$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/21d603d4-2ee1-33b9-bdb1-2624427e3137.roa File: 21d603d4-2ee1-33b9-bdb1-2624427e3137.roa (raw, json) Hash identifier: 69RqUJIFTSRDUzWl9DIEtumKMsgsr+3FOrgxES+ufEQ= Subject key identifier: A9:3B:77:FA:08:F5:9B:76:85:D2:33:1F:EB:6E:BA:9C:A4:D3:3F:9D Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC2FB27EDD5DE4B98BD000 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/21d603d4-2ee1-33b9-bdb1-2624427e3137.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 75.76.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2f:b2:7e:dd:5d:e4:b9:8b:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=06fe2a5f-b0b1-4970-a117-cc584296fd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:91:c2:f9:76:bb:5c:85:6c:04:8a:d7:f4: df:a8:3c:36:36:c9:60:cc:7c:98:12:3d:d5:b0:00: 6e:d4:ee:ba:d9:f9:90:e4:c4:85:1a:9b:8a:34:1a: 4a:63:8e:91:0a:cf:5d:ff:2e:7d:b6:56:af:45:4a: 90:be:4e:19:d8:91:b9:31:12:2e:e0:09:64:b6:32: e5:fe:b3:b9:aa:39:8a:1b:11:d9:2f:82:f4:b6:c9: 09:50:27:9b:ba:54:d2:98:0f:c6:90:14:1e:60:49: 7f:4b:32:d8:25:d8:f0:31:eb:8e:27:25:df:bd:38: 7a:91:86:d3:df:82:f9:28:2c:03:65:97:1e:d7:26: 6d:86:06:55:87:33:d7:4d:84:e3:80:f5:e5:2c:a3: 61:5f:78:eb:d3:da:52:dc:84:48:3c:fc:ac:33:bb: ca:9d:fc:2a:44:8c:80:d2:62:f0:47:7e:75:e8:1d: f6:8f:f7:44:e9:5d:e7:e7:ac:fb:a0:b8:92:1e:54: 8b:2f:9a:20:46:e9:fb:76:53:ac:6e:aa:26:b1:d2: 44:b5:e4:6b:6a:9a:a6:81:0d:36:59:54:42:af:de: 97:2e:4b:9c:6d:6a:ca:89:1f:d1:b6:46:fd:28:72: 70:63:40:45:3c:a5:d2:70:cc:99:74:fb:ff:c4:8a: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:77:FA:08:F5:9B:76:85:D2:33:1F:EB:6E:BA:9C:A4:D3:3F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/21d603d4-2ee1-33b9-bdb1-2624427e3137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 75.76.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c3:f3:64:70:4a:c5:a2:44:5b:fc:c4:82:28:1a:98:0b:6a: bb:d8:61:4d:77:5e:ae:3d:42:01:8f:8e:02:1d:11:c2:93:10: 57:9b:71:d7:6a:b3:50:88:e9:b5:95:d6:31:9c:81:5c:e7:d9: e7:b6:85:8c:c0:b3:1f:32:25:d5:cb:6b:47:bf:18:c4:c4:f5: 07:89:09:b4:06:41:1d:ba:a1:a4:81:4f:8e:42:78:92:1f:ac: 30:62:df:a9:d0:9d:b7:25:0a:c6:51:1c:29:90:ae:9a:cc:82: be:f8:84:aa:62:2b:f2:b6:be:d7:e8:55:84:10:14:dc:2c:31: 6a:9b:c8:c3:3d:ab:bb:6d:8f:5c:2c:2c:09:ae:3d:e0:47:88: a7:30:b4:1d:c0:63:ba:ad:4b:ad:d3:6e:30:10:2f:6e:64:c8: e5:a4:c1:62:90:3a:ba:03:9b:34:0f:58:ee:00:02:f8:d6:a5: 1e:fd:7a:38:e9:2a:d7:b4:da:4e:93:48:47:65:5f:f3:56:23: 95:f5:2c:8b:ae:dc:88:27:91:3f:bd:6c:1f:7f:bd:42:dc:e3: 79:30:be:f6:da:20:24:50:c6:dc:1e:39:07:13:b1:f3:30:b3: c7:bc:db:dc:06:c5:3e:b0:72:d9:1d:bd:24:f2:65:68:0b:7c: ac:32:cd:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC+yft1d5LmL0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MDZmZTJhNWYtYjBiMS00OTcwLWExMTctY2M1ODQyOTZmZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCORwvl2u1yFbASK1/TfqDw2NslgzHyYEj3V sABu1O662fmQ5MSFGpuKNBpKY46RCs9d/y59tlavRUqQvk4Z2JG5MRIu4AlktjLl /rO5qjmKGxHZL4L0tskJUCebulTSmA/GkBQeYEl/SzLYJdjwMeuOJyXfvTh6kYbT 34L5KCwDZZce1yZthgZVhzPXTYTjgPXlLKNhX3jr09pS3IRIPPysM7vKnfwqRIyA 0mLwR3516B32j/dE6V3n56z7oLiSHlSLL5ogRun7dlOsbqomsdJEteRrapqmgQ02 WVRCr96XLkucbWrKiR/Rtkb9KHJwY0BFPKXScMyZdPv/xIr6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk7d/oI9Zt2hdIzH+tuupyk0z+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMjFkNjAzZDQtMmVlMS0z M2I5LWJkYjEtMjYyNDQyN2UzMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS0ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHD82RwSsWiRFv8xIIoGpgLarvYYU13Xq49QgGPjgIdEcKTEFebcddq s1CI6bWV1jGcgVzn2ee2hYzAsx8yJdXLa0e/GMTE9QeJCbQGQR26oaSBT45CeJIf rDBi36nQnbclCsZRHCmQrprMgr74hKpiK/K2vtfoVYQQFNwsMWqbyMM9q7ttj1ws LAmuPeBHiKcwtB3AY7qtS63TbjAQL25kyOWkwWKQOroDmzQPWO4AAvjWpR79ejjp Kte02k6TSEdlX/NWI5X1LIuu3IgnkT+9bB9/vULc43kwvvbaICRQxtweOQcTsfMw s8e829wGxT6wctkdvSTyZWgLfKwyzfM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:34 2025 by rpki-client