$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa File: 959c9920-c69e-389b-8a68-5c4dc7a13333.roa (raw, json) Hash identifier: nYq6NP2kaiR/FW/zcFUHQIdiLc6kHdc/D0WZzJNNEsA= Subject key identifier: 5F:D7:77:EB:20:45:6B:06:7E:76:E4:3C:40:2C:59:AB:C7:DB:F1:86 Certificate issuer: /CN=74b205b0-206e-45a4-8d98-55b99a30a8f4 Certificate serial: 010D0C9F4328584B758C9810E05181C15E481A90 Authority key identifier: F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 12155 IP address blocks: 65.75.240.0/20 maxlen: 24 199.36.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:98:10:e0:51:81:c1:5e:48:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=fd6378ae-b70d-4e31-baa6-3f6e08cabc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:19:74:41:d5:c4:41:ab:79:bf:a2:3e:78: ad:9c:47:e2:3c:37:ab:34:ca:0a:4a:36:92:ac:d6: 42:96:6a:03:db:28:ca:8c:93:95:f0:7a:6f:04:c5: 2d:9d:39:6d:c3:18:cf:dc:0e:15:2a:38:ae:d9:76: 76:ea:ea:75:91:f4:12:46:4a:7c:9c:f1:61:d7:35: de:4f:97:bc:d1:8e:a9:d9:56:1c:77:67:19:b1:c9: ff:0c:20:71:71:3a:9a:4f:15:da:e7:37:88:09:e8: 8c:3b:89:76:03:68:88:02:ea:0a:a3:cb:49:9e:ee: 3d:c8:7b:fd:2b:e9:86:74:ca:91:90:7a:1e:63:dd: 93:1f:d8:0a:f2:f7:9e:0d:50:00:e1:17:b9:70:d1: cc:74:64:dc:d7:bf:75:90:3a:9d:a3:d9:e8:98:c7: 19:9e:a1:d9:03:d0:dc:8b:5e:0d:a9:01:7f:e3:74: 81:6b:69:dd:93:de:f7:bd:71:6f:d6:a7:f4:5d:a8: 1f:34:bf:64:0d:25:aa:7d:0f:4e:d2:ec:80:a0:13: e0:ef:0f:94:39:f5:0d:ac:98:1b:56:d0:c2:73:fe: 2e:2d:ca:0b:fc:74:d4:02:6c:33:6a:5e:f2:24:f0: 8c:be:d2:41:08:ea:ea:4c:88:7c:1b:c6:41:41:dd: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D7:77:EB:20:45:6B:06:7E:76:E4:3C:40:2C:59:AB:C7:DB:F1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl X509v3 Authority Key Identifier: keyid:F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer sbgp-ipAddrBlock: critical IPv4: 65.75.240.0/20 199.36.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c9:3c:91:f2:74:a5:46:98:4d:4f:0f:e4:d3:fe:6e:bc:23: f3:6a:dc:90:55:dc:11:ce:c9:ea:d3:b6:59:cb:2a:6a:92:c2: ae:88:34:b8:a8:19:bb:bd:39:eb:df:f8:54:72:a4:94:66:b0: ad:68:5c:9d:f9:b4:57:4c:2d:1c:93:bd:54:92:a4:4f:63:b6: d7:1f:5d:97:1b:82:3d:89:ad:19:c7:1d:0f:da:ab:ee:ef:c4: e3:d4:7e:3e:7d:2b:16:cb:a1:30:00:a8:7d:7f:00:c5:72:1d: 93:87:40:eb:a9:79:da:f9:e1:39:6e:bb:73:0b:4d:70:a1:90: c5:b6:7b:34:e0:fa:4f:62:0b:ea:ad:5a:53:c0:26:0c:e1:52: 32:61:4a:25:dc:2e:75:04:fa:72:1c:e4:d7:6a:ad:e6:28:bd: 15:dc:39:f0:55:32:86:28:53:ec:35:5b:50:4d:84:81:7a:a7: 11:27:32:6b:06:26:60:6b:4a:3d:a6:7e:0c:77:00:e5:92:de: 58:f9:55:89:28:05:92:5b:9f:0d:7e:93:12:93:9b:0c:50:cb: 94:79:b3:e2:1b:9e:e0:1e:fa:20:04:10:a7:51:24:cc:3e:20: 40:3a:d2:e0:b9:89:87:c2:42:46:6b:2d:a5:1b:41:21:92:10: e3:19:aa:24 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt1jJgQ4FGBwV5IGpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjA1YjAtMjA2ZS00NWE0LThkOTgtNTViOTlhMzBh OGY0MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZmQ2Mzc4YWUtYjcwZC00ZTMxLWJhYTYtM2Y2ZTA4Y2FiYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE0ZdEHVxEGreb+iPnitnEfiPDerNMoKSjaS rNZClmoD2yjKjJOV8HpvBMUtnTltwxjP3A4VKjiu2XZ26up1kfQSRkp8nPFh1zXe T5e80Y6p2VYcd2cZscn/DCBxcTqaTxXa5zeICeiMO4l2A2iIAuoKo8tJnu49yHv9 K+mGdMqRkHoeY92TH9gK8veeDVAA4Re5cNHMdGTc1791kDqdo9nomMcZnqHZA9Dc i14NqQF/43SBa2ndk973vXFv1qf0XagfNL9kDSWqfQ9O0uyAoBPg7w+UOfUNrJgb VtDCc/4uLcoL/HTUAmwzal7yJPCMvtJBCOrqTIh8G8ZBQd3cYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF/Xd+sgRWsGfnbkPEAsWavH2/GGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NGIy MDViMC0yMDZlLTQ1YTQtOGQ5OC01NWI5OWEzMGE4ZjQvOTU5Yzk5MjAtYzY5ZS0z ODliLThhNjgtNWM0ZGM3YTEzMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzRiMjA1YjAtMjA2ZS00NWE0LThk OTgtNTViOTlhMzBhOGY0Lzc0YjIwNWIwLTIwNmUtNDVhNC04ZDk4LTU1Yjk5YTMw YThmNC5jcmwwHwYDVR0jBBgwFoAU9hy0WIpHMMK4xrpH4PbrIWYQiTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NGIyMDViMC0yMDZlLTQ1YTQtOGQ5OC01NWI5 OWEzMGE4ZjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQUvwAwQD xyTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKLJPJHydKVGmE1PD+TT/m68I/Nq3JBV3BHOyerTtlnLKmqS wq6INLioGbu9Oevf+FRypJRmsK1oXJ35tFdMLRyTvVSSpE9jttcfXZcbgj2JrRnH HQ/aq+7vxOPUfj59KxbLoTAAqH1/AMVyHZOHQOupedr54Tluu3MLTXChkMW2ezTg +k9iC+qtWlPAJgzhUjJhSiXcLnUE+nIc5NdqreYovRXcOfBVMoYoU+w1W1BNhIF6 pxEnMmsGJmBrSj2mfgx3AOWS3lj5VYkoBZJbnw1+kxKTmwxQy5R5s+IbnuAe+iAE EKdRJMw+IEA60uC5iYfCQkZrLaUbQSGSEOMZqiQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:39 2025 by rpki-client