$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa File: de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa (raw, json) Hash identifier: 2sSEE8qNHryphdIFsnp38AhUNuiUfLvQ2S8ViVrB+5E= Subject key identifier: FF:A0:6A:6A:B5:50:11:63:B4:82:1A:6D:18:9F:87:CD:E9:91:AE:B3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3070F465BA9FABFC9440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:30:70:f4:65:ba:9f:ab:fc:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=69b82606-8b3e-4c5a-b3e2-30d12989b6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:87:10:f4:0d:93:f1:6b:f9:01:b3:28:e7: 41:0c:47:ff:14:96:4a:dc:d0:dd:ff:10:c1:f6:9e: 24:dd:ab:00:52:c8:22:35:88:0c:5f:28:18:64:55: 03:3a:92:c6:b7:c6:9e:e8:53:34:02:5a:5b:0b:5f: f4:1a:5b:13:7b:de:5b:26:02:39:1f:6a:fa:05:01: ca:d5:6c:a1:88:7c:76:16:d2:a7:7d:35:16:6b:de: 9e:4f:50:f0:4a:a8:ec:38:38:54:dc:88:81:ca:20: f4:2e:6d:50:a8:7f:8b:c2:06:ba:75:ca:56:12:33: 94:12:c7:72:a5:b9:62:27:67:d5:09:5e:73:97:14: 84:71:94:58:7a:5e:4b:f4:e3:e9:5c:80:42:5c:8e: 05:56:d2:d6:cf:d0:97:41:94:d0:1f:86:ed:45:e7: 5a:a0:b4:a4:62:aa:6a:e4:b2:7e:79:78:73:01:63: 7c:29:21:03:f2:56:cb:bb:2c:dd:01:0b:af:fb:3f: df:ab:7e:8e:cc:78:30:29:cf:07:7f:9a:b6:83:6d: 90:4f:c3:9a:43:89:55:11:79:e3:dd:b3:a7:f6:be: d6:8e:de:bb:09:88:cf:9f:80:40:7e:01:02:40:56: 8e:d8:91:d1:99:7a:09:5d:6e:ca:f9:74:f4:7b:da: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:6A:6A:B5:50:11:63:B4:82:1A:6D:18:9F:87:CD:E9:91:AE:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de9ef1b4-ac14-30c7-9be3-9c6ec9059c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:83:95:c7:46:74:95:6b:12:40:63:53:8e:08:2d:af:a0:2c: 08:cc:b7:00:ec:37:5e:ef:14:55:9b:fe:89:54:c9:e8:d7:77: 61:e6:03:a7:33:37:f7:d8:55:59:11:89:3c:94:96:84:34:ec: 79:25:d2:6d:01:be:d5:09:79:c9:8b:d1:bd:21:b2:87:d4:9c: 14:dd:93:7d:e9:53:74:67:79:47:c9:d4:f8:e5:49:0a:b2:c3: 14:d0:d9:c5:fb:f3:33:a5:96:17:a8:6b:a1:40:51:a8:66:57: 75:7b:61:7b:9d:db:7d:7e:48:4c:fc:ed:b8:3b:e5:0a:87:88: 38:aa:9c:53:39:14:a7:67:35:7f:54:4c:93:0f:c3:2c:5c:2c: fc:fe:f2:cf:c3:0f:f7:eb:b4:ab:fc:2c:b5:cc:98:24:c7:dd: 60:03:bd:3a:95:83:d4:10:4d:fa:8f:65:8e:e6:d1:6b:cb:a8: 64:66:cc:f3:72:f6:4f:6c:e0:9e:41:04:04:dd:be:01:d3:34: 95:c5:70:4b:f3:b3:10:50:f3:e9:f5:8f:c6:69:49:47:73:37: 03:e6:b6:53:fe:2b:89:c4:67:66:62:90:93:ac:d6:a9:4c:e7: c2:6c:9f:34:47:ea:f5:24:79:84:7d:34:42:e7:63:47:a3:36: fb:33:f7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jTBw9GW6n6v8lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjliODI2MDYtOGIzZS00YzVhLWIzZTItMzBkMTI5ODliNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTSHEPQNk/Fr+QGzKOdBDEf/FJZK3NDd/xDB 9p4k3asAUsgiNYgMXygYZFUDOpLGt8ae6FM0AlpbC1/0GlsTe95bJgI5H2r6BQHK 1WyhiHx2FtKnfTUWa96eT1DwSqjsODhU3IiByiD0Lm1QqH+Lwga6dcpWEjOUEsdy pbliJ2fVCV5zlxSEcZRYel5L9OPpXIBCXI4FVtLWz9CXQZTQH4btRedaoLSkYqpq 5LJ+eXhzAWN8KSED8lbLuyzdAQuv+z/fq36OzHgwKc8Hf5q2g22QT8OaQ4lVEXnj 3bOn9r7Wjt67CYjPn4BAfgECQFaO2JHRmXoJXW7K+XT0e9rWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+gamq1UBFjtIIabRifh83pka6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGU5ZWYxYjQtYWMxNC0z MGM3LTliZTMtOWM2ZWM5MDU5YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiDlcdGdJVrEkBjU44ILa+gLAjMtwDsN17vFFWb/olUyejXd2HmA6cz N/fYVVkRiTyUloQ07Hkl0m0BvtUJecmL0b0hsofUnBTdk33pU3RneUfJ1PjlSQqy wxTQ2cX78zOllheoa6FAUahmV3V7YXud231+SEz87bg75QqHiDiqnFM5FKdnNX9U TJMPwyxcLPz+8s/DD/frtKv8LLXMmCTH3WADvTqVg9QQTfqPZY7m0WvLqGRmzPNy 9k9s4J5BBATdvgHTNJXFcEvzsxBQ8+n1j8ZpSUdzNwPmtlP+K4nEZ2ZikJOs1qlM 58JsnzRH6vUkeYR9NELnY0ejNvsz9/I= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:52 2025 by rpki-client