$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1fa913d-66af-37f2-adda-101d737533a9.roa File: a1fa913d-66af-37f2-adda-101d737533a9.roa (raw, json) Hash identifier: NZ/nkywM85FfkSsIz0UFL8E0bA8oCOMKVLguBxtPtGQ= Subject key identifier: D2:BB:C8:F9:E4:38:6E:CB:CF:E1:83:C7:4B:4D:58:25:72:D6:4A:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D32B615CC5CA6B7FF9100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1fa913d-66af-37f2-adda-101d737533a9.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.97.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:32:b6:15:cc:5c:a6:b7:ff:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ef7b9afb-b653-47cb-b24b-40aa2debeedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:ce:32:bc:8a:96:cd:96:7a:ed:ba:7e:98: f7:fc:83:e6:68:03:94:7f:ba:71:8d:30:d6:15:b7: 79:e1:0e:60:70:bb:6a:aa:8d:e5:c7:10:87:4a:9d: 07:4a:03:37:2f:42:04:08:56:2b:83:36:d2:13:9c: 8d:26:fc:47:96:01:35:13:b6:d5:73:67:ba:1a:cf: be:ac:de:fc:a5:9e:52:99:c2:3d:7a:0b:81:86:8e: 52:e8:b5:41:8b:93:2b:11:53:3c:c0:5e:8f:87:32: 5b:c6:d9:c2:fe:3d:eb:5e:f8:22:33:ac:23:2e:54: be:09:b5:5c:3c:aa:5b:e8:6f:2e:a5:bf:cd:e6:1b: ea:12:94:75:f7:c6:54:30:03:6e:30:0f:11:6c:20: 73:f6:3f:0c:fc:62:14:7e:19:62:59:2a:b3:cf:7b: dd:de:58:a2:ac:89:55:23:36:c1:11:ed:bb:02:51: e1:d3:0f:22:7c:70:af:54:ca:88:2b:5d:21:2f:16: 1b:67:b0:cc:e0:a6:46:90:00:53:d8:25:0c:bd:84: a9:73:e0:98:12:d6:b6:6c:cd:0b:ab:1d:be:22:7b: 68:54:0a:b3:99:4e:5b:2a:68:57:32:14:b6:8b:d9: 12:db:f4:f9:88:83:50:f3:ed:94:58:23:82:31:e6: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:C8:F9:E4:38:6E:CB:CF:E1:83:C7:4B:4D:58:25:72:D6:4A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1fa913d-66af-37f2-adda-101d737533a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cc:07:03:5b:da:0b:b7:60:e3:eb:57:1f:e6:8f:ff:4b:d0: fa:6b:8e:2c:9e:11:8f:1c:39:d3:c7:63:5a:a5:68:4c:c4:f3: bf:ce:cc:64:df:ea:f5:6c:32:52:c0:9d:11:36:d3:35:f6:80: 54:69:30:be:2a:a2:ea:0b:2d:f7:a7:9b:7d:27:1b:4b:8b:25: 24:fa:a7:02:d9:92:66:99:40:7d:2c:ba:8e:d1:a6:ac:c6:14: 94:55:5f:7c:1b:65:33:fb:eb:dc:e8:4a:bc:47:d4:6f:71:09: 12:d8:c2:93:11:22:89:81:87:94:c6:e5:dd:d2:b9:f4:c1:31: bc:6a:86:c8:a7:c4:76:6d:29:c0:35:60:89:ae:b7:87:7d:36: 00:f3:e9:ff:1c:f8:4b:cf:9c:5b:d8:6c:ce:dc:f0:f3:4a:e7: d5:64:be:d8:13:34:e2:24:f0:66:03:5d:6f:04:20:3d:d2:2c: fb:ee:60:5d:1a:45:91:67:ce:10:b3:6e:54:a9:5a:a7:de:94: f0:2b:f0:f6:84:b9:f6:f7:4d:85:de:4d:e9:b6:d4:ad:fb:5e: 59:b8:ae:aa:e7:27:05:94:e0:17:64:d1:09:b9:58:87:7c:0c: 69:94:95:38:bb:e6:f7:4e:cc:95:09:ff:d6:e2:22:f3:52:41: c1:7c:1f:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jTK2Fcxcprf/kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWY3YjlhZmItYjY1My00N2NiLWIyNGItNDBhYTJkZWJlZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WvOMryKls2Weu26fpj3/IPmaAOUf7pxjTDW Fbd54Q5gcLtqqo3lxxCHSp0HSgM3L0IECFYrgzbSE5yNJvxHlgE1E7bVc2e6Gs++ rN78pZ5SmcI9eguBho5S6LVBi5MrEVM8wF6PhzJbxtnC/j3rXvgiM6wjLlS+CbVc PKpb6G8upb/N5hvqEpR198ZUMANuMA8RbCBz9j8M/GIUfhliWSqzz3vd3liirIlV IzbBEe27AlHh0w8ifHCvVMqIK10hLxYbZ7DM4KZGkABT2CUMvYSpc+CYEta2bM0L qx2+IntoVAqzmU5bKmhXMhS2i9kS2/T5iINQ8+2UWCOCMeb84QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK7yPnkOG7Lz+GDx0tNWCVy1krXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFmYTkxM2QtNjZhZi0z N2YyLWFkZGEtMTAxZDczNzUzM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbMBwNb2gu3YOPrVx/mj/9L0PprjiyeEY8cOdPHY1qlaEzE87/OzGTf 6vVsMlLAnRE20zX2gFRpML4qouoLLfenm30nG0uLJST6pwLZkmaZQH0suo7RpqzG FJRVX3wbZTP769zoSrxH1G9xCRLYwpMRIomBh5TG5d3SufTBMbxqhsinxHZtKcA1 YImut4d9NgDz6f8c+EvPnFvYbM7c8PNK59VkvtgTNOIk8GYDXW8EID3SLPvuYF0a RZFnzhCzblSpWqfelPAr8PaEufb3TYXeTem21K37Xlm4rqrnJwWU4Bdk0Qm5WId8 DGmUlTi75vdOzJUJ/9biIvNSQcF8HwM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:48 2025 by rpki-client