$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7ac2e68-9750-36ee-98fa-7895094219c8.roa File: b7ac2e68-9750-36ee-98fa-7895094219c8.roa (raw, json) Hash identifier: Iw85oBmXNljLlglu0zZPw0Ke9H0FYA5CJGO/rTmEHb4= Subject key identifier: 8F:A1:10:7C:46:B0:70:FC:B5:37:0B:5A:33:96:D0:4F:A2:60:A5:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB786389CF295F8FD9B7E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7ac2e68-9750-36ee-98fa-7895094219c8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22258 IP address blocks: 75.151.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:86:38:9c:f2:95:f8:fd:9b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=790c8342-940b-4dd6-9958-eaf6af9bddcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:01:2f:15:c8:8a:12:bd:76:44:b3:94:00:0b: 5f:d5:62:87:03:47:34:31:7f:0d:29:a7:00:91:67: 29:94:ce:35:66:3d:e5:e6:b0:54:36:f3:6c:e1:94: 86:6c:ac:97:ef:83:e6:72:d9:c2:61:76:cf:35:2e: 44:27:2c:f5:6e:dd:41:4d:90:8e:f0:07:de:2c:09: fa:ae:dd:84:b4:ba:e4:8c:1b:56:a1:c8:76:ef:37: b6:39:82:b2:82:f9:ba:d8:29:92:66:cf:8f:11:d3: 59:6f:d8:85:f5:1e:63:c0:77:fa:a7:2f:84:09:68: c1:ee:92:bd:d9:ff:c3:75:bd:1c:62:c4:af:56:e3: 5d:84:63:d7:92:2d:98:a1:84:4c:86:29:c5:59:21: 70:3c:13:4c:8d:8f:ef:c5:63:b9:b4:40:83:4c:d9: 0a:e0:89:cb:de:0b:88:a9:cb:61:52:fc:45:f9:13: 78:db:31:64:06:78:47:c9:67:af:7e:e9:e2:67:28: 80:ce:73:04:3b:27:2c:8f:01:d8:f6:1a:1b:27:30: 63:51:86:88:3c:6e:de:e7:d6:b0:a9:5d:4f:42:28: 4d:ae:59:fa:68:2d:7d:5e:32:8c:7c:4b:94:8f:8c: 88:39:93:31:c2:46:e1:d3:71:a8:fe:b1:f7:bb:3d: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A1:10:7C:46:B0:70:FC:B5:37:0B:5A:33:96:D0:4F:A2:60:A5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7ac2e68-9750-36ee-98fa-7895094219c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.151.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7b:e3:3c:f6:b0:43:35:ab:df:d9:e3:b2:aa:8c:ab:72:a8: 85:64:d4:e6:4f:17:b6:ed:00:9f:9e:ed:0a:ff:73:94:40:54: df:65:fa:8a:91:5f:2d:99:53:e7:e6:dc:65:0b:e8:8f:72:f8: b7:84:8b:f6:ae:1f:d5:75:65:a5:fd:c7:d7:98:e0:04:52:5f: a9:97:e9:e9:21:9a:a9:1f:c7:ea:5c:02:43:92:8c:54:4b:66: 30:4a:86:ca:c7:a9:6d:c3:56:cb:23:e2:71:52:61:f8:e7:73: d7:ef:3a:b6:44:53:95:2a:d1:b9:72:2b:12:c2:82:e5:53:15: c0:50:11:72:e5:18:17:05:e4:20:56:2b:d4:30:c5:61:ec:52: ab:4d:d6:2f:cd:0b:43:48:2e:03:b8:40:30:ca:39:bd:ed:3d: a6:c0:f1:81:e2:ee:bc:50:cf:69:b7:80:95:36:14:8a:c0:5e: 79:a7:45:b2:a6:de:0b:ca:72:e0:b0:5d:ae:01:06:35:93:1f: 94:b9:f4:a3:5e:6b:99:2a:d0:78:a3:dd:2f:94:5a:b1:c7:a5: 21:38:22:92:ee:c9:e6:65:d8:70:7b:97:2a:d0:49:27:e7:5e: ad:45:92:15:4a:6e:10:cd:48:c6:28:4c:df:a7:26:06:9f:54: 3f:d8:60:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t4Y4nPKV+P2bfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzkwYzgzNDItOTQwYi00ZGQ2LTk5NTgtZWFmNmFmOWJkZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwEvFciKEr12RLOUAAtf1WKHA0c0MX8NKacA kWcplM41Zj3l5rBUNvNs4ZSGbKyX74PmctnCYXbPNS5EJyz1bt1BTZCO8AfeLAn6 rt2EtLrkjBtWoch27ze2OYKygvm62CmSZs+PEdNZb9iF9R5jwHf6py+ECWjB7pK9 2f/Ddb0cYsSvVuNdhGPXki2YoYRMhinFWSFwPBNMjY/vxWO5tECDTNkK4InL3guI qcthUvxF+RN42zFkBnhHyWevfuniZyiAznMEOycsjwHY9hobJzBjUYaIPG7e59aw qV1PQihNrln6aC19XjKMfEuUj4yIOZMxwkbh03Go/rH3uz1rZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+hEHxGsHD8tTcLWjOW0E+iYKVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhYzJlNjgtOTc1MC0z NmVlLTk4ZmEtNzg5NTA5NDIxOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS5fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA974zz2sEM1q9/Z47KqjKtyqIVk1OZPF7btAJ+e7Qr/c5RAVN9l+oqR Xy2ZU+fm3GUL6I9y+LeEi/auH9V1ZaX9x9eY4ARSX6mX6ekhmqkfx+pcAkOSjFRL ZjBKhsrHqW3DVssj4nFSYfjnc9fvOrZEU5Uq0blyKxLCguVTFcBQEXLlGBcF5CBW K9QwxWHsUqtN1i/NC0NILgO4QDDKOb3tPabA8YHi7rxQz2m3gJU2FIrAXnmnRbKm 3gvKcuCwXa4BBjWTH5S59KNea5kq0Hij3S+UWrHHpSE4IpLuyeZl2HB7lyrQSSfn Xq1FkhVKbhDNSMYoTN+nJgafVD/YYLA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:07 2025 by rpki-client