$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e8428da-4bb0-3004-a4f0-036494ab9343.roa File: 3e8428da-4bb0-3004-a4f0-036494ab9343.roa (raw, json) Hash identifier: aQx6GKNoIhr4a7ZJdFSGwxb/O+V2+ee3S8bJhNK3uTs= Subject key identifier: 57:B7:18:A9:8A:30:0E:96:A1:64:A5:3C:75:FC:F5:0B:84:FF:FD:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD29E48DF905CFF037D1E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e8428da-4bb0-3004-a4f0-036494ab9343.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 96.236.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:29:e4:8d:f9:05:cf:f0:37:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=2104e139-359a-4720-9544-1bfd172d33f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:a8:b9:da:07:2a:d5:c5:33:a6:ac:f0:79: fb:f5:75:73:76:5b:b4:76:75:2f:01:b5:16:43:f9: b8:c7:e1:54:90:9d:1d:09:ef:43:ac:ef:d5:da:c5: 42:ae:42:e6:41:c6:6e:df:5e:f9:f7:c7:cc:59:6a: d8:8a:32:b7:5f:2c:be:35:03:ae:1f:66:e3:ff:8b: e4:7f:ef:fe:1f:28:e4:94:b2:e7:87:25:62:1f:37: cf:49:32:e3:94:9d:2a:a1:8b:20:19:67:af:45:f0: 15:47:05:78:44:75:2d:fb:b3:4d:68:8b:70:a1:33: b5:2a:ab:a1:eb:7b:b9:f3:09:23:d3:31:33:22:31: 2c:31:16:f1:3b:c3:35:9c:08:7a:c0:64:81:35:9c: 9c:6d:3e:0b:cc:f7:51:f0:bb:77:27:10:82:29:61: aa:b3:65:6e:22:f8:0e:a8:dc:52:51:60:5d:3d:b6: 8b:58:4a:13:77:4f:cc:19:d5:4a:34:df:47:e9:51: 7a:b1:a1:40:df:f5:6d:fc:da:a1:39:41:af:2f:17: 5d:c2:64:f9:3a:a5:b2:ca:3f:9f:26:45:b3:25:5a: fc:1d:c3:73:44:00:0b:41:6b:8e:bf:cd:53:30:42: 12:36:91:a1:eb:05:db:48:9f:ed:2d:7b:56:b7:6a: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B7:18:A9:8A:30:0E:96:A1:64:A5:3C:75:FC:F5:0B:84:FF:FD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e8428da-4bb0-3004-a4f0-036494ab9343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.236.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f7:54:26:d1:00:b7:83:ec:e6:48:98:7e:b3:56:9f:84:50: 5e:58:25:35:77:a8:5b:2b:0e:fb:95:7d:9a:12:1d:87:d7:f1: ab:96:91:e9:99:c2:e5:aa:3f:10:eb:89:d2:ff:f4:49:0d:f8: b6:1c:e4:e1:64:e6:6e:bc:53:b5:f5:15:64:40:0e:f5:a0:bc: b4:b6:f0:31:3c:d1:cf:f6:59:01:72:98:df:20:1e:ca:75:b0: 84:f6:e1:d5:d8:6a:cc:96:51:c9:91:96:e0:52:72:04:55:20: 5e:d2:ba:e6:45:6c:e9:b5:4b:39:d2:87:8e:e6:fd:92:8a:5f: f7:d9:59:73:69:88:28:3a:ce:ff:9b:c7:4d:d8:28:fc:c1:c0: 93:66:d0:7e:04:40:7b:07:62:05:47:a3:6d:39:f6:ce:27:d2: d3:b6:2c:4d:8e:9e:b6:ad:9c:5c:25:c0:a8:9b:3b:a2:67:d1: 45:be:2e:15:65:49:75:46:2b:45:c4:79:75:5a:9f:5f:b9:b2: 55:7a:3c:2a:10:2c:0e:99:49:31:6b:14:8a:67:fa:f1:1e:62: e2:91:e9:db:d8:19:18:df:01:7a:5e:50:a3:fe:0a:2a:fd:b3: eb:ac:8d:66:97:5c:55:8b:0f:6c:00:d4:72:a0:b2:54:64:9b: 7f:45:40:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SnkjfkFz/A30eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjEwNGUxMzktMzU5YS00NzIwLTk1NDQtMWJmZDE3MmQzM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCuoudoHKtXFM6as8Hn79XVzdlu0dnUvAbUW Q/m4x+FUkJ0dCe9DrO/V2sVCrkLmQcZu317598fMWWrYijK3Xyy+NQOuH2bj/4vk f+/+HyjklLLnhyViHzfPSTLjlJ0qoYsgGWevRfAVRwV4RHUt+7NNaItwoTO1Kquh 63u58wkj0zEzIjEsMRbxO8M1nAh6wGSBNZycbT4LzPdR8Lt3JxCCKWGqs2VuIvgO qNxSUWBdPbaLWEoTd0/MGdVKNN9H6VF6saFA3/Vt/NqhOUGvLxddwmT5OqWyyj+f JkWzJVr8HcNzRAALQWuOv81TMEISNpGh6wXbSJ/tLXtWt2r2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe3GKmKMA6WoWSlPHX89QuE//0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U4NDI4ZGEtNGJiMC0z MDA0LWE0ZjAtMDM2NDk0YWI5MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYOyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz3VCbRALeD7OZImH6zVp+EUF5YJTV3qFsrDvuVfZoSHYfX8auWkemZ wuWqPxDridL/9EkN+LYc5OFk5m68U7X1FWRADvWgvLS28DE80c/2WQFymN8gHsp1 sIT24dXYasyWUcmRluBScgRVIF7SuuZFbOm1SznSh47m/ZKKX/fZWXNpiCg6zv+b x03YKPzBwJNm0H4EQHsHYgVHo2059s4n0tO2LE2OnratnFwlwKibO6Jn0UW+LhVl SXVGK0XEeXVan1+5slV6PCoQLA6ZSTFrFIpn+vEeYuKR6dvYGRjfAXpeUKP+Cir9 s+usjWaXXFWLD2wA1HKgslRkm39FQH4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:17 2025 by rpki-client