$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7e915b8f-edc7-39da-9b23-42d8b3d90ef2.roa File: 7e915b8f-edc7-39da-9b23-42d8b3d90ef2.roa (raw, json) Hash identifier: nORbdn23xICrnTSfuG8EUrtPvXKzrl5BD6sn9pT/6vk= Subject key identifier: D3:85:9E:4F:8A:63:90:F2:E9:24:4C:68:5C:EC:9A:CE:D9:45:D9:31 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584BA93271E52AD72095AA441900 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7e915b8f-edc7-39da-9b23-42d8b3d90ef2.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11693 IP address blocks: 72.15.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:71:e5:2a:d7:20:95:aa:44:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f367eb92-6a85-494e-b5d5-6f4add5c3aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:a6:d0:da:cc:e4:10:d4:e2:0d:14:84:e1: 89:c3:a4:7c:6a:c5:c8:11:d8:38:53:d9:79:04:59: 73:9c:45:3a:1b:ce:36:c0:32:6f:19:53:82:bd:2e: 81:81:9c:e6:c1:7c:35:cf:d0:c1:d3:03:85:d8:27: cb:18:63:c4:fc:a2:ba:d4:97:a7:6b:aa:3a:7b:52: 26:1c:ce:90:50:f6:e3:15:02:8e:e0:09:e6:5f:05: ed:d4:ac:88:d2:52:cc:d0:47:fb:f5:31:50:05:aa: a1:be:3c:ef:1c:8e:de:e1:e7:a1:65:37:df:27:ca: f4:b7:c2:f6:0e:18:12:fb:72:2a:96:4a:22:57:d8: d4:f7:22:a6:f7:86:b6:30:20:5e:87:02:df:a2:26: 5a:6e:e9:8b:3c:0a:d3:d4:52:42:be:a0:7b:58:a6: 6f:96:1b:38:82:db:8f:8a:19:5e:b9:05:14:26:82: 46:15:ff:14:40:e1:2f:d1:16:67:e4:e5:0b:e4:a1: a2:69:29:cd:e3:b6:2d:d1:00:b7:d2:01:99:e9:a1: 39:68:ea:42:15:31:50:aa:53:cf:f6:d9:e7:f0:24: 30:d9:f1:e8:10:fd:d8:08:2d:17:25:18:14:99:31: 08:94:f1:10:88:58:5a:5e:b1:05:a6:27:6e:c8:4b: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:85:9E:4F:8A:63:90:F2:E9:24:4C:68:5C:EC:9A:CE:D9:45:D9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7e915b8f-edc7-39da-9b23-42d8b3d90ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 72.15.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1f:66:ae:77:90:bf:0c:9f:3a:0f:3a:7c:34:7b:12:2f:e1: 01:03:39:ab:72:1a:3e:51:4a:d0:97:6e:26:99:c7:f7:f0:69: fd:d5:c0:18:67:63:26:ee:51:6c:3e:d1:d6:45:2e:44:a6:66: 25:0c:de:2b:f4:2a:d6:87:5d:fc:96:28:b3:2c:57:4e:99:29: 39:d1:00:6a:27:70:86:be:e8:5e:a9:21:c6:23:05:a6:5a:ba: e9:4a:76:46:e6:cf:57:4c:84:b0:75:dc:a4:77:a9:21:ef:9b: 18:76:e8:b7:ec:80:87:c4:2c:70:89:79:58:8d:d2:1d:a4:f8: 55:10:a2:5e:43:4c:82:2b:55:62:5c:45:37:a3:50:43:3a:41: a8:48:22:aa:0b:bb:8c:ba:ab:76:23:31:96:a4:78:54:4e:72: a6:6b:b5:98:6d:52:6d:8d:35:cf:ee:61:7d:14:81:a1:d1:b6: 0b:f7:87:9b:b4:7e:0a:9e:e1:92:a8:fe:f9:07:52:71:ee:3a: 56:a1:ef:5f:5b:65:e7:1c:77:c7:4b:5f:4f:59:20:8c:71:c0: a8:b4:28:e3:44:31:79:ec:7c:4b:4f:bb:c1:f3:d2:7f:4e:16: d9:7b:2b:d7:76:bb:dd:5b:4b:06:95:95:1a:57:c9:8a:04:3e: 3f:95:f9:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnHlKtcglapEGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjM2N2ViOTItNmE4NS00OTRlLWI1ZDUtNmY0YWRkNWMzYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSqm0NrM5BDU4g0UhOGJw6R8asXIEdg4U9l5 BFlznEU6G842wDJvGVOCvS6BgZzmwXw1z9DB0wOF2CfLGGPE/KK61Jena6o6e1Im HM6QUPbjFQKO4AnmXwXt1KyI0lLM0Ef79TFQBaqhvjzvHI7e4eehZTffJ8r0t8L2 DhgS+3IqlkoiV9jU9yKm94a2MCBehwLfoiZabumLPArT1FJCvqB7WKZvlhs4gtuP ihleuQUUJoJGFf8UQOEv0RZn5OUL5KGiaSnN47Yt0QC30gGZ6aE5aOpCFTFQqlPP 9tnn8CQw2fHoEP3YCC0XJRgUmTEIlPEQiFhaXrEFpiduyEtNawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOFnk+KY5Dy6SRMaFzsms7ZRdkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvN2U5MTViOGYtZWRjNy0z OWRhLTliMjMtNDJkOGIzZDkwZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUfZq53kL8MnzoPOnw0exIv4QEDOatyGj5RStCXbiaZx/fwaf3VwBhn YybuUWw+0dZFLkSmZiUM3iv0KtaHXfyWKLMsV06ZKTnRAGoncIa+6F6pIcYjBaZa uulKdkbmz1dMhLB13KR3qSHvmxh26LfsgIfELHCJeViN0h2k+FUQol5DTIIrVWJc RTejUEM6QahIIqoLu4y6q3YjMZakeFROcqZrtZhtUm2NNc/uYX0UgaHRtgv3h5u0 fgqe4ZKo/vkHUnHuOlah719bZeccd8dLX09ZIIxxwKi0KONEMXnsfEtPu8Hz0n9O Ftl7K9d2u91bSwaVlRpXyYoEPj+V+cw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:22 2025 by rpki-client