$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa File: c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa (raw, json) Hash identifier: P+GHKKm/HB0q5koeVaTyPOSvEAna0TvGqaMK3UiAh7M= Subject key identifier: 99:21:B2:0B:E0:EE:F7:72:13:7E:DE:84:6C:DB:B7:EA:A6:D5:FB:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80249B2DC867896A93980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 96.240.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:02:49:b2:dc:86:78:96:a9:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=33ba5c08-718a-4bba-8b67-aed9c8263c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:72:d2:00:09:1f:47:d8:b1:fe:32:9e:a1: 6b:8f:fe:f9:ea:82:6d:a7:81:64:33:a6:73:e7:61: 20:39:63:b5:f3:f5:b6:23:02:b0:a3:97:08:3d:e4: 3a:e8:13:49:c8:a0:ff:e9:42:e5:01:5c:6a:16:4c: ad:d1:54:c6:2a:62:ab:f8:09:7e:74:4e:4a:52:52: d5:03:b1:a5:08:31:18:16:2f:1c:67:a0:90:ac:59: ae:01:5f:0a:ce:dc:7a:f1:f8:87:32:da:e0:e8:56: c4:c7:c4:6a:ee:34:44:eb:33:69:d0:3d:97:78:59: b1:e2:d7:ed:e4:4a:a8:bb:38:24:76:cc:42:ea:80: f1:25:e1:11:c3:c1:29:26:d3:30:0b:c7:bf:6a:41: 1b:3a:d2:f4:f5:17:88:3c:f0:f5:a6:13:c8:1e:8c: e6:ce:f5:7a:8a:a3:4f:52:4b:dd:55:2b:81:91:bc: eb:98:63:6f:56:ea:be:ed:52:10:fe:45:90:1b:93: 67:2b:1c:44:b8:7e:b4:62:30:a8:22:5c:31:25:9b: 6e:09:46:be:66:4a:c6:17:d5:e9:c9:d2:5f:15:42: c4:cc:48:3c:d7:2a:ef:0a:da:f4:ae:34:e5:80:1d: 2b:cd:af:b4:5e:ee:e0:a3:71:c9:16:60:a7:95:b3: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:21:B2:0B:E0:EE:F7:72:13:7E:DE:84:6C:DB:B7:EA:A6:D5:FB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c8:38:df:f9:4b:69:f2:5e:93:d3:e9:85:db:44:8a:3a:ae: 26:2c:45:ea:2d:20:78:62:8e:c3:58:ed:0c:7b:17:6f:1e:f1: 6a:76:eb:50:1a:fb:40:60:84:c6:d3:97:38:80:65:37:a6:b2: 3d:04:50:49:5f:2e:53:04:fc:f8:fb:1f:60:5d:67:67:24:d2: 99:0d:2f:97:9c:80:3c:dc:04:09:ca:c9:56:5e:d1:65:8c:4d: 21:3a:5c:3b:78:91:a4:df:4e:b7:a4:c3:f8:b5:4b:e3:0c:aa: 81:af:39:08:0a:9e:45:f1:02:4f:24:df:7b:05:b8:f7:31:ac: eb:90:e4:10:37:ed:31:7a:aa:ca:61:33:76:9e:12:52:44:81: 02:c7:62:e3:45:08:5d:62:50:92:70:10:b1:11:9c:6f:b5:44: fe:72:2f:1d:69:d8:1e:ab:14:2a:d0:80:3c:b1:e6:82:bb:ff: a5:e9:17:cd:af:5e:05:08:e6:e3:3f:16:bb:14:12:f0:07:21: 02:de:40:ab:0e:18:09:8d:a4:05:35:a5:17:81:a7:2f:d0:e9: bd:05:7b:0c:8b:cb:b6:cb:04:4a:ed:4c:a1:23:a4:f0:bb:8a: 8e:0d:1f:7b:74:e7:d4:6e:12:98:cf:d3:27:06:94:c7:b8:30: 9a:84:a6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AJJstyGeJapOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzNiYTVjMDgtNzE4YS00YmJhLThiNjctYWVkOWM4MjYzYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvdy0gAJH0fYsf4ynqFrj/756oJtp4FkM6Zz 52EgOWO18/W2IwKwo5cIPeQ66BNJyKD/6ULlAVxqFkyt0VTGKmKr+Al+dE5KUlLV A7GlCDEYFi8cZ6CQrFmuAV8Kztx68fiHMtrg6FbEx8Rq7jRE6zNp0D2XeFmx4tft 5EqouzgkdsxC6oDxJeERw8EpJtMwC8e/akEbOtL09ReIPPD1phPIHozmzvV6iqNP UkvdVSuBkbzrmGNvVuq+7VIQ/kWQG5NnKxxEuH60YjCoIlwxJZtuCUa+ZkrGF9Xp ydJfFULEzEg81yrvCtr0rjTlgB0rza+0Xu7go3HJFmCnlbMs/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkhsgvg7vdyE37ehGzbt+qm1fsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhmMDZjMTItMmJlNy0z ZTg5LTkxYmItMzg1MGIyYWMwMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbION/5S2nyXpPT6YXbRIo6riYsReotIHhijsNY7Qx7F28e8Wp261Aa +0BghMbTlziAZTemsj0EUElfLlME/Pj7H2BdZ2ck0pkNL5ecgDzcBAnKyVZe0WWM TSE6XDt4kaTfTrekw/i1S+MMqoGvOQgKnkXxAk8k33sFuPcxrOuQ5BA37TF6qsph M3aeElJEgQLHYuNFCF1iUJJwELERnG+1RP5yLx1p2B6rFCrQgDyx5oK7/6XpF82v XgUI5uM/FrsUEvAHIQLeQKsOGAmNpAU1pReBpy/Q6b0FewyLy7bLBErtTKEjpPC7 io4NH3t059RuEpjP0ycGlMe4MJqEpqo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:47:10 2025 by rpki-client