$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa File: 1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa (raw, json) Hash identifier: AngeFhsnh9uTev4gIjTYtZqWoJ+5SnjAKkXr+H+rqJQ= Subject key identifier: DF:28:49:40:33:94:22:DE:19:64:42:CF:6B:FB:60:2A:70:09:82:15 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584BBA105ABEEEB93F6A2C141940 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 5650 IP address blocks: 75.153.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:5a:be:ee:b9:3f:6a:2c:14:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=91c60c3e-ac2f-460d-a4b8-117db9bf4447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:80:05:38:79:61:64:05:e4:d2:3a:38:32: 95:4a:80:c7:54:eb:2a:de:82:2d:91:90:c1:f6:d0: 60:a2:fa:76:04:16:2d:72:bc:7f:24:57:bc:e7:a0: 89:47:48:c1:bc:fe:7f:21:d8:ad:86:2c:2d:21:c9: 34:5d:62:30:06:3b:bd:9c:c4:c5:70:4c:0b:03:d9: 36:0e:10:fa:5a:08:11:67:7a:64:20:d2:69:f0:2c: b2:2c:61:89:82:c7:1f:b7:27:c1:fb:e9:e4:4d:8c: 4a:ae:9d:7a:77:55:f2:ba:57:54:58:ec:95:cf:1c: 01:e7:19:9b:78:e9:35:a9:3f:80:93:49:1c:ac:12: ed:e0:97:28:96:46:5a:3a:58:fe:0c:a4:53:48:42: 5f:ca:21:09:5c:f4:13:5a:3b:fe:09:3c:4a:11:15: ba:3f:e3:fb:99:06:0a:99:f5:3b:1b:90:3b:21:27: a8:35:31:16:94:33:4d:c3:9e:98:22:d8:80:e8:66: 4e:b8:e7:58:da:1b:c5:d9:23:d8:68:a6:56:1e:09: 1e:e7:8d:5e:1c:38:15:59:a9:dc:29:06:88:d2:d2: a9:69:05:4d:01:c6:9b:68:cf:62:3c:b8:44:28:9f: 07:13:d5:b3:03:df:43:ea:af:27:d3:6c:78:9c:0c: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:28:49:40:33:94:22:DE:19:64:42:CF:6B:FB:60:2A:70:09:82:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.153.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:04:e9:41:0e:00:cd:d0:22:3c:9a:81:d8:05:eb:80:40:2e: 1e:31:24:e6:85:55:01:2a:2f:ef:15:3d:48:7f:52:5d:1b:9b: 9e:5e:9f:ab:48:be:a4:72:d6:d7:bd:be:0f:36:7f:e9:30:1c: f5:ef:18:43:96:02:47:99:69:db:8a:b7:3e:23:36:6a:ef:16: dc:de:0e:28:17:01:72:66:af:b7:c5:af:83:bf:d1:bc:6d:cf: f6:88:05:cb:c5:8c:32:5e:df:0e:4a:aa:5e:50:57:75:ce:ad: 73:6a:95:94:6b:35:3b:61:be:9f:d7:75:e5:1f:b5:ff:24:4d: 03:28:72:c1:03:0b:dd:14:f4:8b:fe:7c:d0:61:46:82:92:cd: 2a:a3:1e:2d:cf:3f:56:59:67:00:a8:55:93:04:32:11:c0:39: a5:dc:c2:9c:53:fe:d6:7c:88:8e:55:b6:3b:11:90:04:45:85: 52:8b:bf:1a:93:1a:1e:10:19:5e:ff:c9:1c:7a:31:62:89:45: 71:b1:d6:cf:eb:5a:ab:fb:76:5e:7f:3c:06:19:70:97:09:98: af:dc:d7:fc:36:27:6c:16:86:01:b4:49:3b:3b:bc:3c:30:7d: 72:bf:3d:be:19:1c:ce:33:83:cf:52:ca:4c:c1:13:53:2b:08: d2:f2:d6:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFq+7rk/aiwUGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OTFjNjBjM2UtYWMyZi00NjBkLWE0YjgtMTE3ZGI5YmY0NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmiABTh5YWQF5NI6ODKVSoDHVOsq3oItkZDB 9tBgovp2BBYtcrx/JFe856CJR0jBvP5/IdithiwtIck0XWIwBju9nMTFcEwLA9k2 DhD6WggRZ3pkINJp8CyyLGGJgscftyfB++nkTYxKrp16d1XyuldUWOyVzxwB5xmb eOk1qT+Ak0kcrBLt4JcolkZaOlj+DKRTSEJfyiEJXPQTWjv+CTxKERW6P+P7mQYK mfU7G5A7ISeoNTEWlDNNw56YItiA6GZOuOdY2hvF2SPYaKZWHgke541eHDgVWanc KQaI0tKpaQVNAcabaM9iPLhEKJ8HE9WzA99D6q8n02x4nAx65wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8oSUAzlCLeGWRCz2v7YCpwCYIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWYyYjBhNmUtY2NlZS0z MGU4LTg1Y2EtMjBhNGIxMjZkYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS5lMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgE6UEOAM3QIjyagdgF64BALh4xJOaFVQEqL+8VPUh/Ul0bm55en6tI vqRy1te9vg82f+kwHPXvGEOWAkeZaduKtz4jNmrvFtzeDigXAXJmr7fFr4O/0bxt z/aIBcvFjDJe3w5Kql5QV3XOrXNqlZRrNTthvp/XdeUftf8kTQMocsEDC90U9Iv+ fNBhRoKSzSqjHi3PP1ZZZwCoVZMEMhHAOaXcwpxT/tZ8iI5VtjsRkARFhVKLvxqT Gh4QGV7/yRx6MWKJRXGx1s/rWqv7dl5/PAYZcJcJmK/c1/w2J2wWhgG0STs7vDww fXK/Pb4ZHM4zg89SykzBE1MrCNLy1kg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:41 2025 by rpki-client