$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8ecdf10-1072-3cb2-be91-933c044e254e.roa File: b8ecdf10-1072-3cb2-be91-933c044e254e.roa (raw, json) Hash identifier: RIu6lJBnWnKN6sDqqKpZ0JKhIm2+lPnBDASbHb1fSXs= Subject key identifier: 90:D3:FF:62:0B:FC:41:7C:3A:BF:B0:68:95:56:5E:C3:44:81:1D:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D42D15369981F1DE6FD40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8ecdf10-1072-3cb2-be91-933c044e254e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.97.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:42:d1:53:69:98:1f:1d:e6:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a3a0b86f-386d-404e-9b18-d20fa3a34cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:b2:ef:13:f4:ba:0f:e6:f7:4c:e1:b4:d5: ec:79:69:df:e7:a1:5c:0d:b9:e1:ab:5a:b0:81:ed: 81:f5:90:38:81:e0:ed:67:8a:cd:96:0e:6a:59:5f: ed:08:1a:49:bd:d8:39:1e:32:23:c7:e9:21:f9:26: 97:e7:c9:e3:95:c8:fa:e1:41:db:7d:4d:e6:23:70: d8:36:3c:d9:45:1e:d8:ec:7a:7a:3f:c8:8b:9c:b5: 10:4d:83:c6:df:ea:c6:8c:a3:70:6b:ef:12:f5:78: 71:2f:ad:7a:08:0b:74:41:31:e5:76:df:8d:5e:e6: ab:84:ca:d9:69:67:39:41:43:80:ea:4b:48:84:4c: 15:0d:be:4f:6f:4d:e7:8d:5f:c0:d8:d6:0a:12:ec: de:75:f4:19:84:6c:f6:a4:77:0f:7b:e6:be:1e:5f: e6:8d:a9:4f:b2:f0:4a:5b:44:31:97:1e:a5:61:34: 0c:df:6a:50:ce:fc:98:81:cb:bd:c8:12:c2:09:11: 09:e0:41:c1:43:11:46:2b:25:45:f1:b8:75:d9:f0: f0:f0:1c:62:ae:34:48:97:99:2b:ec:ad:bf:cd:c8: 53:68:55:45:db:a1:b6:49:a9:a3:58:4b:20:96:96: 4e:5b:4d:b2:64:48:28:2c:5d:5d:42:28:72:31:8a: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D3:FF:62:0B:FC:41:7C:3A:BF:B0:68:95:56:5E:C3:44:81:1D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8ecdf10-1072-3cb2-be91-933c044e254e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:08:ab:e5:d1:bc:c3:d3:41:e0:b4:a5:7a:a9:f5:3c:89:ef: 31:58:f6:52:51:da:a4:f0:77:e4:2e:4b:e4:89:4a:91:79:a7: 6d:66:0b:a4:61:4a:ac:fb:37:05:bc:90:bf:66:43:3f:87:71: 1a:b8:86:d2:b9:bd:cf:15:87:0e:4f:87:97:d1:1d:13:20:11: 8d:f1:a2:d5:81:30:a5:d7:de:6a:01:2a:c8:ce:20:d3:24:df: 75:5e:87:50:2f:7e:d4:fb:d9:c4:45:33:88:8e:12:a6:8a:36: 7f:98:02:e8:46:b8:e2:22:46:af:5e:9e:61:ef:54:f6:bc:e8: fb:b4:bb:57:1a:af:af:44:f6:65:1c:05:54:b6:6c:ad:1b:75: 43:31:d6:e8:5e:b9:09:90:01:09:2d:71:86:78:55:c4:40:94: 14:03:50:d1:00:89:13:7d:3d:50:73:d1:13:83:0f:4e:1d:30: fa:3c:cc:3c:ef:60:e9:12:86:1f:7f:61:05:55:14:6d:53:04: f7:b4:08:ae:54:10:02:23:dd:3d:ec:9a:d3:8c:58:d2:52:c9: 67:56:e2:db:57:0c:4d:85:7f:f0:a3:5d:e6:ac:3f:d9:2d:e4: 88:5a:e3:6f:93:df:79:cc:ba:48:a5:8b:40:7f:30:b7:b1:59: 10:f3:e8:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jULRU2mYHx3m/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTNhMGI4NmYtMzg2ZC00MDRlLTliMTgtZDIwZmEzYTM0Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV2y7xP0ug/m90zhtNXseWnf56FcDbnhq1qw ge2B9ZA4geDtZ4rNlg5qWV/tCBpJvdg5HjIjx+kh+SaX58njlcj64UHbfU3mI3DY NjzZRR7Y7Hp6P8iLnLUQTYPG3+rGjKNwa+8S9XhxL616CAt0QTHldt+NXuarhMrZ aWc5QUOA6ktIhEwVDb5Pb03njV/A2NYKEuzedfQZhGz2pHcPe+a+Hl/mjalPsvBK W0Qxlx6lYTQM32pQzvyYgcu9yBLCCREJ4EHBQxFGKyVF8bh12fDw8BxirjRIl5kr 7K2/zchTaFVF26G2SamjWEsglpZOW02yZEgoLF1dQihyMYrm/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDT/2IL/EF8Or+waJVWXsNEgR2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjhlY2RmMTAtMTA3Mi0z Y2IyLWJlOTEtOTMzYzA0NGUyNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEIq+XRvMPTQeC0pXqp9TyJ7zFY9lJR2qTwd+QuS+SJSpF5p21mC6Rh Sqz7NwW8kL9mQz+HcRq4htK5vc8Vhw5Ph5fRHRMgEY3xotWBMKXX3moBKsjOINMk 33Veh1AvftT72cRFM4iOEqaKNn+YAuhGuOIiRq9enmHvVPa86Pu0u1car69E9mUc BVS2bK0bdUMx1uheuQmQAQktcYZ4VcRAlBQDUNEAiRN9PVBz0RODD04dMPo8zDzv YOkShh9/YQVVFG1TBPe0CK5UEAIj3T3smtOMWNJSyWdW4ttXDE2Ff/CjXeasP9kt 5Iha42+T33nMukili0B/MLexWRDz6Pw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:03 2025 by rpki-client