$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa File: 147822a5-c475-34ed-abbe-3e272f9028c9.roa (raw, json) Hash identifier: NuhOlewx5xNYf2/iqrzke/U/OBVFHEUTEBGpQvRoSfQ= Subject key identifier: 24:80:66:E2:ED:44:13:36:33:E5:5E:BC:68:88:D9:86:8C:6E:F0:3E Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584BAEC7BE1622B12803F91DF880 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 76.76.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:be:16:22:b1:28:03:f9:1d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=70e6396a-9c18-4c13-8212-951ea787bc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:47:65:17:9e:dd:49:e6:f2:d4:47:73:58: bc:f5:1c:66:11:fe:6b:96:be:7c:8c:f3:82:ac:c3: 5a:73:de:d5:39:bd:51:35:92:04:a5:49:28:d1:64: 53:ae:09:d0:72:92:99:d1:a6:34:e0:22:5a:31:ac: e9:ae:ae:ec:2c:bb:05:99:06:37:de:ae:a0:20:c9: 75:64:a6:03:55:2c:d0:11:80:f6:e0:8d:2f:7a:55: 01:d5:a7:b3:e0:b9:de:ca:9c:59:06:45:0a:a3:a1: b9:4d:16:8f:0a:6b:1b:a1:44:17:fa:b7:4f:b7:61: d9:60:8a:7d:0a:e4:0f:22:cd:47:56:df:63:fc:3a: ab:53:74:46:28:f4:99:50:23:5e:0b:e5:65:35:1d: 49:d6:85:03:73:70:05:ba:0f:e6:9f:0d:0c:15:7d: a8:12:07:03:d5:a5:f9:87:7a:8b:85:89:77:f5:b7: d5:a7:87:7c:58:21:7e:b6:e4:74:42:da:7e:26:3c: 1d:75:c1:5d:a0:8a:ee:66:c2:27:f9:cc:04:27:04: 8f:0c:fe:f0:cb:19:b0:f3:0b:f1:d4:31:11:a4:15: 09:10:33:a9:24:02:64:b7:18:f5:b3:ea:a2:9d:eb: f8:f6:12:19:fc:31:e9:69:56:ec:25:61:b4:5b:bb: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:66:E2:ED:44:13:36:33:E5:5E:BC:68:88:D9:86:8C:6E:F0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 76.76.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5f:c3:dc:9d:8e:f4:f4:73:3f:6a:77:21:cd:f1:69:4a:7c: d1:1b:c7:0e:43:6a:6b:9d:50:52:2f:63:c5:29:a2:b6:8e:0f: 49:32:46:28:31:60:b0:f6:d2:8d:90:80:fe:c1:54:c5:17:8e: 1d:91:da:c6:4c:1d:3a:a8:0a:d4:4d:3b:f9:a1:82:49:1c:37: f6:d6:b4:c6:7b:ed:de:48:56:df:32:2d:e3:04:0e:9a:47:0d: 6a:62:f3:52:72:0e:1f:be:38:1b:d0:b1:7f:10:3e:2e:3f:22: 6e:7a:6c:c8:71:1e:48:da:9f:f8:99:7c:5f:9a:31:fc:ae:9c: 72:57:88:4a:07:6f:62:ed:e1:d4:59:49:b2:37:ee:42:db:a3: 2c:ce:1f:49:af:5a:66:e6:70:67:fc:05:2b:07:3e:5f:69:51: 02:f0:89:5c:a5:86:8e:56:00:64:8f:7c:73:20:c4:08:9b:39: 9c:bb:20:40:e0:3b:a5:09:70:ef:6b:e3:fb:e0:68:62:f0:84: 49:0d:81:55:60:0e:07:ff:51:3d:e7:3d:3c:19:c5:e9:11:0b: 6a:05:26:1d:c5:94:6d:7d:af:26:ec:fc:4c:cd:7c:29:ba:50: 1a:05:b2:db:a5:b4:3c:83:cb:b6:f6:f2:de:24:ce:d6:fe:2c: 24:9a:2f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux74WIrEoA/kd+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NzBlNjM5NmEtOWMxOC00YzEzLTgyMTItOTUxZWE3ODdiYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv49HZRee3Unm8tRHc1i89RxmEf5rlr58jPOC rMNac97VOb1RNZIEpUko0WRTrgnQcpKZ0aY04CJaMazprq7sLLsFmQY33q6gIMl1 ZKYDVSzQEYD24I0velUB1aez4LneypxZBkUKo6G5TRaPCmsboUQX+rdPt2HZYIp9 CuQPIs1HVt9j/DqrU3RGKPSZUCNeC+VlNR1J1oUDc3AFug/mnw0MFX2oEgcD1aX5 h3qLhYl39bfVp4d8WCF+tuR0Qtp+JjwddcFdoIruZsIn+cwEJwSPDP7wyxmw8wvx 1DERpBUJEDOpJAJktxj1s+qinev49hIZ/DHpaVbsJWG0W7v/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSAZuLtRBM2M+VevGiI2YaMbvA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMTQ3ODIyYTUtYzQ3NS0z NGVkLWFiYmUtM2UyNzJmOTAyOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1fw9ydjvT0cz9qdyHN8WlKfNEbxw5DamudUFIvY8UporaOD0kyRigx YLD20o2QgP7BVMUXjh2R2sZMHTqoCtRNO/mhgkkcN/bWtMZ77d5IVt8yLeMEDppH DWpi81JyDh++OBvQsX8QPi4/Im56bMhxHkjan/iZfF+aMfyunHJXiEoHb2Lt4dRZ SbI37kLboyzOH0mvWmbmcGf8BSsHPl9pUQLwiVylho5WAGSPfHMgxAibOZy7IEDg O6UJcO9r4/vgaGLwhEkNgVVgDgf/UT3nPTwZxekRC2oFJh3FlG19rybs/EzNfCm6 UBoFstultDyDy7b28t4kztb+LCSaL3w= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:18 2025 by rpki-client