$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/387deccd-ace7-30a5-8a82-dd3bf4bbcd5a.roa File: 387deccd-ace7-30a5-8a82-dd3bf4bbcd5a.roa (raw, json) Hash identifier: 18zUQoDBLcnOtCw13shoFNl56WP77FCNp0ml0Du2YrM= Subject key identifier: D1:C3:70:60:1E:C8:B8:96:23:06:A6:31:76:87:4F:5E:C0:A7:D4:D3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B7B220AC2E99EEA479BAF8960 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/387deccd-ace7-30a5-8a82-dd3bf4bbcd5a.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 67.92.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:0a:c2:e9:9e:ea:47:9b:af:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=2a88cf2f-2361-4dd7-8031-2e6157a1481a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:83:e6:1d:0c:b4:25:6c:c2:82:5f:59:96: 46:0e:02:90:f9:ab:5c:db:c3:28:2d:cb:95:8a:3e: 62:3d:5b:59:ce:18:e2:94:08:e1:f6:c2:d0:fa:96: 38:52:32:34:0b:ed:a1:7c:b9:dc:6b:18:a5:ad:8b: 5b:af:6d:86:99:53:7f:6e:7d:cf:7f:57:37:66:51: f2:c8:a5:88:7f:9a:0e:5e:43:12:9a:70:0d:ef:04: ad:d2:7b:1d:d2:02:30:5d:af:81:71:da:52:92:83: 01:a5:e8:22:14:8a:f7:f5:6e:a2:7b:95:b3:ac:4d: 3a:af:54:fe:e7:55:9f:66:36:fb:56:2a:44:f8:12: d7:81:7f:4a:1e:fd:b8:22:1a:79:97:04:e5:a5:73: 5e:fc:04:9c:27:63:c5:ca:8b:f1:ee:36:15:89:db: 99:15:f1:12:66:4b:d9:84:31:f5:40:2b:5f:e8:e0: 1e:5e:87:c2:86:2a:20:03:42:c5:f4:64:c2:e6:c1: c3:15:2a:2b:53:ff:1c:be:08:a6:df:f4:b3:28:7a: 99:29:03:1a:c7:b2:3e:66:a3:3e:7d:38:da:51:1b: 5b:9d:16:85:04:c6:07:fe:3d:b0:c9:67:bf:71:dd: 45:1c:24:21:02:d5:06:28:21:6e:33:8b:58:e9:35: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C3:70:60:1E:C8:B8:96:23:06:A6:31:76:87:4F:5E:C0:A7:D4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/387deccd-ace7-30a5-8a82-dd3bf4bbcd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 67.92.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5d:e5:17:f4:43:b4:89:de:d2:a3:2d:25:be:3d:42:40:b1: 1e:26:3a:e9:b2:db:a2:92:7a:61:05:72:2d:b8:b3:22:c0:a7: 60:5a:0d:13:92:fb:07:d6:6f:62:a5:89:b8:c9:52:29:41:8f: 3a:52:ed:4d:b2:ab:7f:fa:ee:1b:f6:94:f1:04:39:dc:cc:de: 82:c4:d6:9e:4b:00:99:b5:81:4b:82:4a:b5:51:2e:08:95:52: b9:8a:d7:09:17:69:1b:a1:2e:67:3d:ba:34:30:6e:0e:fd:78: 67:0d:8b:43:fd:f2:d2:a2:9d:58:1d:2b:41:bb:f9:77:fa:0c: f9:0a:2e:86:63:55:9f:be:21:f8:3d:54:4c:7b:59:39:af:ca: 02:da:ce:82:46:9d:03:c1:75:84:d2:55:f0:29:70:fb:95:be: c7:cc:6b:e7:0b:2f:ff:28:ea:5a:28:a6:d7:fa:e0:47:b1:3a: db:14:a5:22:c1:39:67:b1:7b:75:23:5f:b2:96:f1:cf:84:54: aa:65:92:71:78:7e:34:31:17:03:2e:be:e3:b4:5c:40:92:ce: d6:aa:46:bd:de:03:ec:7d:a2:87:11:22:01:0b:df:ba:f9:aa: 95:a0:d5:d8:e4:9c:8a:7a:1e:bb:de:bf:66:27:39:f6:56:a9: 8f:a4:fa:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgrC6Z7qR5uviWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk MmE4OGNmMmYtMjM2MS00ZGQ3LTgwMzEtMmU2MTU3YTE0ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqyD5h0MtCVswoJfWZZGDgKQ+atc28MoLcuV ij5iPVtZzhjilAjh9sLQ+pY4UjI0C+2hfLncaxilrYtbr22GmVN/bn3Pf1c3ZlHy yKWIf5oOXkMSmnAN7wSt0nsd0gIwXa+BcdpSkoMBpegiFIr39W6ie5WzrE06r1T+ 51WfZjb7VipE+BLXgX9KHv24Ihp5lwTlpXNe/AScJ2PFyovx7jYViduZFfESZkvZ hDH1QCtf6OAeXofChiogA0LF9GTC5sHDFSorU/8cvgim3/SzKHqZKQMax7I+ZqM+ fTjaURtbnRaFBMYH/j2wyWe/cd1FHCQhAtUGKCFuM4tY6TWYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHDcGAeyLiWIwamMXaHT17Ap9TTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg3ZGVjY2QtYWNlNy0z MGE1LThhODItZGQzYmY0YmJjZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ1wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZd5Rf0Q7SJ3tKjLSW+PUJAsR4mOumy26KSemEFci24syLAp2BaDROS +wfWb2KlibjJUilBjzpS7U2yq3/67hv2lPEEOdzM3oLE1p5LAJm1gUuCSrVRLgiV UrmK1wkXaRuhLmc9ujQwbg79eGcNi0P98tKinVgdK0G7+Xf6DPkKLoZjVZ++Ifg9 VEx7WTmvygLazoJGnQPBdYTSVfApcPuVvsfMa+cLL/8o6looptf64EexOtsUpSLB OWexe3UjX7KW8c+EVKplknF4fjQxFwMuvuO0XECSztaqRr3eA+x9oocRIgEL37r5 qpWg1djknIp6Hrvev2YnOfZWqY+k+rc= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:37 2025 by rpki-client