$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2238f47c-ba02-3514-b97f-738cf350a317.roa File: 2238f47c-ba02-3514-b97f-738cf350a317.roa (raw, json) Hash identifier: OvpZT9IvpKMNv8LfErcV1lkpwNfffx9W0LoR2mvdJ3c= Subject key identifier: 20:D1:11:2D:30:7D:D8:5E:5D:E2:14:C5:1E:25:31:15:3C:6C:5B:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD7C2AEDC774D38900D580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2238f47c-ba02-3514-b97f-738cf350a317.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 13367 IP address blocks: 75.72.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:7c:2a:ed:c7:74:d3:89:00:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=6ff7305f-cac0-4d39-a589-5347fb808e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:63:10:ee:fb:4d:f1:36:fe:20:7a:07:aa: 29:94:25:75:f5:a5:f1:66:41:fa:c5:49:b5:54:e4: d6:6b:34:10:13:97:17:73:bd:32:37:3e:1c:55:ed: ae:c3:28:26:15:16:c1:93:fa:eb:9f:cd:2b:20:b9: c0:1b:2c:64:07:5a:0c:c9:4a:28:ba:2c:1e:6f:f3: 0f:ec:b9:5c:14:f9:f4:a7:73:4f:6c:65:74:8c:e1: 13:c2:22:0e:7b:4f:f2:8c:a3:37:06:ac:e4:a2:1d: 4b:f1:fe:a3:15:f5:2b:cc:5e:7f:21:df:c1:41:49: d8:bc:c7:cc:77:3c:d5:e0:df:8f:a7:1b:70:37:0f: 64:d9:42:bb:75:34:d6:ab:1d:8e:92:25:56:b6:34: e0:7d:0c:50:af:6a:97:0a:a1:fa:c8:16:7a:55:ea: 5a:86:93:27:9f:fa:eb:f1:bd:8f:8d:1b:36:66:3a: 99:52:e9:5d:c5:74:b0:e3:84:50:12:b1:d8:e2:9f: 16:25:34:cc:7a:f7:38:9e:62:71:54:25:dc:33:1e: 71:aa:f0:eb:69:3c:20:84:07:83:60:56:3d:d3:13: ac:a2:7d:9c:ba:cc:49:a1:f5:7f:16:17:5d:63:bd: 2c:37:1b:ef:69:78:7c:e9:33:57:78:1c:07:5d:9f: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:11:2D:30:7D:D8:5E:5D:E2:14:C5:1E:25:31:15:3C:6C:5B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2238f47c-ba02-3514-b97f-738cf350a317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.72.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b3:02:38:55:d5:c5:93:fd:91:05:b0:7c:a1:74:dc:ab:93: 2e:9a:fb:72:64:26:64:db:c9:4b:f7:58:c4:5d:6c:95:36:08: 18:a4:dd:8a:1b:22:b6:15:1a:aa:d0:f4:8e:2e:6d:42:78:b1: 39:c7:60:1d:16:c2:69:bf:13:fa:12:d5:e0:96:34:73:de:34: 81:18:ce:27:1e:82:86:f3:88:20:97:9f:7d:39:84:c5:9a:da: f9:cd:81:f1:30:72:94:48:f9:86:7a:05:2f:f9:b6:b1:e2:77: 72:52:8c:71:5c:cb:b2:4e:c1:8b:8d:e0:07:15:22:2d:d9:43: 49:97:78:1c:08:69:6a:55:c6:85:fe:b1:ca:b7:ae:4a:34:de: 76:2b:27:53:e3:94:40:32:d2:a5:08:56:70:31:47:ee:06:04: 5b:ed:9a:42:3b:77:6b:61:66:5d:11:db:4a:e5:76:45:3d:e9: 74:f1:fc:ae:b6:ec:26:4f:2d:91:94:c6:7a:66:f1:3b:db:df: 9a:16:b9:0f:73:65:ae:0a:a7:ca:f8:b3:10:fe:2f:d1:76:c1: e7:51:e9:a2:b6:19:38:bf:97:64:86:cb:fd:81:ec:1c:34:b9: 40:62:d1:da:e3:19:28:93:f2:d4:49:3b:ea:12:26:89:2c:d8: 6b:f8:a9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Xwq7cd004kA1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NmZmNzMwNWYtY2FjMC00ZDM5LWE1ODktNTM0N2ZiODA4ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvahjEO77TfE2/iB6B6oplCV19aXxZkH6xUm1 VOTWazQQE5cXc70yNz4cVe2uwygmFRbBk/rrn80rILnAGyxkB1oMyUoouiweb/MP 7LlcFPn0p3NPbGV0jOETwiIOe0/yjKM3Bqzkoh1L8f6jFfUrzF5/Id/BQUnYvMfM dzzV4N+PpxtwNw9k2UK7dTTWqx2OkiVWtjTgfQxQr2qXCqH6yBZ6VepahpMnn/rr 8b2PjRs2ZjqZUuldxXSw44RQErHY4p8WJTTMevc4nmJxVCXcMx5xqvDraTwghAeD YFY90xOson2cusxJofV/FhddY70sNxvvaXh86TNXeBwHXZ9rSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDRES0wfdheXeIUxR4lMRU8bFuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIzOGY0N2MtYmEwMi0z NTE0LWI5N2YtNzM4Y2YzNTBhMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS0hUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKzAjhV1cWT/ZEFsHyhdNyrky6a+3JkJmTbyUv3WMRdbJU2CBik3Yob IrYVGqrQ9I4ubUJ4sTnHYB0Wwmm/E/oS1eCWNHPeNIEYzicegobziCCXn305hMWa 2vnNgfEwcpRI+YZ6BS/5trHid3JSjHFcy7JOwYuN4AcVIi3ZQ0mXeBwIaWpVxoX+ scq3rko03nYrJ1PjlEAy0qUIVnAxR+4GBFvtmkI7d2thZl0R20rldkU96XTx/K62 7CZPLZGUxnpm8Tvb35oWuQ9zZa4Kp8r4sxD+L9F2wedR6aK2GTi/l2SGy/2B7Bw0 uUBi0drjGSiT8tRJO+oSJoks2Gv4qaA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:13 2025 by rpki-client