$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa File: c37ad8f7-65b2-38e4-920e-a373f524040d.roa (raw, json) Hash identifier: H2M/8l1QjFlXShGb67027tsYGQe0nhcy0C85aG/0VEQ= Subject key identifier: CD:A7:96:67:E5:40:9F:74:B2:CB:43:03:EB:D5:6B:91:84:B6:F4:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3F4E88DB9D3CF71A5000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:4e:88:db:9d:3c:f7:1a:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=3c916ec3-0bc2-45ce-b680-cb8b29334219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:c9:cd:e1:a5:b8:41:8d:aa:25:b4:ea:96: 4a:d9:2c:d8:8c:de:53:4d:16:a0:b2:e4:12:e3:b2: d1:db:5f:ed:65:28:c3:88:3e:8c:b8:a6:31:ae:13: 11:b0:fc:cf:53:98:9e:71:26:cb:2f:37:34:e4:b6: 0b:aa:34:b5:95:c3:99:7a:4d:a9:25:8a:14:84:b3: 91:80:8e:a3:7b:44:e5:c1:d1:a5:0a:f0:56:0e:04: 37:16:1f:cd:8e:73:c6:0c:fc:d3:d5:e6:9b:8d:4c: 81:be:9a:af:b3:bc:b8:01:c7:9d:8b:66:dc:42:e5: 07:2b:bc:fc:56:d7:d1:4c:42:8c:dc:84:08:6c:23: 8d:a6:24:4c:03:3c:16:1f:37:78:91:11:99:ff:09: 70:ba:5f:d7:b9:18:ed:6a:1a:2d:65:ac:1a:b8:95: 49:dc:0d:c3:c6:67:e5:a6:ce:3a:41:1a:e7:86:82: 52:3a:6c:5b:22:08:60:6f:50:20:80:0a:f1:eb:cc: bc:15:96:dc:9c:2f:7e:4d:2d:58:42:64:15:52:26: eb:f6:8d:15:88:3e:37:3a:fa:79:3d:85:09:38:74: 2d:ff:2e:71:fa:d0:cd:7a:50:b8:b7:c4:5e:ce:5c: a2:b0:d5:d9:60:43:9d:93:d6:4e:b4:e0:fa:3d:4a: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A7:96:67:E5:40:9F:74:B2:CB:43:03:EB:D5:6B:91:84:B6:F4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4e:ae:b1:b6:fa:7b:8f:bc:f3:5b:be:d7:63:ce:c7:70:64: 18:ad:54:24:c7:91:43:7a:ce:dd:45:13:35:e3:b1:2b:e6:59: 4b:5d:e4:2e:c7:3c:e1:bf:9e:bf:31:9a:72:37:f6:ee:a0:65: 02:9d:ca:98:d9:8c:db:aa:38:0b:8d:74:a7:a0:97:9f:73:5c: 21:61:12:67:36:df:8a:ea:53:fe:ec:02:e3:63:b8:42:ba:8b: 3a:76:ba:e0:24:c2:ec:5e:11:b9:89:ef:96:00:11:42:61:98: ae:f9:91:fe:9b:c5:38:8a:18:bf:e6:15:85:07:ca:27:ba:7d: b1:a0:90:a6:c1:0b:14:02:c9:b5:39:c6:8d:83:33:6f:1e:33: 63:55:8d:ba:a6:91:9d:12:12:b1:5e:f1:67:e7:db:89:06:f2: bc:86:51:00:93:37:d6:9d:e8:b0:c8:4d:60:8e:4e:4f:75:9d: ca:51:2c:09:74:ee:af:8f:29:60:47:eb:d5:98:57:88:8f:37: d1:95:dc:63:66:e8:aa:c4:5e:3f:79:b0:09:49:24:6c:b7:3a: dc:1a:20:47:f8:a6:77:e0:16:96:e1:1e:20:4f:70:fe:91:c1: 57:00:a7:2b:67:77:77:8b:17:90:de:29:98:43:89:c3:2a:86: 95:a3:94:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT9OiNudPPcaUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2M5MTZlYzMtMGJjMi00NWNlLWI2ODAtY2I4YjI5MzM0MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhHJzeGluEGNqiW06pZK2SzYjN5TTRagsuQS 47LR21/tZSjDiD6MuKYxrhMRsPzPU5iecSbLLzc05LYLqjS1lcOZek2pJYoUhLOR gI6je0TlwdGlCvBWDgQ3Fh/NjnPGDPzT1eabjUyBvpqvs7y4Acedi2bcQuUHK7z8 VtfRTEKM3IQIbCONpiRMAzwWHzd4kRGZ/wlwul/XuRjtahotZawauJVJ3A3Dxmfl ps46QRrnhoJSOmxbIghgb1AggArx68y8FZbcnC9+TS1YQmQVUibr9o0ViD43Ovp5 PYUJOHQt/y5x+tDNelC4t8RezlyisNXZYEOdk9ZOtOD6PUrHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2nlmflQJ90sstDA+vVa5GEtvSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM3YWQ4ZjctNjViMi0z OGU0LTkyMGUtYTM3M2Y1MjQwNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACROrrG2+nuPvPNbvtdjzsdwZBitVCTHkUN6zt1FEzXjsSvmWUtd5C7H POG/nr8xmnI39u6gZQKdypjZjNuqOAuNdKegl59zXCFhEmc234rqU/7sAuNjuEK6 izp2uuAkwuxeEbmJ75YAEUJhmK75kf6bxTiKGL/mFYUHyie6fbGgkKbBCxQCybU5 xo2DM28eM2NVjbqmkZ0SErFe8Wfn24kG8ryGUQCTN9ad6LDITWCOTk91ncpRLAl0 7q+PKWBH69WYV4iPN9GV3GNm6KrEXj95sAlJJGy3OtwaIEf4pnfgFpbhHiBPcP6R wVcApytnd3eLF5DeKZhDicMqhpWjlBA= -----END CERTIFICATE-----Generated at Wed Nov 5 18:04:58 2025 by rpki-client