$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5e248417-7466-35ef-86ba-24fa721fd3e5.roa File: 5e248417-7466-35ef-86ba-24fa721fd3e5.roa (raw, json) Hash identifier: 5/HhVMI4tzAcl6vD3xySSaL9/qC2TgHG9q05u8fzqLM= Subject key identifier: 4C:37:8F:FE:C2:83:C4:E2:FF:EB:FA:15:89:E5:EA:65:94:57:06:38 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B9E07D43BB49723632BDA4F80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5e248417-7466-35ef-86ba-24fa721fd3e5.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 21840 IP address blocks: 75.127.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d4:3b:b4:97:23:63:2b:da:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=05c1ab9d-23b1-47fb-bcff-840e891cb1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:58:18:bd:a1:83:14:5a:92:2b:3f:f8:38: 01:4b:ff:3f:1e:af:d3:2a:77:ed:0d:49:ff:84:d2: 36:c4:b8:84:47:e9:56:dd:68:4d:91:89:e2:7e:27: c1:d8:42:3e:11:f7:39:9b:94:a5:c3:fb:66:72:97: da:7c:82:f9:d7:0f:dd:c1:ca:1a:2b:6f:2b:fa:f5: 9e:0a:16:02:d2:63:b8:3b:a5:2f:81:66:46:88:d9: f7:e3:4a:5c:43:85:c6:a9:de:23:f5:bf:b1:b4:b2: 51:fd:62:78:11:f8:7b:fe:10:92:f5:70:50:00:47: 9c:d6:c6:c5:f6:ed:8c:59:a9:3d:e2:c7:5b:7d:64: 34:17:1d:f9:da:ee:28:b8:1c:86:dc:c6:ae:03:5a: 83:d1:63:4f:46:69:be:87:28:f1:c8:42:3b:09:30: d2:86:90:03:e3:7c:ec:49:39:b8:c2:6b:03:62:f8: 98:44:87:8e:1c:ea:69:84:fd:ba:f4:dd:fe:64:e6: 5e:88:1a:22:06:7e:be:fb:17:c8:14:1c:37:30:f4: 5f:51:38:12:86:78:34:31:f1:16:86:48:07:48:50: 24:08:56:1c:1d:88:35:d7:99:a1:ad:3e:de:e3:af: c5:21:ef:87:4e:0e:34:5b:15:28:bf:47:36:30:b6: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:8F:FE:C2:83:C4:E2:FF:EB:FA:15:89:E5:EA:65:94:57:06:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5e248417-7466-35ef-86ba-24fa721fd3e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7c:0e:20:02:8a:36:2d:ed:02:cb:58:3e:75:dd:c4:78:2e: b7:64:0f:8e:25:4b:cd:42:d7:db:63:95:1d:b7:f0:63:7c:44: b0:42:b0:5c:25:0b:1e:38:1a:44:ab:46:0b:89:e0:ec:5c:b8: 6b:b0:eb:34:ea:c0:e7:87:b8:bb:da:84:3f:70:3e:88:ef:36: ac:3d:f5:aa:27:fa:c3:3b:a1:db:d5:91:76:1f:c1:1b:6e:ce: b1:a0:a5:2e:68:26:7e:9c:30:00:ea:b6:0d:1d:d7:db:32:34: ca:ce:7b:c8:95:59:76:d8:94:b9:b7:50:99:93:4e:02:37:24: ad:b1:8b:00:5d:69:fd:ce:9b:6c:3c:96:41:34:55:91:2d:62: d0:bc:06:77:23:f8:19:15:38:d9:0f:95:1a:4d:22:1a:0d:50: 2c:b2:11:37:e0:eb:12:9c:df:96:6d:9d:d5:9d:11:a6:af:2a: 7e:f0:ba:d5:24:54:e0:c3:ca:39:56:76:c9:72:d4:23:2b:8b: 6f:09:e6:44:82:22:66:ff:95:3e:c8:69:b7:4f:77:4e:d6:c0: 9a:3f:1b:43:4d:1c:a1:04:3f:0d:73:05:1f:70:9a:9c:bc:98: f8:7f:68:45:4b:e8:8c:c1:3b:60:2e:24:85:a0:cd:7f:7d:8f: 00:62:92:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9Q7tJcjYyvaT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDVjMWFiOWQtMjNiMS00N2ZiLWJjZmYtODQwZTg5MWNiMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJJYGL2hgxRakis/+DgBS/8/Hq/TKnftDUn/ hNI2xLiER+lW3WhNkYnififB2EI+Efc5m5Slw/tmcpfafIL51w/dwcoaK28r+vWe ChYC0mO4O6UvgWZGiNn340pcQ4XGqd4j9b+xtLJR/WJ4Efh7/hCS9XBQAEec1sbF 9u2MWak94sdbfWQ0Fx352u4ouByG3MauA1qD0WNPRmm+hyjxyEI7CTDShpAD43zs STm4wmsDYviYRIeOHOpphP269N3+ZOZeiBoiBn6++xfIFBw3MPRfUTgShng0MfEW hkgHSFAkCFYcHYg115mhrT7e46/FIe+HTg40WxUov0c2MLY6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw3j/7Cg8Ti/+v6FYnl6mWUVwY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNWUyNDg0MTctNzQ2Ni0z NWVmLTg2YmEtMjRmYTcyMWZkM2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS39EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ8DiACijYt7QLLWD513cR4LrdkD44lS81C19tjlR238GN8RLBCsFwl Cx44GkSrRguJ4OxcuGuw6zTqwOeHuLvahD9wPojvNqw99aon+sM7odvVkXYfwRtu zrGgpS5oJn6cMADqtg0d19syNMrOe8iVWXbYlLm3UJmTTgI3JK2xiwBdaf3Om2w8 lkE0VZEtYtC8Bncj+BkVONkPlRpNIhoNUCyyETfg6xKc35ZtndWdEaavKn7wutUk VODDyjlWdsly1CMri28J5kSCImb/lT7IabdPd07WwJo/G0NNHKEEPw1zBR9wmpy8 mPh/aEVL6IzBO2AuJIWgzX99jwBikpg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:39:34 2025 by rpki-client