$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/32b0db24-d0f9-313b-8b34-1014fdbce25b.roa File: 32b0db24-d0f9-313b-8b34-1014fdbce25b.roa (raw, json) Hash identifier: 59tQQUc6eOVl93CfCKWhqHOGibK5EL447GSpd6fmS24= Subject key identifier: 72:0E:8C:E7:88:8D:52:77:FA:96:8B:99:14:5F:87:14:21:21:3F:99 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584BA7CD16D365732099ECBDAB10 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/32b0db24-d0f9-313b-8b34-1014fdbce25b.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 16737 IP address blocks: 75.127.122.0/24 maxlen: 24 75.127.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:16:d3:65:73:20:99:ec:bd:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=8b33fefa-8bcd-4121-b1db-21a46e2bdbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:3f:d0:9f:a2:ca:82:f3:9f:d5:3a:7e:ce: bd:34:d7:7f:dc:3d:b4:bf:a1:4b:d7:ef:bc:bd:6c: f1:99:89:d5:f3:9b:94:1a:d6:7c:25:0c:9a:bd:8f: 51:f3:0a:51:a6:d1:43:ed:db:e4:15:99:04:f5:5c: d1:ad:df:c4:e8:ba:67:2c:3c:22:62:ea:44:ad:b6: 65:bb:cf:04:52:99:b5:ec:d0:32:6d:de:06:2a:b0: 91:a9:c7:fd:e1:f2:1a:bc:1d:d7:dd:d7:c6:eb:46: 91:61:7d:d4:89:9d:6f:78:61:9f:e5:9d:e9:84:72: b1:9d:e8:4c:7a:5c:ac:71:55:75:e4:ac:9d:04:e7: 31:74:0b:d9:2b:07:1a:4a:b2:43:5a:bc:94:f8:e4: 17:2a:34:11:b4:8b:59:4d:d5:aa:d6:f6:40:6b:6a: 19:cd:ba:19:6e:26:79:46:1f:54:4d:db:27:96:b1: 65:32:f3:31:e1:d6:88:1f:ed:da:4d:13:12:30:88: 3a:9e:32:26:a6:47:b4:9c:29:5d:a7:23:1f:ca:fc: 42:b2:43:27:04:29:94:04:d2:d2:25:92:e9:b3:44: 74:53:91:6b:85:55:ac:44:0c:ac:80:9a:d8:f8:21: cd:c7:c2:8b:7c:59:1d:b7:5e:ad:94:fd:85:e4:1f: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0E:8C:E7:88:8D:52:77:FA:96:8B:99:14:5F:87:14:21:21:3F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/32b0db24-d0f9-313b-8b34-1014fdbce25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a5:96:35:a4:59:76:7a:24:9b:8e:55:69:70:67:f8:b6:6c: eb:d3:2d:7b:3f:84:e6:d5:33:f2:62:57:05:e4:e5:29:09:2a: 2d:66:fa:00:87:49:1c:4a:92:b5:92:7d:09:b9:40:c2:21:73: 31:ff:c9:33:be:ed:9e:d1:d9:66:7d:b4:6c:93:41:ed:3a:56: a7:60:b7:d3:95:9b:42:62:72:a7:dd:02:95:8e:76:97:2c:0f: e4:46:58:80:b4:b8:24:9b:c0:c7:58:40:a4:63:41:3d:91:f6: 18:f3:9e:fe:1d:eb:fa:1f:1c:ec:a8:be:61:a2:6f:e9:63:67: 41:5e:0c:4a:d8:13:9b:d5:d9:c9:48:0e:f3:0a:51:7e:41:bc: 8c:4e:05:e0:63:ac:0e:4d:2d:cf:57:45:e6:7b:31:94:25:1e: aa:bf:b5:e7:f2:61:b3:5f:58:21:a2:8b:a5:0b:0c:50:6f:f0: c0:31:0c:c7:12:04:6f:f0:a5:26:8f:65:fa:a0:ff:04:cf:37: ad:9a:a0:9f:a1:88:e2:c7:84:c4:22:00:0b:f8:c6:66:16:ec: b4:fe:8e:56:31:c1:41:03:da:3a:5f:9a:09:7c:05:cb:45:28: 80:18:42:55:bb:02:9e:74:bf:84:19:77:9a:b3:f9:fe:52:cf: 3f:a7:24:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRbTZXMgmey9qxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OGIzM2ZlZmEtOGJjZC00MTIxLWIxZGItMjFhNDZlMmJkYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Y/0J+iyoLzn9U6fs69NNd/3D20v6FL1++8 vWzxmYnV85uUGtZ8JQyavY9R8wpRptFD7dvkFZkE9VzRrd/E6LpnLDwiYupErbZl u88EUpm17NAybd4GKrCRqcf94fIavB3X3dfG60aRYX3UiZ1veGGf5Z3phHKxnehM elyscVV15KydBOcxdAvZKwcaSrJDWryU+OQXKjQRtItZTdWq1vZAa2oZzboZbiZ5 Rh9UTdsnlrFlMvMx4daIH+3aTRMSMIg6njImpke0nCldpyMfyvxCskMnBCmUBNLS JZLps0R0U5FrhVWsRAysgJrY+CHNx8KLfFkdt16tlP2F5B8QmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIOjOeIjVJ3+paLmRRfhxQhIT+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMzJiMGRiMjQtZDBmOS0z MTNiLThiMzQtMTAxNGZkYmNlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS396MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmlljWkWXZ6JJuOVWlwZ/i2bOvTLXs/hObVM/JiVwXk5SkJKi1m+gCH SRxKkrWSfQm5QMIhczH/yTO+7Z7R2WZ9tGyTQe06Vqdgt9OVm0JicqfdApWOdpcs D+RGWIC0uCSbwMdYQKRjQT2R9hjznv4d6/ofHOyovmGib+ljZ0FeDErYE5vV2clI DvMKUX5BvIxOBeBjrA5NLc9XReZ7MZQlHqq/tefyYbNfWCGii6ULDFBv8MAxDMcS BG/wpSaPZfqg/wTPN62aoJ+hiOLHhMQiAAv4xmYW7LT+jlYxwUED2jpfmgl8BctF KIAYQlW7Ap50v4QZd5qz+f5Szz+nJJQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:02 2025 by rpki-client