b:6b:9d:f6:70:c9:81:1b:a5:aa:9a:c8:cb:00:56:97:a4:d2: 33:91:48:9e:91:83:db:c8:6a:b9:de:79:03:6f:fc:c3:3c:e0: 73:1b:5b:e2:7e:72:24:c6:f1:11:36:8f:84:2d:9b:c8:8c:c3: 12:8d:81:05:c5:f2:8f:bf:6c:80:01:57:d4:97:0f:95:91:20: aa:28:45:2e:e8:4b:08:07:68:97:01:9d:67:3e:76:a3:5c:34: 5f:cb:e6:22:99:e0:c8:21:50:50:ae:3a:d7:0d:c2:1a:84:78: 78:25:68:84:f3:b2:dc:cc:18:7d:2a:45:72:03:90:ef:76:26: 13:72:53:e2:a8:08:35:28:32:83:f0:93:65:53:47:ee:55:e9: 16:80:d1:00:bf:d3:a1:e4:f4:1b:3a:85:f2:15:f3:85:01:4a: 77:d3:97:e9:46:e3:ac:35:0e:0c:02:8d:d4:9a:eb:3b:7b:69: fe:78:24:d4:6f:c0:c4:89:3f:aa:1a:a4:88:11:a9:30:5e:be: 45:58:41:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcIN8kJsEDoJKPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NmRmZWFhYzgtMjBkOC00Zjc5LWJiZDQtNTliNDdhMDg2YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixQ7VFrlxsWEh/etB3YStlHcKEp5EEkedEC Eo2Yo3pyh10v8I4cO7lDQ+IIruNBLzjoUNgOWZ3DRUtGCtJXAndyjKdyu4HQSqtx GRaVraq++/GmXaFE+7oKtidJAs3Ykb+2A/ApKMcTFpYSmNBA8lA+0YFBsn4ffSO6 6Kn1TWA3SlTET+Al29xy92QcaKbgxOcUMhW4ulzLKjdnS+SP5ZvHlxxtPapzRO+0 Gi6g4SwRGVNZR3tyoHSabjQggRR93GLKbDF7V40eY/c/OcDPf1EoKNGaBKqjq2FR JC/M91aeh1x83Or+9Y6Wk0wF99MwNdMo1bfA4VK8c06sGR2HVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4yYwwFDUsyBDwcZ0QDHZ9YmkXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzZlNjFlODktY2QyZS0z MDFmLThhYzMtYTFiY2MxYTgxYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMRpU4VdDMkeTxFMEDa64yg/LA4KMGl0muCr07g/zLbgJ4qlm+UQIOs SBgOJMS82YGKNVOwRHtrnfZwyYEbpaqayMsAVpek0jORSJ6Rg9vIarneeQNv/MM8 4HMbW+J+ciTG8RE2j4Qtm8iMwxKNgQXF8o+/bIABV9SXD5WRIKooRS7oSwgHaJcB nWc+dqNcNF/L5iKZ4MghUFCuOtcNwhqEeHglaITzstzMGH0qRXIDkO92JhNyU+Ko CDUoMoPwk2VTR+5V6RaA0QC/06Hk9Bs6hfIV84UBSnfTl+lG46w1DgwCjdSa6zt7 af54JNRvwMSJP6oapIgRqTBevkVYQZE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:27 2025 by rpki-client