$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de0ae164-e3d5-364e-964a-19a724ad7e8e.roa File: de0ae164-e3d5-364e-964a-19a724ad7e8e.roa (raw, json) Hash identifier: z3AbqOTUQZG5sb9qxO8ustSNVNTQdCkHnh83lN3PHOo= Subject key identifier: 40:FE:40:36:CA:20:5D:0A:A3:0B:59:72:FC:20:2D:5D:57:7B:63:77 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3FEAA7832B734964FD80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de0ae164-e3d5-364e-964a-19a724ad7e8e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3f:ea:a7:83:2b:73:49:64:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=99c7778c-7b54-4947-9be9-9f56439fac96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:57:04:67:10:e7:ca:26:a6:18:ad:dd:c3: 55:ec:f1:35:23:ef:b1:94:e6:d1:67:c6:29:21:f1: f0:6c:d7:8f:08:a1:0b:07:60:a8:8a:35:6f:bc:5f: 77:2c:d5:3d:24:2f:f0:02:ee:dd:e9:db:55:89:26: 54:70:70:2c:89:95:6d:76:5c:8d:2d:92:fa:d4:c6: b2:f0:bb:eb:9d:88:4b:f0:1a:fd:26:31:01:b0:30: ce:07:97:b0:e2:40:8d:ec:e6:54:9c:8c:09:39:c9: 2c:17:e2:33:69:80:25:bd:91:b8:a1:b6:fc:8d:92: de:13:9b:3a:4b:e3:34:39:d3:dd:f2:11:f7:f1:69: e8:bf:ad:38:c2:c4:1f:14:bd:7b:d2:27:66:5e:c4: 68:69:6c:de:fb:f2:f0:04:8c:50:2a:de:7c:37:95: bd:fd:53:d8:42:bf:ee:14:27:f3:22:62:24:49:de: 32:6a:8b:cf:90:99:94:c3:3e:4c:e3:dc:2d:86:66: b9:51:a8:fd:9e:83:8a:b8:cd:15:47:7d:00:ef:2d: 84:76:9e:e8:bd:ca:8e:f0:7c:67:32:d9:44:be:c7: 72:33:1c:f6:b9:1e:ce:ff:70:c6:59:34:fb:d9:5f: f7:f8:76:78:7e:ce:8a:34:da:f4:81:30:97:3d:a6: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FE:40:36:CA:20:5D:0A:A3:0B:59:72:FC:20:2D:5D:57:7B:63:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de0ae164-e3d5-364e-964a-19a724ad7e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:90:23:a1:79:f3:29:5f:c3:81:b8:f4:07:4b:b8:45:89:be: 0b:b0:45:42:0a:80:13:1a:cf:b0:b2:fd:bf:3f:aa:ca:02:be: e7:04:0e:06:ce:51:82:76:f1:53:a1:6c:a0:c8:dd:f6:21:38: b7:8f:6b:3b:c0:75:72:0e:d8:43:d6:ce:1d:c5:65:86:eb:05: cf:d7:f2:15:3e:04:36:a5:67:09:06:f4:7d:19:9b:c8:2a:70: 0b:80:16:42:76:f8:92:20:83:ad:a8:a2:78:50:a2:05:50:74: 46:53:6b:ac:15:f7:b1:d1:43:77:19:3a:46:67:ce:f4:d6:95: 30:d6:60:cc:46:80:ae:95:ff:21:30:69:06:45:9f:37:45:13: 27:72:c3:f8:d6:31:d1:a0:c9:3e:1e:7d:ff:5d:5b:13:b2:82: d9:7d:db:72:25:bf:c8:95:d8:17:a8:ce:b8:59:54:65:ac:11: 30:0d:9a:41:bd:9d:69:52:0e:36:37:32:4b:48:fe:d1:6a:89: 00:bb:d0:2b:9b:cf:04:fb:98:72:7d:12:96:f7:ce:6a:4c:1a: fe:f6:52:14:b5:ef:9f:c0:f0:b9:60:47:7a:e1:63:15:25:d7: 48:44:ea:ee:0d:95:2d:88:73:36:a5:dc:fa:88:00:90:6d:4a: 6a:02:fc:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT/qp4Mrc0lk/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTljNzc3OGMtN2I1NC00OTQ3LTliZTktOWY1NjQzOWZhYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza5XBGcQ58omphit3cNV7PE1I++xlObRZ8Yp IfHwbNePCKELB2CoijVvvF93LNU9JC/wAu7d6dtViSZUcHAsiZVtdlyNLZL61May 8LvrnYhL8Br9JjEBsDDOB5ew4kCN7OZUnIwJOcksF+IzaYAlvZG4obb8jZLeE5s6 S+M0OdPd8hH38Wnov604wsQfFL170idmXsRoaWze+/LwBIxQKt58N5W9/VPYQr/u FCfzImIkSd4yaovPkJmUwz5M49wthma5Uaj9noOKuM0VR30A7y2Edp7ovcqO8Hxn MtlEvsdyMxz2uR7O/3DGWTT72V/3+HZ4fs6KNNr0gTCXPaauJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED+QDbKIF0KowtZcvwgLV1Xe2N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGUwYWUxNjQtZTNkNS0z NjRlLTk2NGEtMTlhNzI0YWQ3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+QI6F58ylfw4G49AdLuEWJvguwRUIKgBMaz7Cy/b8/qsoCvucEDgbO UYJ28VOhbKDI3fYhOLePazvAdXIO2EPWzh3FZYbrBc/X8hU+BDalZwkG9H0Zm8gq cAuAFkJ2+JIgg62oonhQogVQdEZTa6wV97HRQ3cZOkZnzvTWlTDWYMxGgK6V/yEw aQZFnzdFEydyw/jWMdGgyT4eff9dWxOygtl923Ilv8iV2BeozrhZVGWsETANmkG9 nWlSDjY3MktI/tFqiQC70CubzwT7mHJ9Epb3zmpMGv72UhS175/A8LlgR3rhYxUl 10hE6u4NlS2Iczal3PqIAJBtSmoC/DQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:28 2025 by rpki-client