$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d414587-af95-39f1-80f5-a4e07b80bc17.roa File: 7d414587-af95-39f1-80f5-a4e07b80bc17.roa (raw, json) Hash identifier: kktrkI/SMFptgGUo8EoKXqEH5mZtD05rujAAcDEOs6I= Subject key identifier: 57:A6:87:F8:03:F3:2A:9F:F2:A1:31:9C:C0:59:36:AD:18:19:FF:0C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3F7C14EDB8346C845980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d414587-af95-39f1-80f5-a4e07b80bc17.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:7c:14:ed:b8:34:6c:84:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4d31124d-6c46-4391-a843-f53ef366c275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:1d:0c:f4:2f:ad:3e:33:af:b6:90:d3:93: c6:dc:54:71:dc:ef:75:66:24:be:cb:fc:9e:cc:f7: f0:af:5d:bc:af:06:4b:37:ee:6e:00:fe:7f:73:80: 1c:77:70:7c:f1:ef:81:61:64:80:ac:2e:84:95:15: 32:a6:e8:c2:be:14:24:12:da:55:22:c3:1c:1e:ab: 4d:22:03:e2:5a:f0:f5:f9:21:20:e5:90:38:bc:d8: ee:d6:65:c1:33:49:6b:a3:dd:b8:be:ea:8f:b3:39: 04:d4:11:e4:3d:c6:e6:03:63:43:f0:1b:e6:12:be: 18:bb:0b:77:62:51:36:fa:f0:e1:a4:3e:84:03:a9: eb:af:4a:fa:88:66:74:07:33:4e:9e:f1:fc:9f:9c: 17:2c:95:62:f1:2f:e8:34:55:fc:7a:ca:af:30:b3: 37:2a:5b:19:71:aa:6e:75:de:e2:05:b4:63:79:f0: 2f:2d:2d:73:e3:b3:cf:ca:1f:a0:5f:c9:1a:23:86: 4a:6e:87:ff:bb:f2:a6:73:c0:cb:c4:00:2c:2f:82: e2:a2:f2:0d:0b:b4:8e:31:06:5d:6b:22:44:85:bf: b9:3e:bb:b8:8d:c4:95:2a:23:3b:28:29:72:5f:a7: 24:72:14:f7:38:94:a2:9b:c1:cb:d6:fc:1e:37:9d: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A6:87:F8:03:F3:2A:9F:F2:A1:31:9C:C0:59:36:AD:18:19:FF:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d414587-af95-39f1-80f5-a4e07b80bc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:cd:2f:5c:90:cb:2f:cd:cd:be:f7:4c:89:c2:27:71:0d:f0: 17:3e:1e:4b:ba:62:fe:7a:6f:21:c2:66:e4:07:1a:d3:c0:80: cb:eb:ee:63:6a:80:99:6f:53:af:c5:17:4e:44:59:cd:e9:1d: 88:e2:f7:4f:70:b1:86:69:ca:74:6e:2f:a0:b9:00:dc:e5:5e: 44:b6:e1:d0:db:fc:7d:03:41:cc:5d:7f:90:8c:87:1a:a1:27: 23:11:60:ce:0e:69:24:21:b1:0e:a1:e3:19:dd:d3:92:79:91: 07:13:97:5b:2c:e6:b8:56:d3:a9:75:f5:93:43:7f:d5:0a:1e: 8c:0d:8c:af:50:f4:36:88:6d:f8:b3:c1:df:6a:8b:87:86:ef: 5f:a2:37:90:a7:0b:3e:0d:02:16:8a:c3:9e:c2:97:fa:db:d9: ee:9d:02:63:e0:91:c8:e9:9a:5b:85:55:03:02:1f:77:a1:7c: cb:5f:b5:2f:0a:c3:fa:4c:7e:a5:10:42:77:64:13:16:44:c4: 50:95:3a:0b:90:28:c7:2b:29:b2:a7:86:83:5d:42:b6:e9:90: b1:e4:50:78:75:44:95:aa:93:3f:41:00:97:0b:d1:73:9c:8a: 1b:c6:1a:7c:0c:e8:21:2e:f1:c0:48:40:d9:7d:07:ab:0a:55: 97:0f:9a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT98FO24NGyEWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGQzMTEyNGQtNmM0Ni00MzkxLWE4NDMtZjUzZWYzNjZjMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP0dDPQvrT4zr7aQ05PG3FRx3O91ZiS+y/ye zPfwr128rwZLN+5uAP5/c4Acd3B88e+BYWSArC6ElRUypujCvhQkEtpVIsMcHqtN IgPiWvD1+SEg5ZA4vNju1mXBM0lro924vuqPszkE1BHkPcbmA2ND8BvmEr4Yuwt3 YlE2+vDhpD6EA6nrr0r6iGZ0BzNOnvH8n5wXLJVi8S/oNFX8esqvMLM3KlsZcapu dd7iBbRjefAvLS1z47PPyh+gX8kaI4ZKbof/u/Kmc8DLxAAsL4LiovINC7SOMQZd ayJEhb+5Pru4jcSVKiM7KClyX6ckchT3OJSim8HL1vweN51giwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFemh/gD8yqf8qExnMBZNq0YGf8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q0MTQ1ODctYWY5NS0z OWYxLTgwZjUtYTRlMDdiODBiYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfNL1yQyy/Nzb73TInCJ3EN8Bc+Hku6Yv56byHCZuQHGtPAgMvr7mNq gJlvU6/FF05EWc3pHYji909wsYZpynRuL6C5ANzlXkS24dDb/H0DQcxdf5CMhxqh JyMRYM4OaSQhsQ6h4xnd05J5kQcTl1ss5rhW06l19ZNDf9UKHowNjK9Q9DaIbfiz wd9qi4eG71+iN5CnCz4NAhaKw57Cl/rb2e6dAmPgkcjpmluFVQMCH3ehfMtftS8K w/pMfqUQQndkExZExFCVOguQKMcrKbKnhoNdQrbpkLHkUHh1RJWqkz9BAJcL0XOc ihvGGnwM6CEu8cBIQNl9B6sKVZcPmpk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:55 2025 by rpki-client