$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1ae596a-791b-3171-84b7-011d7c7daaf3.roa File: e1ae596a-791b-3171-84b7-011d7c7daaf3.roa (raw, json) Hash identifier: SSlS7tjP5wGz81Q2K7xNRlU4YQYGq1q2HGRJSLczrCo= Subject key identifier: E7:91:D1:1D:14:7C:AC:60:26:CB:C9:97:C3:BB:20:54:77:A3:DD:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD0F92C65301309E275970 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1ae596a-791b-3171-84b7-011d7c7daaf3.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 96.228.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0f:92:c6:53:01:30:9e:27:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=28db4474-4d51-4340-94d1-c0afa4de7d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:a0:f5:2e:fc:ef:e1:d6:46:30:01:75:71: 1c:94:34:1a:8f:d3:a7:ef:89:94:05:fb:89:27:b1: 6c:37:e6:54:37:3d:41:c0:0e:31:e7:d0:01:7e:c6: 35:9b:57:a9:58:b1:37:bd:f3:ad:50:c3:f3:a2:1d: 06:fe:93:6e:a8:9a:4f:a8:48:2d:ac:47:54:0c:bf: af:5b:69:47:b0:9c:f8:07:48:a0:e1:e2:21:c6:c8: 3c:5a:f9:7c:8a:cc:d1:83:5e:a7:bb:47:48:b6:f7: 15:90:8d:bf:ed:27:72:35:ad:e6:71:37:c6:5f:ef: 85:09:cf:a0:2d:1f:67:72:a1:38:67:dc:75:41:9b: 8e:9a:2f:0e:59:eb:d1:d1:00:e6:ef:cb:bd:39:71: 4f:34:11:c7:db:a9:37:e6:28:b2:ce:e8:1f:86:ac: 67:6a:ed:db:c3:bd:eb:78:f3:9e:d5:1c:72:41:21: 38:e8:e4:fc:5f:e4:4d:08:f8:10:b9:fc:74:4e:92: 21:81:28:65:6b:b3:bc:df:44:71:68:83:e8:10:55: f4:52:13:81:fe:49:4f:5a:41:3f:39:8a:94:98:13: 05:31:28:e0:a0:0b:01:3f:b2:e8:56:d6:a3:d7:1d: 6e:ce:9b:6e:76:ac:28:55:7f:9e:44:0d:36:37:21: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:D1:1D:14:7C:AC:60:26:CB:C9:97:C3:BB:20:54:77:A3:DD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1ae596a-791b-3171-84b7-011d7c7daaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.228.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b8:b7:3d:41:04:02:ff:49:fd:15:4d:93:27:e4:3e:d2:75: 38:1e:23:13:f8:f5:cc:89:2e:b9:ed:83:5d:76:b5:d5:3a:c5: 1e:05:5b:9d:a0:4d:5d:41:b8:a3:f3:71:a2:a4:e9:af:2f:2f: 40:df:b3:d0:f9:1c:5f:71:fd:b7:81:77:57:e3:f7:e0:c8:27: ec:67:f1:73:81:63:17:c8:03:4a:8f:0d:23:9f:2e:e9:73:9a: 83:10:4b:65:e8:31:f1:5d:c5:37:6b:cc:f4:1f:c3:01:23:d6: 20:2d:b2:f6:70:09:b0:b1:db:ec:a8:8c:d8:ed:c9:88:8d:83: 3b:3e:dc:7a:08:5e:c7:32:98:95:99:b1:2a:a3:1d:5b:ec:26: 03:37:8c:b2:46:13:85:6d:bf:6e:8c:62:e8:a0:db:d5:09:4c: 37:5d:74:ac:88:3b:da:09:f9:66:b0:7a:15:87:ce:99:83:c3: dd:51:cc:49:c2:78:14:26:da:53:1d:2d:0e:4b:f0:91:6a:0f: 32:9b:ce:ea:4c:a4:d5:39:69:b2:78:dd:75:fb:8c:aa:a2:b0: db:59:a9:47:a4:a9:8e:10:ab:6a:d7:cc:03:5c:fa:bc:e7:82: b7:c2:a3:03:e0:43:b5:2c:a0:7a:8b:8b:01:d9:4f:41:81:b7: f7:4b:03:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Q+SxlMBMJ4nWXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjhkYjQ0NzQtNGQ1MS00MzQwLTk0ZDEtYzBhZmE0ZGU3ZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9+g9S787+HWRjABdXEclDQaj9On74mUBfuJ J7FsN+ZUNz1BwA4x59ABfsY1m1epWLE3vfOtUMPzoh0G/pNuqJpPqEgtrEdUDL+v W2lHsJz4B0ig4eIhxsg8Wvl8iszRg16nu0dItvcVkI2/7SdyNa3mcTfGX++FCc+g LR9ncqE4Z9x1QZuOmi8OWevR0QDm78u9OXFPNBHH26k35iiyzugfhqxnau3bw73r ePOe1RxyQSE46OT8X+RNCPgQufx0TpIhgShla7O830RxaIPoEFX0UhOB/klPWkE/ OYqUmBMFMSjgoAsBP7LoVtaj1x1uzptudqwoVX+eRA02NyG32wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeR0R0UfKxgJsvJl8O7IFR3o93bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTFhZTU5NmEtNzkxYi0z MTcxLTg0YjctMDExZDdjN2RhYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYORQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC4tz1BBAL/Sf0VTZMn5D7SdTgeIxP49cyJLrntg112tdU6xR4FW52g TV1BuKPzcaKk6a8vL0Dfs9D5HF9x/beBd1fj9+DIJ+xn8XOBYxfIA0qPDSOfLulz moMQS2XoMfFdxTdrzPQfwwEj1iAtsvZwCbCx2+yojNjtyYiNgzs+3HoIXscymJWZ sSqjHVvsJgM3jLJGE4Vtv26MYuig29UJTDdddKyIO9oJ+WawehWHzpmDw91RzEnC eBQm2lMdLQ5L8JFqDzKbzupMpNU5abJ43XX7jKqisNtZqUekqY4Qq2rXzANc+rzn grfCowPgQ7UsoHqLiwHZT0GBt/dLA1Y= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:46 2025 by rpki-client