$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa File: a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa (raw, json) Hash identifier: Atz/uQg8aZREL0Y8YtQi3hpyzYMq/BhnAUb7sHJIwrE= Subject key identifier: 31:1D:C7:BD:13:85:00:13:3F:94:D4:E3:E5:85:12:EA:A0:9C:48:56 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584BA93271AEF01182376B312100 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11693 IP address blocks: 72.15.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:71:ae:f0:11:82:37:6b:31:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4015057f-a8f4-4a8d-984f-0e7da0eda21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:77:df:55:8e:d0:f8:d5:b8:60:61:17:3d: fc:dd:bd:ee:92:a7:8d:43:97:9c:17:e0:8e:1b:45: ff:66:3a:b2:b0:6b:d8:ef:53:ae:00:61:6b:8d:31: 10:c7:e0:76:fb:7c:b5:01:8c:98:d2:77:42:1d:03: 3e:37:f2:8a:8d:c1:8b:85:c0:4c:b4:72:17:6a:ad: 03:eb:ae:23:e7:c6:f7:7d:34:28:fb:5b:f8:2e:de: 01:35:89:7f:f9:a0:38:92:be:ad:2b:1d:68:f7:be: 68:11:9c:fc:9b:18:0a:5f:db:3f:5b:4b:07:60:97: 36:78:b4:a2:ed:2a:0c:77:67:30:62:68:e9:f9:06: ee:be:2c:7a:25:93:35:22:1d:5c:23:d9:f2:13:78: 53:78:8b:f1:ef:33:e8:a5:a6:9a:08:33:ca:34:b0: 99:54:e7:ea:02:54:bd:54:11:4f:d6:b5:b5:48:78: b9:a5:32:da:1c:15:43:41:7e:86:82:54:48:c6:22: 74:f3:86:57:00:37:a1:6b:04:80:6e:fd:f4:68:a2: a2:7a:d6:da:70:e8:55:dd:b2:5d:ac:68:80:30:51: 29:52:3d:6b:90:c2:07:95:f2:8c:78:da:0f:81:b0: ba:1a:cc:a4:bf:24:61:ef:99:27:61:15:0e:22:b8: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1D:C7:BD:13:85:00:13:3F:94:D4:E3:E5:85:12:EA:A0:9C:48:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a60ad87b-3ee5-3d50-a0f4-f163dcfa37df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 72.15.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6e:c9:45:68:c1:a8:9a:bc:22:dc:2f:c7:f4:21:e5:1b:26: b9:10:cc:af:59:6d:2a:0d:d9:07:36:8d:d6:14:f8:8d:13:a8: 0d:41:dd:52:41:c1:05:62:dc:21:05:bb:83:e1:3c:8f:6b:dd: 44:14:dd:68:40:27:dd:0a:fa:d9:67:f0:80:6c:e2:c3:c0:89: 48:41:55:28:e1:70:43:58:37:4d:f2:bd:24:8d:af:0c:09:6d: 43:a4:27:63:f7:01:fa:60:37:d8:47:57:0e:c1:a9:3a:68:38: 10:11:16:46:90:4f:36:f7:ce:98:67:d6:39:36:3e:ba:df:17: 4d:ea:e2:47:7f:a0:33:49:97:5f:2a:ab:2b:77:26:f9:9d:3b: 50:f4:06:2f:2c:b8:78:21:b3:37:45:0d:72:5e:d5:ab:e8:36: 2f:66:72:81:6b:10:44:86:4e:5d:32:04:a0:85:3b:42:a0:47: f8:4f:8f:b8:bf:56:53:bc:36:fe:93:c3:5f:f8:1f:54:9a:4c: ca:de:62:d3:64:5e:de:30:29:c1:14:72:af:6d:bb:ec:12:76: be:e8:89:71:18:55:85:43:3b:f3:46:d6:43:c9:a2:7b:a6:8b: 1d:f2:cb:ad:6c:e4:85:25:6f:d4:a5:d6:dd:dd:55:0b:24:95: 35:f4:d0:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnGu8BGCN2sxIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDAxNTA1N2YtYThmNC00YThkLTk4NGYtMGU3ZGEwZWRhMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkB331WO0PjVuGBhFz383b3ukqeNQ5ecF+CO G0X/ZjqysGvY71OuAGFrjTEQx+B2+3y1AYyY0ndCHQM+N/KKjcGLhcBMtHIXaq0D 664j58b3fTQo+1v4Lt4BNYl/+aA4kr6tKx1o975oEZz8mxgKX9s/W0sHYJc2eLSi 7SoMd2cwYmjp+Qbuvix6JZM1Ih1cI9nyE3hTeIvx7zPopaaaCDPKNLCZVOfqAlS9 VBFP1rW1SHi5pTLaHBVDQX6GglRIxiJ084ZXADehawSAbv30aKKietbacOhV3bJd rGiAMFEpUj1rkMIHlfKMeNoPgbC6GsykvyRh75knYRUOIrjACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEdx70ThQATP5TU4+WFEuqgnEhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYTYwYWQ4N2ItM2VlNS0z ZDUwLWEwZjQtZjE2M2RjZmEzN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSA9kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFuyUVowaiavCLcL8f0IeUbJrkQzK9ZbSoN2Qc2jdYU+I0TqA1B3VJB wQVi3CEFu4PhPI9r3UQU3WhAJ90K+tln8IBs4sPAiUhBVSjhcENYN03yvSSNrwwJ bUOkJ2P3AfpgN9hHVw7BqTpoOBARFkaQTzb3zphn1jk2PrrfF03q4kd/oDNJl18q qyt3JvmdO1D0Bi8suHghszdFDXJe1avoNi9mcoFrEESGTl0yBKCFO0KgR/hPj7i/ VlO8Nv6Tw1/4H1SaTMreYtNkXt4wKcEUcq9tu+wSdr7oiXEYVYVDO/NG1kPJonum ix3yy61s5IUlb9Sl1t3dVQsklTX00Jg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:34 2025 by rpki-client