$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de66a03b-f7d1-3d21-968a-e779030a73af.roa File: de66a03b-f7d1-3d21-968a-e779030a73af.roa (raw, json) Hash identifier: K2WTuCg+FfPV+cF7lNQVIWHwNCjKS1fM0IZW4pnB2KI= Subject key identifier: B3:CD:6B:27:3A:E5:48:C1:BA:9B:12:43:27:47:EA:06:1B:35:25:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B2496FB4B971600C841DE1060 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de66a03b-f7d1-3d21-968a-e779030a73af.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 75.221.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:fb:4b:97:16:00:c8:41:de:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=fb869e91-9d07-4ff5-8a34-6bbf8a86b433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:bc:4a:fb:c5:b8:cc:a7:42:80:e0:5b:1c: 3d:bb:d6:33:1f:eb:b0:28:de:c7:b5:0d:46:d7:1a: 02:1b:ab:75:89:ae:8b:f6:c3:36:f9:5b:52:e6:3a: 2a:23:0d:fb:ea:89:a4:c7:17:a3:21:25:af:84:14: 9e:02:f8:f1:29:99:27:23:d3:c0:71:08:68:3f:9a: 26:9c:f1:aa:d0:73:36:ac:49:b9:06:d0:b0:28:75: 2e:a6:1c:bd:56:1a:96:51:75:f1:5a:46:20:71:63: a7:4b:34:e3:dc:e3:f5:58:00:87:02:04:aa:08:6e: 42:05:ba:42:5e:58:d4:8e:cc:81:dd:af:8e:45:a6: 80:5e:76:a9:73:af:04:0c:0a:05:63:8e:b3:03:40: 47:a8:61:8a:59:26:d6:42:61:b8:db:b7:3c:65:eb: 02:6d:8d:07:1b:88:41:1d:ba:b3:60:39:15:01:51: ac:74:39:7b:2d:65:d8:43:8a:58:80:43:69:42:49: 1c:37:17:70:04:ca:f1:87:db:47:6f:cd:00:ba:e5: 28:70:9c:83:45:c7:de:e5:e2:50:a2:35:f8:79:4b: 0e:90:62:dd:6d:d2:04:dc:ed:1d:04:ea:a8:b5:98: dc:23:b1:f0:4e:18:4b:18:6b:ab:03:5e:ed:11:46: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CD:6B:27:3A:E5:48:C1:BA:9B:12:43:27:47:EA:06:1B:35:25:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de66a03b-f7d1-3d21-968a-e779030a73af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.221.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5f:77:9d:26:7e:7d:1e:63:e7:5c:12:4d:03:18:e8:b3:c4: 0c:5a:03:cf:f1:22:d1:0a:b9:c5:6b:68:b7:79:66:e6:36:c8: c9:22:c1:e4:85:92:14:17:7b:0c:21:8a:c5:11:fa:35:10:e8: 6c:06:7f:92:bc:5b:65:a6:d3:2e:53:d5:98:96:b5:30:5e:03: 1b:67:88:dc:bc:9c:73:68:61:93:a7:b2:ed:d5:29:9e:25:3a: 2c:a9:5d:6e:27:c0:09:3d:9e:e5:85:ee:7a:98:0b:41:6d:d0: db:7f:9b:cd:56:88:e0:2a:02:bd:0b:59:06:3a:5e:3b:51:59: 9c:70:03:f9:7c:85:bf:18:50:8a:36:3f:71:7c:dd:76:fa:93: d0:26:e1:b0:55:95:ec:50:58:ee:76:ab:0b:ef:5e:0c:cf:74: 96:9b:d7:20:17:6a:62:e5:94:47:ad:0c:3c:f9:5b:3c:da:d5: 2d:ec:6b:9d:c9:d2:56:aa:34:85:ef:e3:34:e2:9f:59:ba:05: a9:29:fd:43:11:b7:1b:78:53:52:e0:4e:d5:83:8a:4a:ac:52: a6:e7:cc:ef:50:e8:97:fb:77:2c:ed:16:ce:f0:3b:3c:af:3d: ec:55:12:64:b1:ed:9a:7c:40:58:96:fc:2e:19:c0:7d:32:dc: e1:51:3d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklvtLlxYAyEHeEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmI4NjllOTEtOWQwNy00ZmY1LThhMzQtNmJiZjhhODZiNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWC8SvvFuMynQoDgWxw9u9YzH+uwKN7HtQ1G 1xoCG6t1ia6L9sM2+VtS5joqIw376omkxxejISWvhBSeAvjxKZknI9PAcQhoP5om nPGq0HM2rEm5BtCwKHUuphy9VhqWUXXxWkYgcWOnSzTj3OP1WACHAgSqCG5CBbpC XljUjsyB3a+ORaaAXnapc68EDAoFY46zA0BHqGGKWSbWQmG427c8ZesCbY0HG4hB HbqzYDkVAVGsdDl7LWXYQ4pYgENpQkkcNxdwBMrxh9tHb80AuuUocJyDRcfe5eJQ ojX4eUsOkGLdbdIE3O0dBOqotZjcI7HwThhLGGurA17tEUZnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPNayc65UjBupsSQydH6gYbNSVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGU2NmEwM2ItZjdkMS0z ZDIxLTk2OGEtZTc3OTAzMGE3M2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS904MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJfd50mfn0eY+dcEk0DGOizxAxaA8/xItEKucVraLd5ZuY2yMkiweSF khQXewwhisUR+jUQ6GwGf5K8W2Wm0y5T1ZiWtTBeAxtniNy8nHNoYZOnsu3VKZ4l OiypXW4nwAk9nuWF7nqYC0Ft0Nt/m81WiOAqAr0LWQY6XjtRWZxwA/l8hb8YUIo2 P3F83Xb6k9Am4bBVlexQWO52qwvvXgzPdJab1yAXamLllEetDDz5Wzza1S3sa53J 0laqNIXv4zTin1m6Bakp/UMRtxt4U1LgTtWDikqsUqbnzO9Q6Jf7dyztFs7wOzyv PexVEmSx7Zp8QFiW/C4ZwH0y3OFRPQA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:22 2025 by rpki-client