$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa File: bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa (raw, json) Hash identifier: MUI35RYH8XQmM4ZJ1KMoB6ctTtmb3WhwpMMuCbjCvS4= Subject key identifier: 57:C4:75:A0:39:23:48:4E:60:B3:0C:DC:68:2F:ED:A9:0C:DA:6D:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A68848CD431057202E5AF40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 72.95.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:84:8c:d4:31:05:72:02:e5:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=e2dc4fef-0bb5-419b-b728-8caa34cf7bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:2b:96:23:cd:91:04:89:7a:08:32:7e:e3: 24:24:40:be:28:f0:3f:f5:24:59:61:83:32:6d:5f: 26:30:96:fe:f0:e7:20:31:40:bc:73:64:b4:f9:6b: e8:7c:c4:0e:fd:76:f5:36:74:04:7a:02:61:77:9c: 05:ce:96:8a:52:42:3f:ba:11:c7:47:b2:15:57:8a: 40:d3:c0:ef:16:a2:46:8d:38:44:30:83:f4:6a:59: 3c:5f:a5:50:97:d2:df:eb:30:e1:1c:62:28:05:78: 08:ac:87:43:c7:ef:f4:89:16:42:30:70:4c:d6:9f: 05:c1:b9:09:3e:20:3a:f4:eb:47:90:cf:46:ef:10: 45:62:6c:b2:d6:cb:52:80:2f:83:a5:d0:23:23:08: e2:94:c9:29:3b:a3:ed:f2:f0:9a:37:b0:f7:ca:97: a7:88:04:35:02:6f:be:4a:e8:79:68:5d:74:f1:57: af:cc:15:36:c1:07:73:b6:5b:9a:f6:ab:cd:16:63: 58:a4:fe:65:09:81:86:99:99:e5:bd:19:a1:f3:9f: 76:9f:6b:d3:8c:ad:a9:29:66:00:26:ac:3b:9b:c3: b9:66:56:11:b4:c3:05:15:04:b1:f4:d8:26:82:a7: 57:03:1f:8c:a8:f6:b8:3b:ae:08:57:e3:de:5e:59: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:75:A0:39:23:48:4E:60:B3:0C:DC:68:2F:ED:A9:0C:DA:6D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb323c80-ce6e-31f5-a3b5-c4b3e7b18c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.95.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e2:ce:45:b5:45:d4:30:9d:42:d3:c5:46:37:84:59:19:25: a7:0b:07:85:e9:ea:25:9b:91:ba:93:36:35:e8:66:bc:4a:e5: 1e:43:07:78:16:99:a1:92:43:1a:1e:61:f9:98:13:52:0d:1d: 06:78:98:32:90:da:bd:5c:8e:60:92:59:a1:19:42:a4:5c:74: 17:eb:e7:eb:a1:4c:6d:b6:4d:83:15:46:f5:89:7f:26:2d:ea: 9d:ef:85:24:ac:9e:7e:6e:56:de:ee:3f:7b:97:85:2b:cc:24: 79:47:35:fa:6a:b6:0e:0c:8f:cb:e6:51:53:a5:17:46:e7:f4: 9f:ed:f6:b6:ab:0d:a0:50:8c:b1:dc:10:35:43:04:66:04:50: 93:cc:81:23:3a:66:d3:ec:cf:02:f6:55:b2:c2:9d:30:20:06: 02:13:80:9a:b0:62:7e:c5:03:40:57:3a:e7:a0:a6:e4:44:bc: f5:f3:c6:bf:c3:ed:5e:24:c2:80:4e:7e:32:51:91:c6:57:1b: 94:0e:61:a7:f7:aa:4a:cd:f9:0f:20:22:87:8d:2f:bf:a8:f7: 2e:f0:9a:fb:bb:67:b8:97:67:2a:a4:af:0b:49:44:99:ae:35: 05:85:1e:8b:b1:3b:0f:78:48:80:ae:bf:67:76:d7:6c:84:22: 62:1b:fd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaISM1DEFcgLlr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTJkYzRmZWYtMGJiNS00MTliLWI3MjgtOGNhYTM0Y2Y3YmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFArliPNkQSJeggyfuMkJEC+KPA/9SRZYYMy bV8mMJb+8OcgMUC8c2S0+WvofMQO/Xb1NnQEegJhd5wFzpaKUkI/uhHHR7IVV4pA 08DvFqJGjThEMIP0alk8X6VQl9Lf6zDhHGIoBXgIrIdDx+/0iRZCMHBM1p8FwbkJ PiA69OtHkM9G7xBFYmyy1stSgC+DpdAjIwjilMkpO6Pt8vCaN7D3ypeniAQ1Am++ Suh5aF108VevzBU2wQdztlua9qvNFmNYpP5lCYGGmZnlvRmh8592n2vTjK2pKWYA Jqw7m8O5ZlYRtMMFFQSx9NgmgqdXAx+MqPa4O64IV+PeXlm9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfEdaA5I0hOYLMM3Ggv7akM2m0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmIzMjNjODAtY2U2ZS0z MWY1LWEzYjUtYzRiM2U3YjE4YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSF8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLizkW1RdQwnULTxUY3hFkZJacLB4Xp6iWbkbqTNjXoZrxK5R5DB3gW maGSQxoeYfmYE1INHQZ4mDKQ2r1cjmCSWaEZQqRcdBfr5+uhTG22TYMVRvWJfyYt 6p3vhSSsnn5uVt7uP3uXhSvMJHlHNfpqtg4Mj8vmUVOlF0bn9J/t9rarDaBQjLHc EDVDBGYEUJPMgSM6ZtPszwL2VbLCnTAgBgITgJqwYn7FA0BXOuegpuREvPXzxr/D 7V4kwoBOfjJRkcZXG5QOYaf3qkrN+Q8gIoeNL7+o9y7wmvu7Z7iXZyqkrwtJRJmu NQWFHouxOw94SICuv2d212yEImIb/TI= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:43 2026 by rpki-client