$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa File: 5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa (raw, json) Hash identifier: VOUVJSZq/LQ/3IgvHQhGcCpRwv35R83eskeI6b29nuc= Subject key identifier: A5:D0:DF:ED:AA:A0:93:1E:C1:21:7D:EE:89:3D:AF:B6:3F:B8:30:10 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD7D13AAB03B4AD6BF989FD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.96.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:3a:ab:03:b4:ad:6b:f9:89:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=b5600832-537a-49d9-9a27-efba97b7851b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:32:ce:3d:96:b1:07:34:5f:5b:99:26:d7: 02:e9:83:8b:ff:b6:8a:7c:82:d9:ae:c8:f2:74:5c: b6:d9:69:dc:0e:70:65:1c:fb:4b:ad:54:25:a7:70: 40:c8:77:46:05:54:1f:5e:be:ca:8c:a9:fb:31:be: b7:fa:02:44:0a:53:e4:cb:42:fc:cb:f8:8d:62:0d: 9a:e6:d5:31:6c:06:31:78:51:cf:d5:e0:45:09:92: 14:d4:11:d8:36:56:7a:e9:80:e7:63:a8:52:2a:28: 65:10:a5:15:a5:d7:4e:d3:b4:8e:c6:1f:54:72:f2: b5:78:fb:6f:12:0a:7c:ed:75:5b:8a:2e:90:c4:70: 9f:ec:89:85:d5:31:37:2c:7d:6e:77:2c:f2:b6:ae: d0:72:6a:57:9b:14:9c:68:34:4f:35:20:30:b8:d3: ee:ce:75:7d:5a:c4:cc:bf:33:48:45:f5:ef:f6:16: e3:63:d4:b1:fb:29:df:81:d0:1d:65:e0:5f:a5:bb: 6a:bf:5b:4c:43:f9:7a:93:c0:7a:2f:0f:92:be:24: a2:e9:45:88:96:71:23:3c:5b:17:a6:af:a5:0d:ef: 97:fd:60:a9:44:e4:b7:6c:31:4b:b9:09:e5:34:9a: ad:12:a3:01:f8:f3:69:db:97:cb:3f:42:cb:c8:3f: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:DF:ED:AA:A0:93:1E:C1:21:7D:EE:89:3D:AF:B6:3F:B8:30:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:85:2c:91:50:cb:90:80:2a:de:09:72:c5:7e:7b:d6:19:79: d6:5e:27:64:db:ec:10:a6:6e:ae:06:e1:76:a5:df:91:80:f4: 24:ed:44:cb:8d:69:8f:18:d5:88:54:d5:93:1d:22:c9:a3:d6: 84:0c:9e:c1:47:1f:fd:11:32:6c:0f:d3:77:d0:27:73:0f:43: c1:62:dd:b7:1f:44:d3:e1:59:06:f0:52:cb:ef:ec:29:78:c1: d3:40:b8:e8:3f:8e:e8:7f:1d:5b:e7:d6:ab:07:fa:23:fe:c8: ea:39:16:9c:e1:ef:91:f4:e7:03:e7:76:5d:c1:ae:d3:dc:a9: a1:df:da:9f:3d:be:12:9b:cb:8c:64:0f:fa:76:be:cf:dd:f6: 7e:0d:69:21:a3:45:50:1e:84:0d:4b:53:31:42:b6:ab:83:c5: ae:47:2b:d2:a2:a9:d7:3c:14:34:5d:1c:5f:1d:85:ff:f0:44: 9f:68:dd:aa:45:71:bc:33:18:2d:5c:8b:40:78:e1:b9:38:e4: da:f9:93:d7:6a:6c:eb:d6:45:b4:8d:ea:08:d3:89:50:51:9a: 65:1e:66:73:df:87:e3:a5:64:a9:27:79:47:5a:3d:63:77:11: b3:4a:21:a9:91:9e:1b:dc:5b:13:78:2b:f8:b2:b8:cb:1e:6d: 39:1b:60:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TqrA7Sta/mJ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YjU2MDA4MzItNTM3YS00OWQ5LTlhMjctZWZiYTk3Yjc4NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEYyzj2WsQc0X1uZJtcC6YOL/7aKfILZrsjy dFy22WncDnBlHPtLrVQlp3BAyHdGBVQfXr7KjKn7Mb63+gJEClPky0L8y/iNYg2a 5tUxbAYxeFHP1eBFCZIU1BHYNlZ66YDnY6hSKihlEKUVpddO07SOxh9UcvK1ePtv Egp87XVbii6QxHCf7ImF1TE3LH1udyzytq7QcmpXmxScaDRPNSAwuNPuznV9WsTM vzNIRfXv9hbjY9Sx+ynfgdAdZeBfpbtqv1tMQ/l6k8B6Lw+SviSi6UWIlnEjPFsX pq+lDe+X/WCpROS3bDFLuQnlNJqtEqMB+PNp25fLP0LLyD9fVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXQ3+2qoJMewSF97ok9r7Y/uDAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQzOGUzNzQtMzUxYS0z MzEyLTljYjMtZDM3MzhjM2JkMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaFLJFQy5CAKt4JcsV+e9YZedZeJ2Tb7BCmbq4G4Xal35GA9CTtRMuN aY8Y1YhU1ZMdIsmj1oQMnsFHH/0RMmwP03fQJ3MPQ8Fi3bcfRNPhWQbwUsvv7Cl4 wdNAuOg/juh/HVvn1qsH+iP+yOo5Fpzh75H05wPndl3BrtPcqaHf2p89vhKby4xk D/p2vs/d9n4NaSGjRVAehA1LUzFCtquDxa5HK9Kiqdc8FDRdHF8dhf/wRJ9o3apF cbwzGC1ci0B44bk45Nr5k9dqbOvWRbSN6gjTiVBRmmUeZnPfh+OlZKkneUdaPWN3 EbNKIamRnhvcWxN4K/iyuMsebTkbYDc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:45 2025 by rpki-client