$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa File: 7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa (raw, json) Hash identifier: Kgua7UpzaWcLLGNII+jMb+T8/VlDpV9Z+wVMKaIk/KE= Subject key identifier: F3:EB:3F:77:65:3B:E5:15:80:30:96:35:7A:D8:86:A9:46:CA:33:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3E7F6B8B7FBD5F5081A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3e:7f:6b:8b:7f:bd:5f:50:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=5b0ef9eb-7972-4d4f-9dca-eee7214d9ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:4a:76:75:2d:5e:61:1b:06:a0:33:d0:d9: 5c:d0:1e:45:ee:ab:80:c8:9e:c8:44:b1:da:4f:39: 70:d4:1e:d6:7e:e5:0e:85:0b:13:de:c6:0d:49:88: 9d:16:71:0e:27:86:d6:f2:5f:57:b0:a2:0c:56:66: e8:b8:1e:3d:40:4c:41:9f:32:56:62:e9:96:e7:bd: c2:c0:c7:84:ad:39:f5:4a:83:31:09:33:16:51:29: c7:9c:66:08:3f:c5:b9:8d:ba:c6:d9:0d:c3:07:bf: 64:50:0a:79:9a:93:45:3b:c6:38:09:d3:87:81:57: 32:cc:8a:77:65:67:56:41:57:40:4a:ab:b6:1f:83: 16:98:77:f7:54:95:c2:9a:c8:b8:ab:d7:23:8a:59: 4b:0a:bd:82:94:f8:9b:02:0b:70:a7:37:4f:0b:aa: 12:c7:f6:02:86:c7:b5:2d:b1:b5:f3:37:3d:0d:a2: 4b:39:72:90:a8:7b:05:14:01:1e:73:30:0c:9f:96: ce:e8:e2:80:62:eb:a3:5a:03:f2:da:31:c3:a5:bc: 7d:6c:c2:1f:51:5f:78:85:71:90:98:7d:e3:ea:87: c2:e1:75:be:4a:99:b9:64:4f:fd:73:f6:58:74:11: 9b:cc:1d:89:2d:f6:8d:e2:90:1b:13:be:be:6f:bc: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EB:3F:77:65:3B:E5:15:80:30:96:35:7A:D8:86:A9:46:CA:33:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9d:59:9e:e0:37:df:35:0f:08:01:73:76:9a:fa:a1:1e:5e: 6f:ac:2d:d7:e6:09:d4:16:00:90:63:7a:b2:3a:b6:a6:0f:41: f8:cd:20:36:fc:73:7d:78:cd:8c:7b:b9:b3:7f:9f:a7:1c:57: 65:ca:b6:4a:ef:a4:2e:7a:3e:10:4e:f4:dd:52:72:e6:b4:6a: 65:ca:af:98:17:78:ee:46:12:27:5d:39:96:a4:42:8e:05:9e: a7:a0:66:23:9b:fa:1c:67:05:07:cb:82:b1:a2:17:b8:fb:9e: b2:fb:1a:09:6c:da:e2:8d:fb:bf:60:ab:03:6d:fa:2d:6a:f2: df:0a:c9:56:8f:27:51:0f:15:4f:4c:83:a9:35:82:ef:b1:7f: 9e:0a:cb:7f:1a:a8:89:5c:39:83:1f:d7:e7:5c:55:0d:77:b4: 8a:07:d4:1e:cc:56:1f:e2:d3:b7:b4:2e:12:d7:53:8f:0b:59: d9:8a:2a:88:e4:0e:9a:6e:f6:ba:ac:62:19:a8:b0:d9:d7:93: 3e:da:9b:7b:c3:19:c3:42:34:2b:b4:ed:76:d2:a3:35:8b:30: e9:25:6d:c1:b5:e5:c5:f6:a7:6e:86:5f:e6:de:aa:53:7b:3e: 29:c1:d9:8b:c5:b7:eb:fb:92:7a:9a:b5:f3:c1:fa:bd:b5:e6: 87:7d:a1:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT5/a4t/vV9QgaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWIwZWY5ZWItNzk3Mi00ZDRmLTlkY2EtZWVlNzIxNGQ5YWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2hKdnUtXmEbBqAz0Nlc0B5F7quAyJ7IRLHa Tzlw1B7WfuUOhQsT3sYNSYidFnEOJ4bW8l9XsKIMVmbouB49QExBnzJWYumW573C wMeErTn1SoMxCTMWUSnHnGYIP8W5jbrG2Q3DB79kUAp5mpNFO8Y4CdOHgVcyzIp3 ZWdWQVdASqu2H4MWmHf3VJXCmsi4q9cjillLCr2ClPibAgtwpzdPC6oSx/YChse1 LbG18zc9DaJLOXKQqHsFFAEeczAMn5bO6OKAYuujWgPy2jHDpbx9bMIfUV94hXGQ mH3j6ofC4XW+Spm5ZE/9c/ZYdBGbzB2JLfaN4pAbE76+b7z+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPrP3dlO+UVgDCWNXrYhqlGyjNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzYwNWU2MmUtY2E4Mi0z N2UyLWE2MzItZjFmM2RhODlmMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+dWZ7gN981DwgBc3aa+qEeXm+sLdfmCdQWAJBjerI6tqYPQfjNIDb8 c314zYx7ubN/n6ccV2XKtkrvpC56PhBO9N1Scua0amXKr5gXeO5GEiddOZakQo4F nqegZiOb+hxnBQfLgrGiF7j7nrL7Ggls2uKN+79gqwNt+i1q8t8KyVaPJ1EPFU9M g6k1gu+xf54Ky38aqIlcOYMf1+dcVQ13tIoH1B7MVh/i07e0LhLXU48LWdmKKojk Dppu9rqsYhmosNnXkz7am3vDGcNCNCu07XbSozWLMOklbcG15cX2p26GX+beqlN7 PinB2YvFt+v7knqatfPB+r215od9oVk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:18:20 2025 by rpki-client