$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa File: a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa (raw, json) Hash identifier: LS+e855r3rr91fz74f7xj6YuhZ5Nu1mLNmSWooh/swY= Subject key identifier: B9:91:CF:D2:F7:89:74:CD:0B:A0:A9:91:21:6E:77:AF:07:02:79:52 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3D93A60F9BD42C55F700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3d:93:a6:0f:9b:d4:2c:55:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4aa4fe05-20ad-4033-8440-969c4d840225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:50:26:de:7c:b1:37:78:bc:9a:65:2f:b2: bd:41:2b:4a:25:a8:81:50:ca:fb:02:4d:b2:29:59: 1c:2d:5d:4c:df:d3:19:13:ac:1d:3b:8c:1e:9e:c8: ca:d7:56:70:de:d4:5b:1e:72:8a:e3:19:89:2b:76: 98:cb:fb:a8:78:1d:05:e1:3a:88:32:9e:10:be:b2: db:a5:79:16:0a:76:35:e8:ae:76:10:51:d8:c9:ab: 02:9d:5b:53:8c:1e:fa:59:5e:17:fc:14:1b:70:93: 6f:22:81:98:97:cf:fb:3f:c3:b4:f6:c1:20:e0:08: a7:c5:f1:ac:95:37:d1:1d:39:dc:f5:5f:25:10:5f: 65:9b:5c:a5:a3:bf:60:6a:d7:43:6a:1a:0f:e5:7c: 29:47:d1:6b:92:06:59:c6:d0:65:f5:56:65:ef:3c: 44:fc:bf:7a:4d:54:85:40:96:96:54:b4:f1:30:f9: 53:c7:9e:b0:f6:5f:d9:cb:91:9a:39:3c:28:00:c0: e6:f3:fd:86:ef:29:75:17:54:ed:bd:3f:e6:45:7d: ec:c8:83:4b:aa:62:19:df:58:c9:34:a5:d7:a5:c5: d9:c5:c2:ab:3a:b0:d9:fa:83:6e:8b:12:a1:a0:11: b9:c3:09:4b:27:5d:c5:9d:70:62:a7:e8:ba:d3:57: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:91:CF:D2:F7:89:74:CD:0B:A0:A9:91:21:6E:77:AF:07:02:79:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ce:95:e0:65:ff:12:7e:d5:04:aa:f5:2f:9a:ab:7c:24:00: 13:18:0e:0a:e1:70:2b:3a:3d:96:2c:6e:3b:70:51:27:44:61: 1d:da:bb:c0:bc:a3:03:c6:61:6d:6d:ae:ec:96:e3:12:83:73: d0:71:32:2c:d7:5b:44:b5:fb:95:e2:92:e0:37:20:25:c1:8b: a1:7b:51:96:0b:24:b7:ef:e4:7d:44:43:3f:e3:46:b2:14:ce: 84:06:80:89:82:34:0d:b1:22:c7:6d:33:06:35:b7:23:1a:ff: af:f3:80:0a:4b:a6:c4:7a:22:53:c5:13:65:63:03:21:7f:1b: 34:ac:3f:12:b0:af:66:ee:54:07:43:1c:9e:38:fe:dc:f0:f6: 10:0d:21:c9:38:27:7d:1f:30:e3:55:e0:7f:8c:be:0e:97:67: 56:03:8c:a8:95:aa:35:e7:e8:c2:50:0b:2e:1e:85:ed:ca:9a: 6c:6a:a6:b8:1e:8a:68:b7:98:de:c1:e1:8c:72:3d:0f:c9:45: 62:a6:4f:d1:98:3e:06:d5:ed:b3:3d:c2:bb:db:2f:f6:36:3e: ab:07:07:14:0b:2a:25:f7:f1:0a:cc:2b:fe:59:f4:51:8b:1c: b8:fd:94:2c:3e:29:cd:62:71:fb:5a:a9:5b:2a:80:5d:50:17: 9e:63:e6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT2Tpg+b1CxV9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGFhNGZlMDUtMjBhZC00MDMzLTg0NDAtOTY5YzRkODQwMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bpQJt58sTd4vJplL7K9QStKJaiBUMr7Ak2y KVkcLV1M39MZE6wdO4wensjK11Zw3tRbHnKK4xmJK3aYy/uoeB0F4TqIMp4QvrLb pXkWCnY16K52EFHYyasCnVtTjB76WV4X/BQbcJNvIoGYl8/7P8O09sEg4AinxfGs lTfRHTnc9V8lEF9lm1ylo79gatdDahoP5XwpR9FrkgZZxtBl9VZl7zxE/L96TVSF QJaWVLTxMPlTx56w9l/Zy5GaOTwoAMDm8/2G7yl1F1TtvT/mRX3syINLqmIZ31jJ NKXXpcXZxcKrOrDZ+oNuixKhoBG5wwlLJ13FnXBip+i601cBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmRz9L3iXTNC6CpkSFud68HAnlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTk4YmJjNDUtMzFjOC0z MDQ2LWJkYzgtZjMzZDdkYzdiOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXOleBl/xJ+1QSq9S+aq3wkABMYDgrhcCs6PZYsbjtwUSdEYR3au8C8 owPGYW1truyW4xKDc9BxMizXW0S1+5XikuA3ICXBi6F7UZYLJLfv5H1EQz/jRrIU zoQGgImCNA2xIsdtMwY1tyMa/6/zgApLpsR6IlPFE2VjAyF/GzSsPxKwr2buVAdD HJ44/tzw9hANIck4J30fMONV4H+Mvg6XZ1YDjKiVqjXn6MJQCy4ehe3Kmmxqprge imi3mN7B4YxyPQ/JRWKmT9GYPgbV7bM9wrvbL/Y2PqsHBxQLKiX38QrMK/5Z9FGL HLj9lCw+Kc1icftaqVsqgF1QF55j5js= -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:28 2025 by rpki-client