$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa File: 5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa (raw, json) Hash identifier: FSgekidTOLXTOBhnSaPX/gUtkV+t1MBXyiUlNrmWqDI= Subject key identifier: 0C:E7:4C:A2:61:98:8E:76:B8:29:AA:0D:07:D0:33:4C:7A:F9:08:F0 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B95A79D1D3625C7071D189980 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3477 IP address blocks: 192.153.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9d:1d:36:25:c7:07:1d:18:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e3a7732f-348d-42ef-ba24-cdba9dc197f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:6d:42:29:af:79:d9:74:9c:79:bf:4c:ba: 67:06:9b:6f:62:9a:00:15:3e:2a:d3:1e:0e:da:19: 8b:83:94:ee:bd:30:19:7a:5f:bf:b0:9b:22:43:9e: 7a:6e:6c:62:ab:13:ea:48:03:e1:de:a6:13:4d:4a: 30:45:ce:72:5e:01:25:3f:43:2c:ad:ea:95:45:86: c7:bb:c8:c3:00:c7:32:11:c0:3d:35:a4:2b:49:fc: 7f:bd:85:25:31:06:2c:87:95:69:1f:32:be:66:f2: 11:dd:32:3c:e1:01:38:50:10:64:73:f2:d7:6a:39: 31:09:94:5e:30:14:2b:33:f2:f5:e4:47:31:33:64: 42:4a:78:fa:5a:7a:ba:ef:b7:2e:39:9e:88:ed:f7: db:dd:14:6d:a8:c2:df:6d:bd:bf:7a:02:c1:bd:fe: 14:c2:13:2a:9e:a0:4d:1c:26:4f:59:41:92:56:b5: da:cc:d8:bc:85:a3:77:04:14:4f:03:3f:15:d4:4b: e7:a4:ef:f7:9c:fd:1f:12:10:35:18:e4:76:ff:22: f2:41:c4:73:c4:ea:97:16:53:1a:d3:52:52:05:62: 69:9e:82:ad:3b:fc:83:b6:1d:1e:1e:b9:09:20:aa: c4:e4:12:c9:76:13:f3:ea:c0:23:ee:00:f3:aa:2f: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:4C:A2:61:98:8E:76:B8:29:AA:0D:07:D0:33:4C:7A:F9:08:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.153.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c8:4c:c8:0f:5b:06:e3:d8:fe:0c:db:47:44:af:90:a9:d7: b1:99:90:77:45:85:9b:3c:f3:aa:c6:0a:f2:46:e3:83:f8:ab: 96:8a:a1:45:94:bf:14:b3:c7:17:64:b1:e4:b2:b5:a8:b7:7a: 1a:c2:35:5b:7f:ca:33:cf:a5:68:38:9f:4c:b0:60:30:55:96: 44:b4:7e:a3:16:bc:f6:36:78:ce:7d:8c:bf:fa:8e:93:cd:72: ea:05:12:bc:50:64:39:e2:39:39:b1:e6:55:3f:55:46:c8:90: c4:4d:6d:a2:2d:6e:9a:25:4e:af:dd:0c:98:51:84:4a:2d:38: fb:8c:e5:45:08:72:ba:14:b4:20:15:e5:00:bc:c4:15:eb:b7: ef:25:0e:c7:b5:2d:d4:f6:75:fc:40:54:2f:6d:e7:54:19:ee: 15:08:e9:f8:fd:f6:c5:b6:f0:77:d9:13:65:2d:c4:2e:3c:cc: 94:33:61:62:7e:4f:fa:db:9b:3e:29:aa:a6:82:c8:41:30:9a: 15:a5:13:50:d3:c5:e4:e6:28:66:aa:39:fc:1c:66:d6:a9:65: 21:e8:a9:5e:7e:b2:36:6f:24:ac:4c:eb:eb:53:71:76:2f:1a: 4e:8e:65:56:c5:62:15:08:e7:4e:02:2b:0f:b4:26:9d:90:93: fe:b5:b6:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp50dNiXHBx0YmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTNhNzczMmYtMzQ4ZC00MmVmLWJhMjQtY2RiYTlkYzE5N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTptQimvedl0nHm/TLpnBptvYpoAFT4q0x4O 2hmLg5TuvTAZel+/sJsiQ556bmxiqxPqSAPh3qYTTUowRc5yXgElP0MsreqVRYbH u8jDAMcyEcA9NaQrSfx/vYUlMQYsh5VpHzK+ZvIR3TI84QE4UBBkc/LXajkxCZRe MBQrM/L15EcxM2RCSnj6Wnq677cuOZ6I7ffb3RRtqMLfbb2/egLBvf4UwhMqnqBN HCZPWUGSVrXazNi8haN3BBRPAz8V1EvnpO/3nP0fEhA1GOR2/yLyQcRzxOqXFlMa 01JSBWJpnoKtO/yDth0eHrkJIKrE5BLJdhPz6sAj7gDzqi8qSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAznTKJhmI52uCmqDQfQM0x6+QjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNWQwMDEwYzUtZDY5Yy0z ZDMwLWJjNjEtZGNhYWM1NTc5ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbITMgPWwbj2P4M20dEr5Cp17GZkHdFhZs886rGCvJG44P4q5aKoUWU vxSzxxdkseSytai3ehrCNVt/yjPPpWg4n0ywYDBVlkS0fqMWvPY2eM59jL/6jpPN cuoFErxQZDniOTmx5lU/VUbIkMRNbaItbpolTq/dDJhRhEotOPuM5UUIcroUtCAV 5QC8xBXrt+8lDse1LdT2dfxAVC9t51QZ7hUI6fj99sW28HfZE2UtxC48zJQzYWJ+ T/rbmz4pqqaCyEEwmhWlE1DTxeTmKGaqOfwcZtapZSHoqV5+sjZvJKxM6+tTcXYv Gk6OZVbFYhUI504CKw+0Jp2Qk/61tjI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:22:04 2025 by rpki-client