$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c69372c1-e785-39f1-a692-392662651d5d.roa File: c69372c1-e785-39f1-a692-392662651d5d.roa (raw, json) Hash identifier: 0Bet2Z3uxaOMkHQUrY3oLMnNpu1Pa5R7Y9wicn6Fzis= Subject key identifier: 4A:46:66:13:89:AC:B3:B4:BB:E1:15:9E:40:DB:AE:43:7B:C9:AE:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3F20FB7C3249221F8F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c69372c1-e785-39f1-a692-392662651d5d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:20:fb:7c:32:49:22:1f:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4dd89206-c5d5-43d0-a63a-69f7936a9095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:91:c1:bb:36:a8:64:70:7a:d1:5b:d6:55:88: be:59:24:ed:3c:07:dd:8e:5f:34:b6:51:4d:2c:59: df:25:c9:c5:08:49:fc:51:f0:cc:81:cc:87:65:13: eb:85:70:e2:18:5e:ae:58:92:1a:f1:c9:b2:0c:49: b4:0a:e0:76:8a:9a:f4:85:88:6b:1d:2c:fa:f5:23: 51:37:0c:a5:f5:b3:87:bd:62:57:13:60:c8:b2:65: c2:99:04:f5:c7:ca:7e:97:ef:ac:d6:df:1c:f4:51: ef:64:d2:26:75:5b:aa:c3:ed:70:95:01:17:b4:2e: 02:52:4e:21:e7:01:38:c1:ab:49:e4:e7:3d:54:a7: 99:f0:e2:c1:3c:e8:e4:7f:a3:ea:c7:9f:fa:2b:bb: d2:9e:a0:eb:be:3c:b6:b3:78:3d:db:2d:79:d3:fa: 0a:8e:a5:75:c0:5f:c4:db:37:7c:0e:f1:03:46:30: aa:99:51:5c:34:04:4b:5a:c1:58:32:3a:73:88:e8: 86:29:9e:e1:3d:c0:30:af:de:99:bd:bb:28:e3:56: 1f:fa:f3:d1:9e:65:b7:bd:ae:61:b2:cd:72:e7:ce: 76:18:67:27:37:4d:d7:c8:35:9a:4b:40:3c:66:0c: a8:12:4d:de:11:b0:35:01:bb:d9:aa:a0:3b:d5:60: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:46:66:13:89:AC:B3:B4:BB:E1:15:9E:40:DB:AE:43:7B:C9:AE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c69372c1-e785-39f1-a692-392662651d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:77:2e:a9:c0:2f:b2:7a:09:10:e9:7d:73:32:b6:65:af:9c: 3b:87:7a:dc:b3:88:1f:01:0d:d1:5e:9e:de:a7:37:90:8f:91: e6:2d:ca:01:08:77:3a:39:b1:4f:73:c1:62:70:1a:89:cd:55: 27:8f:b7:42:70:d9:b7:e3:6d:fd:c7:f1:d9:8f:91:56:de:ec: a2:a0:be:3d:5b:9c:64:ad:af:bf:7a:0d:ce:26:7c:99:bd:48: cb:4d:cf:33:b4:63:ae:b9:39:a0:d1:22:23:d7:0d:ee:89:d9: 9e:20:bd:dd:94:a4:9b:1d:83:2c:90:6e:b4:ae:3d:c6:24:2b: 4a:6d:be:63:79:2e:e8:45:32:7c:9f:08:63:1c:5a:ee:5d:dc: 86:c0:31:98:9d:c0:0d:b1:a8:cd:10:a9:04:ff:85:60:f8:bd: c4:97:fb:fc:30:3d:04:19:ba:1b:03:11:11:97:89:9b:58:05: 3e:d2:67:03:73:3f:b4:a1:5c:d2:49:a0:d8:12:1c:5b:88:b0: 0f:41:c2:1c:80:eb:20:2c:9c:9e:e4:36:7b:07:e2:93:ae:21: d4:d6:c3:99:e1:4c:31:75:bd:8a:28:f0:32:af:66:09:e8:05: b6:b1:56:5f:70:b5:ac:2e:2b:c6:f7:e0:41:a2:74:0f:a0:ff: 91:cc:8b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT8g+3wySSIfj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGRkODkyMDYtYzVkNS00M2QwLWE2M2EtNjlmNzkzNmE5MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZHBuzaoZHB60VvWVYi+WSTtPAfdjl80tlFN LFnfJcnFCEn8UfDMgcyHZRPrhXDiGF6uWJIa8cmyDEm0CuB2ipr0hYhrHSz69SNR Nwyl9bOHvWJXE2DIsmXCmQT1x8p+l++s1t8c9FHvZNImdVuqw+1wlQEXtC4CUk4h 5wE4watJ5Oc9VKeZ8OLBPOjkf6Pqx5/6K7vSnqDrvjy2s3g92y150/oKjqV1wF/E 2zd8DvEDRjCqmVFcNARLWsFYMjpziOiGKZ7hPcAwr96Zvbso41Yf+vPRnmW3va5h ss1y5852GGcnN03XyDWaS0A8ZgyoEk3eEbA1AbvZqqA71WAHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpGZhOJrLO0u+EVnkDbrkN7ya4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzY5MzcyYzEtZTc4NS0z OWYxLWE2OTItMzkyNjYyNjUxZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI93LqnAL7J6CRDpfXMytmWvnDuHetyziB8BDdFent6nN5CPkeYtygEI dzo5sU9zwWJwGonNVSePt0Jw2bfjbf3H8dmPkVbe7KKgvj1bnGStr796Dc4mfJm9 SMtNzzO0Y665OaDRIiPXDe6J2Z4gvd2UpJsdgyyQbrSuPcYkK0ptvmN5LuhFMnyf CGMcWu5d3IbAMZidwA2xqM0QqQT/hWD4vcSX+/wwPQQZuhsDERGXiZtYBT7SZwNz P7ShXNJJoNgSHFuIsA9BwhyA6yAsnJ7kNnsH4pOuIdTWw5nhTDF1vYoo8DKvZgno BbaxVl9wtawuK8b34EGidA+g/5HMi84= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:46 2025 by rpki-client