$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0af508e-f1bf-390a-be62-69d0cbb7f38c.roa File: b0af508e-f1bf-390a-be62-69d0cbb7f38c.roa (raw, json) Hash identifier: mpMxCm2pYv6c9ascmtqB09qeBPPC2XIaO5xwUhcnrKk= Subject key identifier: DC:63:5C:E1:B2:F9:F2:F6:A0:BB:F7:C2:95:3A:FA:52:47:C6:2F:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3081CA2E2991AE66D980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0af508e-f1bf-390a-be62-69d0cbb7f38c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:30:81:ca:2e:29:91:ae:66:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=67c1cbe3-6d57-4a1c-99f7-542e11e513d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:85:4d:18:b4:b8:3e:e3:dd:bc:59:45:7d: b0:e7:a1:5c:12:ca:31:3d:79:1c:da:c6:20:4c:de: 96:0d:3c:d5:2d:ee:dd:96:41:ad:ae:96:9c:d7:6c: 0e:c2:6e:7b:40:96:fe:f5:e4:4a:61:f1:ac:96:b7: d5:81:4b:b0:b1:9e:2f:6f:7c:44:71:a5:0c:5d:7e: 6e:36:a7:07:c7:03:77:a2:93:bd:cc:d2:42:61:26: c5:65:7a:47:e7:e4:03:9a:c3:c4:07:de:7f:98:b1: c9:16:a8:a2:61:54:88:16:3a:8a:33:7f:cf:14:cf: 22:c7:d1:f8:66:32:02:53:98:cb:b9:cf:02:25:1b: 6d:86:bc:a7:0d:de:5f:cc:20:68:81:a7:48:e9:67: 82:72:f2:49:55:e7:35:f0:f8:21:5a:f8:88:de:ba: 38:7e:af:18:c9:43:5e:ad:fd:97:cd:8e:c1:bb:ce: 8a:e5:d5:bc:9c:34:2a:6d:07:32:86:60:3f:29:c4: b3:d4:45:33:37:7d:fc:94:8c:93:4f:b6:75:61:7b: a4:e1:58:ce:fa:e3:05:4f:24:d1:ce:af:71:31:6a: 14:a5:93:49:b7:ff:2f:d2:89:e8:aa:41:1c:b8:dd: d8:7d:87:c1:89:22:29:2d:0b:9d:26:b3:76:45:b8: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:63:5C:E1:B2:F9:F2:F6:A0:BB:F7:C2:95:3A:FA:52:47:C6:2F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0af508e-f1bf-390a-be62-69d0cbb7f38c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:35:d8:ab:37:2b:a1:e7:df:56:da:11:8c:02:e5:3c:1b:b1: 96:6b:b4:88:bf:09:c1:98:7e:c8:f6:1a:20:96:2d:f5:7a:1b: 9e:28:ce:0a:a6:ca:7e:71:55:ad:1b:d5:64:82:47:62:fb:91: 17:82:92:0c:60:03:cc:6f:f6:5a:68:d9:83:54:e5:89:e1:f0: d2:e0:f6:63:04:ba:c1:b2:0d:2f:ce:60:82:90:0f:26:79:09: f6:48:7e:24:5b:55:7e:00:22:cb:c9:34:dd:38:c4:1b:94:bb: 81:a7:fe:90:3c:e9:5a:90:08:54:a5:e6:2b:d2:73:8b:89:d7: d7:e6:00:17:e2:b4:ca:59:7e:3b:be:8f:c4:53:c1:40:b7:e2: 4e:c8:ba:60:73:73:40:51:9f:19:58:18:58:86:37:9a:d0:7e: 75:17:61:e4:04:0a:88:04:d8:80:19:c7:cf:73:af:a1:a4:19: 5d:1b:96:4a:26:55:05:db:ec:e0:55:3a:91:6b:d3:2d:b9:43: 77:e7:b6:e8:cc:6c:0f:1b:44:73:e3:04:cc:8f:c4:dc:9b:5e: 92:73:fc:08:bf:9d:4d:7b:36:99:fd:58:7a:b5:be:fa:ea:dc: 48:ec:76:6a:54:ed:e6:b8:ce:df:64:1c:3a:55:24:8e:7c:b0: 66:0e:dd:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jTCByi4pka5m2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjdjMWNiZTMtNmQ1Ny00YTFjLTk5ZjctNTQyZTExZTUxM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcSFTRi0uD7j3bxZRX2w56FcEsoxPXkc2sYg TN6WDTzVLe7dlkGtrpac12wOwm57QJb+9eRKYfGslrfVgUuwsZ4vb3xEcaUMXX5u NqcHxwN3opO9zNJCYSbFZXpH5+QDmsPEB95/mLHJFqiiYVSIFjqKM3/PFM8ix9H4 ZjICU5jLuc8CJRtthrynDd5fzCBogadI6WeCcvJJVec18PghWviI3ro4fq8YyUNe rf2XzY7Bu86K5dW8nDQqbQcyhmA/KcSz1EUzN338lIyTT7Z1YXuk4VjO+uMFTyTR zq9xMWoUpZNJt/8v0onoqkEcuN3YfYfBiSIpLQudJrN2RbhjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxjXOGy+fL2oLv3wpU6+lJHxi9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjBhZjUwOGUtZjFiZi0z OTBhLWJlNjItNjlkMGNiYjdmMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI12Ks3K6Hn31baEYwC5TwbsZZrtIi/CcGYfsj2GiCWLfV6G54ozgqm yn5xVa0b1WSCR2L7kReCkgxgA8xv9lpo2YNU5Ynh8NLg9mMEusGyDS/OYIKQDyZ5 CfZIfiRbVX4AIsvJNN04xBuUu4Gn/pA86VqQCFSl5ivSc4uJ19fmABfitMpZfju+ j8RTwUC34k7IumBzc0BRnxlYGFiGN5rQfnUXYeQECogE2IAZx89zr6GkGV0blkom VQXb7OBVOpFr0y25Q3fntujMbA8bRHPjBMyPxNybXpJz/Ai/nU17Npn9WHq1vvrq 3EjsdmpU7ea4zt9kHDpVJI58sGYO3So= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:12 2025 by rpki-client