$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa File: ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa (raw, json) Hash identifier: y64j2wlYyt6S+d9OhJhDQUqmsQERkYT95HWqW3a5G8s= Subject key identifier: A2:10:CF:23:14:11:92:C1:F5:DA:F0:0B:7A:2C:5C:91:5B:6C:04:6F Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC2F177C3E5289A7418800 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 75.76.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2f:17:7c:3e:52:89:a7:41:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=4cdaba52-4a74-4171-a499-bd3339fc17c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:c3:a2:39:cb:4b:e0:db:88:3f:1c:48:bd: 1f:1b:92:95:ec:05:c6:9c:2d:58:97:5b:32:5f:3b: 7b:e7:9c:8a:d3:33:2b:ef:dd:9b:61:06:3e:5d:15: 81:dc:5c:ed:4e:21:f8:52:d1:fb:a5:a8:4f:1c:61: f9:03:6f:19:02:9e:2d:4b:19:bb:cc:8c:e1:d6:32: 16:c6:f8:83:7f:da:66:8e:8c:4f:b1:1e:c9:10:19: b4:21:ad:84:a7:9d:34:d8:5c:e9:ae:e4:db:a3:53: e8:5d:7d:ef:33:47:f7:c4:7f:19:a4:b4:e2:73:51: 88:8a:6a:a4:1d:bd:4b:bf:a5:24:bc:6c:91:80:bf: c1:11:d0:2e:b0:9b:57:9e:20:26:4d:5a:e9:71:31: 17:8e:2e:c1:21:77:3d:97:90:8c:ed:4e:f7:cc:c3: d5:68:ae:63:47:51:5a:79:36:20:66:d5:24:bf:d3: 52:39:8c:16:ee:fa:93:1f:a4:0a:1e:4b:ba:e4:cd: cf:e0:01:07:b5:09:94:c3:19:72:2a:ca:57:ff:e6: 18:ca:5a:d7:f5:03:3b:85:71:80:0f:b7:88:69:5f: 51:4d:f1:18:7b:9d:54:1b:3c:44:18:0e:80:ed:46: ee:7f:ce:97:44:b7:6c:3f:10:78:7d:37:72:fe:54: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:CF:23:14:11:92:C1:F5:DA:F0:0B:7A:2C:5C:91:5B:6C:04:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 75.76.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ef:96:d3:1d:70:f5:17:ea:66:8e:b5:c3:cb:c6:8b:3c:45: 71:df:86:77:c1:5f:8b:c9:f2:6c:a2:6b:16:94:0c:72:6b:f1: 10:64:19:7e:d7:fb:a2:2b:fd:cf:ca:42:b0:57:3c:70:dc:65: e9:fe:c4:54:fb:d6:de:64:58:cb:21:18:92:f7:62:ac:b1:ad: e4:72:17:7e:68:38:01:6c:f7:19:ec:1d:2c:28:a8:6f:b6:aa: 3b:dc:7d:46:1b:f7:d9:74:9c:82:bc:33:bc:59:a1:3e:c1:5d: f8:27:28:f9:8b:63:8b:ae:1d:1c:86:96:a3:f3:8e:9e:8a:ab: ac:64:ca:e2:f5:9a:7f:42:a4:79:ee:63:ee:7e:64:bb:83:92: 09:57:2e:10:8f:78:e1:c2:a1:dc:40:f8:46:1b:80:f0:f6:59: 5e:b2:64:4c:7c:dd:b7:38:64:70:30:55:01:26:b5:d9:5f:c9: e0:c6:0a:51:56:87:cb:41:41:73:bb:2e:e0:03:53:cb:85:66: 22:48:95:ff:b3:f4:23:a7:52:c4:6c:6d:fc:d6:92:d0:67:32: eb:6c:5f:62:52:26:8c:9b:25:98:f8:6c:f4:8d:04:04:4d:7b: 43:60:04:c6:04:22:51:67:3b:f1:ab:f1:f3:dd:4f:53:17:82: 0d:d9:2d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC8XfD5SiadBiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NGNkYWJhNTItNGE3NC00MTcxLWE0OTktYmQzMzM5ZmMxN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbDojnLS+DbiD8cSL0fG5KV7AXGnC1Yl1sy Xzt755yK0zMr792bYQY+XRWB3FztTiH4UtH7pahPHGH5A28ZAp4tSxm7zIzh1jIW xviDf9pmjoxPsR7JEBm0Ia2Ep5002FzpruTbo1PoXX3vM0f3xH8ZpLTic1GIimqk Hb1Lv6UkvGyRgL/BEdAusJtXniAmTVrpcTEXji7BIXc9l5CM7U73zMPVaK5jR1Fa eTYgZtUkv9NSOYwW7vqTH6QKHku65M3P4AEHtQmUwxlyKspX/+YYylrX9QM7hXGA D7eIaV9RTfEYe51UGzxEGA6A7Ubuf86XRLdsPxB4fTdy/lTshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIQzyMUEZLB9drwC3osXJFbbARvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZmZlMzViYWItOTBmMC0z YjEyLWFkN2UtY2ZmNWM2NWMxNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS0wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLvltMdcPUX6maOtcPLxos8RXHfhnfBX4vJ8myiaxaUDHJr8RBkGX7X +6Ir/c/KQrBXPHDcZen+xFT71t5kWMshGJL3YqyxreRyF35oOAFs9xnsHSwoqG+2 qjvcfUYb99l0nIK8M7xZoT7BXfgnKPmLY4uuHRyGlqPzjp6Kq6xkyuL1mn9CpHnu Y+5+ZLuDkglXLhCPeOHCodxA+EYbgPD2WV6yZEx83bc4ZHAwVQEmtdlfyeDGClFW h8tBQXO7LuADU8uFZiJIlf+z9COnUsRsbfzWktBnMutsX2JSJoybJZj4bPSNBARN e0NgBMYEIlFnO/Gr8fPdT1MXgg3ZLZc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:14 2025 by rpki-client