$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa File: 54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa (raw, json) Hash identifier: KEAkWuhrkVjpqZXSRV4+BYtQS20VWq3QrnDMt4eB6uY= Subject key identifier: 42:7A:D5:DD:BB:53:58:61:91:2E:7F:46:93:04:2C:AF:7E:B3:0C:14 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D312A615C66ACDEEFA180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:31:2a:61:5c:66:ac:de:ef:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ec8b41c8-0e51-43c9-a76b-fa0c8215b57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:91:51:8a:da:53:e8:5a:14:48:ff:11:33: 35:f0:85:8c:21:a0:16:bd:ab:da:a2:49:85:58:8b: 84:80:7b:9c:2e:aa:88:24:9b:bc:ee:2d:62:02:6a: ef:66:e0:07:24:1d:e6:dc:48:a6:20:d9:9f:e4:ba: 83:71:84:a2:01:8a:62:c4:b5:a2:f0:b1:50:1b:b4: b9:0a:62:90:1b:76:6b:13:fc:1a:c0:54:9e:c9:2a: c3:b5:65:49:db:40:67:94:af:a8:41:b5:96:2b:6c: 73:41:64:95:b3:12:6b:f1:be:16:c4:fb:57:7d:3f: 32:a0:41:ee:8f:ec:8f:cf:ec:11:ca:04:72:e4:14: cf:c3:64:c4:30:c4:c3:e8:4b:28:ea:ef:5e:ff:73: 4b:3f:c3:e1:c8:54:8f:62:a7:68:8c:09:57:cb:61: 95:e0:7e:c9:41:55:41:f2:4a:97:3e:9a:06:52:78: 66:73:14:29:11:c6:68:db:a4:2e:95:06:05:11:f3: a2:b0:53:90:c0:82:71:78:cd:27:40:6a:fd:70:3d: 97:cd:4a:6a:f9:e9:df:8b:e6:0a:98:f4:67:78:c3: 17:11:74:84:29:fa:f3:4d:84:e1:07:05:cc:b6:ec: 2c:5e:fd:0f:9e:d5:a5:d5:01:bc:98:52:c4:fb:51: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:D5:DD:BB:53:58:61:91:2E:7F:46:93:04:2C:AF:7E:B3:0C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54ef6ed5-e0d6-361d-bea8-adb5a2cef57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5f:f1:d7:93:66:46:62:66:af:4a:a7:16:e1:a4:66:5b:38: 3b:76:37:a4:5c:7d:19:e4:9d:78:36:0d:86:e2:92:4a:67:ac: d9:b4:11:17:c4:a1:ff:3a:fa:08:d0:2a:ab:52:90:9e:44:5c: 7a:01:86:98:7c:f0:f1:3d:c8:87:3c:68:b0:71:d6:3f:d1:ef: 41:f7:6a:52:1c:bc:1a:36:25:79:43:ca:4d:91:e7:13:30:db: da:60:ef:a9:71:77:0b:61:7d:04:66:6f:04:98:f4:64:25:44: 32:6d:b3:ee:06:c4:ea:6c:68:70:17:3f:9b:75:d5:2f:ae:a8: 51:a3:57:90:88:39:4d:8f:30:39:43:1b:29:0f:a0:a2:be:09: 8a:e1:71:2f:b3:2c:ed:38:aa:b8:0c:0d:6f:a4:ce:79:fe:4c: 3a:38:99:49:1f:ce:0d:3d:59:eb:0c:b2:70:1d:f9:88:cc:68: 8c:85:65:2b:9a:1d:60:9b:8c:6c:1c:f9:4e:1e:4c:b8:38:ec: 76:71:0d:a3:32:5a:01:a8:8e:40:79:f2:13:8d:9a:7e:e6:1b: 97:3c:66:de:c7:95:9c:f6:a2:d6:8f:e4:eb:8e:e9:e8:0f:2c: 4f:38:bf:68:4d:db:14:8c:7e:6b:37:89:27:88:0f:e7:d3:b6: 8b:8f:3a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jTEqYVxmrN7voYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWM4YjQxYzgtMGU1MS00M2M5LWE3NmItZmEwYzgyMTViNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMKRUYraU+haFEj/ETM18IWMIaAWvavaokmF WIuEgHucLqqIJJu87i1iAmrvZuAHJB3m3EimINmf5LqDcYSiAYpixLWi8LFQG7S5 CmKQG3ZrE/wawFSeySrDtWVJ20BnlK+oQbWWK2xzQWSVsxJr8b4WxPtXfT8yoEHu j+yPz+wRygRy5BTPw2TEMMTD6Eso6u9e/3NLP8PhyFSPYqdojAlXy2GV4H7JQVVB 8kqXPpoGUnhmcxQpEcZo26QulQYFEfOisFOQwIJxeM0nQGr9cD2XzUpq+enfi+YK mPRneMMXEXSEKfrzTYThBwXMtuwsXv0PntWl1QG8mFLE+1GyCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ61d27U1hhkS5/RpMELK9+swwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTRlZjZlZDUtZTBkNi0z NjFkLWJlYTgtYWRiNWEyY2VmNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtf8deTZkZiZq9KpxbhpGZbODt2N6RcfRnknXg2DYbikkpnrNm0ERfE of86+gjQKqtSkJ5EXHoBhph88PE9yIc8aLBx1j/R70H3alIcvBo2JXlDyk2R5xMw 29pg76lxdwthfQRmbwSY9GQlRDJts+4GxOpsaHAXP5t11S+uqFGjV5CIOU2PMDlD GykPoKK+CYrhcS+zLO04qrgMDW+kznn+TDo4mUkfzg09WesMsnAd+YjMaIyFZSua HWCbjGwc+U4eTLg47HZxDaMyWgGojkB58hONmn7mG5c8Zt7HlZz2otaP5OuO6egP LE84v2hN2xSMfms3iSeID+fTtouPOhQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:49:58 2025 by rpki-client