$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fae30900-3e60-3567-bbba-9e26a7c7ccee.roa File: fae30900-3e60-3567-bbba-9e26a7c7ccee.roa (raw, json) Hash identifier: rfWcHa0I2Uo9R9TmbWK9eOtmBpqWEZ+JjUBT4aOqyWs= Subject key identifier: 1F:BC:24:20:D1:BE:95:2C:6D:0F:A4:BA:20:32:7D:79:16:4F:0E:2F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB88D3ED03A4042DF86C8B480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fae30900-3e60-3567-bbba-9e26a7c7ccee.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 72.96.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3e:d0:3a:40:42:df:86:c8:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=844a8190-45b8-4d1f-bbef-f8ac249af9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:e3:5d:55:6c:e6:df:56:d1:9d:e5:a3:90: ef:a6:d1:5c:90:12:3b:d8:6e:32:95:49:ea:c2:e8: 2b:04:9e:6a:1c:06:59:01:90:37:c1:8e:36:55:66: cd:98:cf:b0:7f:23:34:be:22:d6:c0:fb:24:bb:b7: 31:7c:4c:34:68:57:18:a5:28:08:9b:95:0b:32:84: 13:3b:e3:b4:f3:e4:cf:85:ce:86:9d:0b:14:0d:7e: 8d:fc:04:4d:21:20:ab:65:4c:bf:45:01:1d:ff:38: 2b:0e:cb:1e:fd:5a:c7:11:72:9e:71:d3:ba:9e:d6: 2c:50:db:d2:92:22:10:1c:9f:b3:bb:53:62:d8:60: 81:59:fc:d5:e8:05:9b:b9:23:bb:32:4b:ce:81:d7: 96:0c:71:4a:46:1d:28:d7:fb:fc:ef:ab:f0:bc:bb: 20:a8:66:cd:f3:93:4b:3d:7d:4f:bc:33:de:c3:2f: 5f:42:e0:8b:4b:ee:40:1f:30:97:7b:2e:c9:88:87: 85:ca:04:98:af:19:b1:e6:e2:53:3e:10:ea:cf:ab: 6f:f0:74:0e:99:d1:c8:f7:b9:b0:ba:8a:60:fc:96: 3b:4a:0d:80:5e:b4:c5:2e:b4:6d:4d:6c:69:06:7d: 72:55:2b:36:a2:96:37:da:58:44:98:11:6a:66:d5: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BC:24:20:D1:BE:95:2C:6D:0F:A4:BA:20:32:7D:79:16:4F:0E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fae30900-3e60-3567-bbba-9e26a7c7ccee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:63:1d:26:ac:36:9f:14:f9:aa:0b:8e:1d:54:c6:4f:bd:22: b8:1c:3b:07:01:af:87:ba:1a:09:4f:ba:c3:ac:26:14:1c:fb: 23:0d:a0:b9:20:52:53:0c:c1:65:b9:f6:e9:70:d2:be:ee:3f: 42:1e:5d:57:52:68:1b:24:78:81:59:ed:cb:b0:1f:ee:37:ae: 4b:86:99:88:13:0c:8f:94:79:87:52:c5:d6:06:98:64:9e:5d: a7:75:ee:d2:a6:ce:12:6b:52:df:5e:1b:5a:93:5a:20:fc:c0: 46:6e:17:ad:78:29:82:ba:93:54:bf:30:98:8e:48:a9:10:51: 89:8e:fb:27:2f:3d:c4:04:03:f6:ac:54:dc:f3:f8:69:eb:c3: e0:9f:f0:6b:bc:3f:be:1c:26:38:48:01:b6:74:76:07:39:b6: 1f:ea:11:e8:29:d7:6f:17:a7:cf:a0:cd:0c:05:98:b8:ab:40: 52:31:8a:4d:2b:c9:1a:bd:a3:97:a0:a5:56:b6:fc:aa:16:30: 3f:57:33:49:9c:4c:a0:2f:22:63:5d:b9:ad:2d:7b:d7:f8:54: 9a:fc:c8:51:f5:5c:6d:a9:8e:30:34:6e:2c:e4:e5:ef:8e:bc: 3b:a5:2c:2d:b1:87:f0:ff:61:c4:c2:e3:ca:6e:09:7e:97:37: 35:85:8a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT7QOkBC34bItIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODQ0YTgxOTAtNDViOC00ZDFmLWJiZWYtZjhhYzI0OWFmOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAienjXVVs5t9W0Z3lo5DvptFckBI72G4ylUnq wugrBJ5qHAZZAZA3wY42VWbNmM+wfyM0viLWwPsku7cxfEw0aFcYpSgIm5ULMoQT O+O08+TPhc6GnQsUDX6N/ARNISCrZUy/RQEd/zgrDsse/VrHEXKecdO6ntYsUNvS kiIQHJ+zu1Ni2GCBWfzV6AWbuSO7MkvOgdeWDHFKRh0o1/v876vwvLsgqGbN85NL PX1PvDPewy9fQuCLS+5AHzCXey7JiIeFygSYrxmx5uJTPhDqz6tv8HQOmdHI97mw uopg/JY7Sg2AXrTFLrRtTWxpBn1yVSs2opY32lhEmBFqZtXzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+8JCDRvpUsbQ+kuiAyfXkWTw4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmFlMzA5MDAtM2U2MC0z NTY3LWJiYmEtOWUyNmE3YzdjY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtjHSasNp8U+aoLjh1Uxk+9IrgcOwcBr4e6GglPusOsJhQc+yMNoLkg UlMMwWW59ulw0r7uP0IeXVdSaBskeIFZ7cuwH+43rkuGmYgTDI+UeYdSxdYGmGSe Xad17tKmzhJrUt9eG1qTWiD8wEZuF614KYK6k1S/MJiOSKkQUYmO+ycvPcQEA/as VNzz+Gnrw+Cf8Gu8P74cJjhIAbZ0dgc5th/qEegp128Xp8+gzQwFmLirQFIxik0r yRq9o5egpVa2/KoWMD9XM0mcTKAvImNdua0te9f4VJr8yFH1XG2pjjA0bizk5e+O vDulLC2xh/D/YcTC48puCX6XNzWFinE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:29 2025 by rpki-client