$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/422eb033-f3bf-3c1c-a912-e5b11d2543a5.roa File: 422eb033-f3bf-3c1c-a912-e5b11d2543a5.roa (raw, json) Hash identifier: v9ujaaXePUGn3qWYTsJ3tS5cTbcc/6FE/qOtmdFYZ0U= Subject key identifier: DC:9C:0A:AF:BC:D4:B1:04:4D:78:6A:E9:E8:72:92:AB:38:23:BF:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D400B2622BA7E7433FCAC Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/422eb033-f3bf-3c1c-a912-e5b11d2543a5.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.97.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:40:0b:26:22:ba:7e:74:33:fc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=66b41522-04e2-4d9c-9d78-bdb041df35ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:cc:51:bf:84:63:e7:3d:5a:08:55:c7:85: b5:97:c6:62:04:75:89:b0:dc:29:ea:5f:c9:cd:9f: 9b:f1:52:c3:34:ed:32:b5:47:8a:0c:ad:27:10:35: 81:57:34:31:ff:32:9f:5a:49:bd:57:61:53:98:43: d5:a1:82:92:f4:e2:3e:39:5e:65:b7:a3:db:27:1c: 6a:ac:14:2a:12:c7:19:f6:34:78:7b:41:73:bf:e0: b1:18:32:d0:b9:4c:70:af:87:0d:5c:2c:91:66:06: 82:5c:77:c2:1c:16:dc:f0:ed:37:5a:95:87:72:94: cb:93:11:d5:cd:96:5c:d0:19:8f:2e:8f:fe:97:2e: 3f:fd:ab:50:25:98:26:6b:c1:85:a6:e9:94:1b:5b: 21:34:2d:e2:e8:a8:0c:11:e9:58:98:f8:f6:28:e1: e2:fb:e1:b2:6f:b8:25:c2:7a:a5:22:b1:6a:f7:da: aa:1c:f7:7e:1e:bc:e1:2a:a6:7e:5f:c0:c5:59:29: 37:bd:ac:df:35:6c:71:1c:5e:45:0e:22:66:2f:f3: 0c:30:20:47:26:18:fc:93:c6:ca:5e:0f:31:54:dc: 28:bc:78:d0:38:c6:b2:61:e8:29:14:73:4d:03:cb: c0:c0:46:65:d7:29:34:95:e9:ab:9b:ed:89:07:a2: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9C:0A:AF:BC:D4:B1:04:4D:78:6A:E9:E8:72:92:AB:38:23:BF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/422eb033-f3bf-3c1c-a912-e5b11d2543a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:18:82:50:b8:df:ba:ac:ca:ff:3f:06:46:8f:92:c5:10:74: cd:b6:f9:80:c5:b4:09:12:6c:fa:09:c8:c9:10:0e:3e:68:95: 68:da:25:0e:ba:1c:e3:3b:2c:03:77:05:06:5f:19:93:36:be: 7a:56:5f:59:1e:cc:2a:4d:ca:1a:dc:bc:13:d3:b4:80:59:1c: 89:8a:c2:b6:a5:2a:e3:6a:9b:fb:06:f6:33:4f:ec:07:12:68: 24:7b:53:53:ac:0e:b7:30:6f:87:c7:63:0f:28:bc:ed:a2:40: 48:76:bd:e7:d9:2a:0a:24:6e:e7:70:4f:51:ed:05:95:9b:5e: b3:b1:26:02:1f:6c:f0:3a:27:13:3a:6a:ab:23:91:2f:6f:a6: 52:a5:47:21:fe:8a:91:90:87:00:c5:ee:c4:2f:c2:a5:0c:9d: ce:3e:6b:09:0e:d7:cb:83:63:e7:f0:98:26:99:74:4e:29:71: 3a:7c:3e:81:bf:15:49:98:10:6c:22:06:27:a8:08:8e:ee:97: 4c:cd:99:56:cb:58:87:54:bd:65:0d:2d:e9:32:bf:fe:e9:a1: c1:82:8e:29:98:0a:c7:b3:03:53:ae:ce:b3:a5:9d:36:80:c7: 2c:29:2f:c6:bc:07:ed:7c:b9:0a:d4:5b:10:e9:54:9e:9f:9d: bb:49:98:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUALJiK6fnQz/KwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjZiNDE1MjItMDRlMi00ZDljLTlkNzgtYmRiMDQxZGYzNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsifMUb+EY+c9WghVx4W1l8ZiBHWJsNwp6l/J zZ+b8VLDNO0ytUeKDK0nEDWBVzQx/zKfWkm9V2FTmEPVoYKS9OI+OV5lt6PbJxxq rBQqEscZ9jR4e0Fzv+CxGDLQuUxwr4cNXCyRZgaCXHfCHBbc8O03WpWHcpTLkxHV zZZc0BmPLo/+ly4//atQJZgma8GFpumUG1shNC3i6KgMEelYmPj2KOHi++Gyb7gl wnqlIrFq99qqHPd+HrzhKqZ+X8DFWSk3vazfNWxxHF5FDiJmL/MMMCBHJhj8k8bK Xg8xVNwovHjQOMayYegpFHNNA8vAwEZl1yk0lemrm+2JB6KRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNycCq+81LEETXhq6ehykqs4I7+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDIyZWIwMzMtZjNiZi0z YzFjLWE5MTItZTViMTFkMjU0M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIYglC437qsyv8/BkaPksUQdM22+YDFtAkSbPoJyMkQDj5olWjaJQ66 HOM7LAN3BQZfGZM2vnpWX1kezCpNyhrcvBPTtIBZHImKwralKuNqm/sG9jNP7AcS aCR7U1OsDrcwb4fHYw8ovO2iQEh2vefZKgokbudwT1HtBZWbXrOxJgIfbPA6JxM6 aqsjkS9vplKlRyH+ipGQhwDF7sQvwqUMnc4+awkO18uDY+fwmCaZdE4pcTp8PoG/ FUmYEGwiBieoCI7ul0zNmVbLWIdUvWUNLekyv/7pocGCjimYCsezA1OuzrOlnTaA xywpL8a8B+18uQrUWxDpVJ6fnbtJmMA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:18:17 2025 by rpki-client