$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa File: 5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa (raw, json) Hash identifier: Vx1QeMLpi3rcG2BlLoHZp2VfzIBO1jI9uRczseLj3CM= Subject key identifier: 0A:B0:37:7F:C8:3F:10:C9:FB:90:3B:9B:B8:DE:80:09:8D:60:0D:1C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3F0105AC562438B16E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:01:05:ac:56:24:38:b1:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=372d1b88-c870-47e6-9189-2a85c816c5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:19:71:31:23:d9:77:d9:80:9a:5e:ba:af: 6d:fc:4a:5e:a9:df:3d:dd:34:71:bf:e7:13:76:53: ab:44:39:4c:a7:a7:f4:e4:4d:cc:e3:53:9c:9b:47: 29:34:43:28:79:a8:68:22:07:03:20:e8:b6:56:b8: d4:f6:c6:4b:4d:fb:0f:42:54:90:39:5c:42:15:97: 5a:2f:fc:08:c2:69:fd:e5:f4:a8:cd:22:46:80:94: f0:21:aa:d6:d8:30:28:35:ce:97:85:2e:48:2f:90: 79:4a:aa:aa:6e:2d:ae:64:fe:b5:39:9b:2b:dc:2b: 66:e0:9a:4a:8e:59:82:a7:de:78:fa:33:5e:e8:17: 76:b7:21:cf:27:a2:17:97:df:f4:28:b2:84:61:24: 87:ae:6b:e2:38:d1:3f:fb:b6:8b:dd:09:52:a1:94: dd:81:99:68:f4:0a:2f:d7:ea:09:10:30:56:ec:35: 1b:13:8d:51:5b:f2:a1:f6:ec:50:33:0e:dd:c2:d7: 6a:69:64:ab:c2:23:6a:e8:10:c5:a7:d6:6c:19:41: 74:da:7e:c0:c4:9a:5f:40:bc:e3:06:ff:e9:e0:6c: 4b:33:c4:23:2e:a1:96:af:bd:e2:2d:fa:85:6f:d4: 45:49:34:5f:53:9c:19:bd:3a:67:8f:92:4b:f1:00: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B0:37:7F:C8:3F:10:C9:FB:90:3B:9B:B8:DE:80:09:8D:60:0D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fb:4a:39:66:03:3b:2b:5f:7d:c4:66:6c:26:ba:46:63:b1: da:05:9b:20:ef:7f:31:cf:11:3a:b1:06:b5:65:dc:dc:32:99: 12:08:4b:fe:d5:f7:f9:6e:db:c4:bc:3d:0e:df:5f:69:7f:36: df:50:ff:fe:91:a7:4c:48:a0:b9:7d:4b:53:9d:23:3e:6d:a5: 75:14:32:d6:03:4b:72:cf:37:ec:2d:ac:cf:65:71:98:39:1c: 29:07:2e:0a:97:ec:6a:40:1d:1c:c2:d8:a3:06:4a:27:22:a0: b7:7c:05:8d:7e:06:0d:cc:56:da:a4:6e:da:a0:64:56:fe:e5: cb:93:11:42:91:b4:c1:22:03:81:61:b2:71:42:dd:ff:e0:ce: da:35:f4:7e:b0:40:85:57:26:ed:bb:75:50:9a:54:b9:63:26: 08:04:44:9f:62:30:40:82:d3:df:f6:dc:54:3b:0c:7b:da:b6: 53:39:b4:5b:f4:04:d3:01:20:d1:25:6d:3d:65:05:1c:ba:13: 0a:4f:3d:e3:61:08:4b:36:d6:f8:fc:5f:82:6d:5c:93:48:22: 54:3d:a0:3c:ac:98:eb:15:a8:ef:16:43:f7:53:da:cc:cb:3d: d7:a7:df:79:f9:22:c8:ea:79:31:ce:9e:f6:86:58:3f:49:33: 2c:03:9c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT8BBaxWJDixbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MzcyZDFiODgtYzg3MC00N2U2LTkxODktMmE4NWM4MTZjNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmkZcTEj2XfZgJpeuq9t/Epeqd893TRxv+cT dlOrRDlMp6f05E3M41Ocm0cpNEMoeahoIgcDIOi2VrjU9sZLTfsPQlSQOVxCFZda L/wIwmn95fSozSJGgJTwIarW2DAoNc6XhS5IL5B5Sqqqbi2uZP61OZsr3Ctm4JpK jlmCp954+jNe6Bd2tyHPJ6IXl9/0KLKEYSSHrmviONE/+7aL3QlSoZTdgZlo9Aov 1+oJEDBW7DUbE41RW/Kh9uxQMw7dwtdqaWSrwiNq6BDFp9ZsGUF02n7AxJpfQLzj Bv/p4GxLM8QjLqGWr73iLfqFb9RFSTRfU5wZvTpnj5JL8QCBMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqwN3/IPxDJ+5A7m7jegAmNYA0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQzOGUzNzQtMzUxYS0z MzEyLTljYjMtZDM3MzhjM2JkMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj7SjlmAzsrX33EZmwmukZjsdoFmyDvfzHPETqxBrVl3NwymRIIS/7V 9/lu28S8PQ7fX2l/Nt9Q//6Rp0xIoLl9S1OdIz5tpXUUMtYDS3LPN+wtrM9lcZg5 HCkHLgqX7GpAHRzC2KMGSicioLd8BY1+Bg3MVtqkbtqgZFb+5cuTEUKRtMEiA4Fh snFC3f/gzto19H6wQIVXJu27dVCaVLljJggERJ9iMECC09/23FQ7DHvatlM5tFv0 BNMBINElbT1lBRy6EwpPPeNhCEs21vj8X4JtXJNIIlQ9oDysmOsVqO8WQ/dT2szL Pden33n5IsjqeTHOnvaGWD9JMywDnNo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:12 2025 by rpki-client