$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40f9979e-8efd-307a-bd7d-93e748145bbc.roa File: 40f9979e-8efd-307a-bd7d-93e748145bbc.roa (raw, json) Hash identifier: 9Il+Nk8dhlX9E+iCwTdgiK4bicu1MHcd5sljFf/e5GE= Subject key identifier: F4:72:D6:34:C7:30:BC:EF:9D:0C:70:0C:86:55:3E:40:9E:2B:5F:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB817D975B160B8C797A780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40f9979e-8efd-307a-bd7d-93e748145bbc.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 75.73.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:17:d9:75:b1:60:b8:c7:97:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bb1e6d47-d3a1-4331-a3a9-38c4910c6019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:20:c7:ab:76:17:c3:6c:28:0d:26:9c:d4: 02:e8:26:b7:8e:60:d6:8d:8e:39:e4:2d:52:7f:1d: 10:b7:f3:77:f9:b4:bd:a5:47:c1:5d:1a:f0:7f:7a: a1:85:8b:d9:81:b5:61:4c:6b:aa:7f:89:14:1e:df: bb:3e:1b:53:d7:f2:2e:15:7e:53:41:0e:ae:2e:88: d4:bc:32:3e:db:53:5e:29:72:e5:9e:10:c4:77:e7: 52:dd:c8:68:82:cc:05:5c:e7:5d:96:a3:c5:12:b8: 07:13:6b:3c:99:de:dd:88:3a:a2:4f:e5:19:eb:2c: ae:65:2e:7d:4f:a5:f6:c2:f3:62:23:4b:94:7d:c0: 4f:7c:0d:86:7d:f2:1e:b8:70:05:c6:ff:2e:56:40: 58:a6:ff:ce:e6:57:7d:f8:18:a3:51:f6:92:46:d2: b9:f9:a2:aa:5d:ad:46:bf:68:15:d7:8a:14:1f:61: 35:fc:60:93:bb:87:76:ef:a0:61:b4:5f:43:cd:bf: 24:2b:03:5d:b1:61:96:4a:a4:12:64:cf:61:08:d3: 3b:4e:d4:73:1d:e5:d8:c1:5f:aa:6d:7f:09:e6:52: b8:2d:02:32:eb:08:81:08:96:f0:0e:96:07:12:99: cc:78:99:5a:6b:51:aa:38:32:1c:37:5a:e2:af:f3: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:D6:34:C7:30:BC:EF:9D:0C:70:0C:86:55:3E:40:9E:2B:5F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40f9979e-8efd-307a-bd7d-93e748145bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.73.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3f:52:53:03:51:bc:52:d1:60:49:a8:13:29:b7:07:93:4e: 4d:0a:1d:74:81:c4:63:ac:1e:a6:50:9f:ab:04:8a:56:5b:04: ec:c8:26:c1:d5:7e:53:5d:b6:d5:7b:55:64:09:df:3c:d6:fa: 93:30:48:10:ad:4b:2c:cb:63:6f:84:35:11:f2:7b:2c:d3:75: 4c:f7:3b:bb:ce:92:82:72:36:ea:1f:61:5d:79:fd:56:01:78: 65:a8:00:b7:d9:c1:e1:90:06:be:ab:2f:66:d0:3b:6d:34:09: 61:24:f9:2e:2a:6e:d1:8c:2d:a9:42:f0:67:95:15:0c:53:46: ee:c9:e6:8b:07:c5:7c:a4:2b:49:8e:f0:26:9a:7b:c0:2f:63: 9d:34:1c:d0:c0:f7:f3:0c:9d:b3:72:f9:32:d5:42:2f:8d:26: a4:12:30:aa:9c:1a:84:f9:b7:24:b0:df:93:84:79:68:11:b7: 0a:9d:fa:6d:ad:34:a3:79:88:3f:8e:28:83:34:21:4e:59:bc: 7d:06:b5:cd:9c:12:07:98:48:0a:a7:9c:d1:da:2a:74:0e:ee: be:0c:43:37:c7:3f:19:3d:9a:91:6f:fe:48:e2:52:6b:1c:ea: e8:d9:ab:c7:77:bb:34:d6:21:36:52:0a:20:de:f4:0d:e2:07: 71:09:d0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uBfZdbFguMeXp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmIxZTZkNDctZDNhMS00MzMxLWEzYTktMzhjNDkxMGM2MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR0gx6t2F8NsKA0mnNQC6Ca3jmDWjY455C1S fx0Qt/N3+bS9pUfBXRrwf3qhhYvZgbVhTGuqf4kUHt+7PhtT1/IuFX5TQQ6uLojU vDI+21NeKXLlnhDEd+dS3chogswFXOddlqPFErgHE2s8md7diDqiT+UZ6yyuZS59 T6X2wvNiI0uUfcBPfA2GffIeuHAFxv8uVkBYpv/O5ld9+BijUfaSRtK5+aKqXa1G v2gV14oUH2E1/GCTu4d276BhtF9Dzb8kKwNdsWGWSqQSZM9hCNM7TtRzHeXYwV+q bX8J5lK4LQIy6wiBCJbwDpYHEpnMeJlaa1GqODIcN1rir/OJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRy1jTHMLzvnQxwDIZVPkCeK1/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBmOTk3OWUtOGVmZC0z MDdhLWJkN2QtOTNlNzQ4MTQ1YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS0lOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA/UlMDUbxS0WBJqBMptweTTk0KHXSBxGOsHqZQn6sEilZbBOzIJsHV flNdttV7VWQJ3zzW+pMwSBCtSyzLY2+ENRHyeyzTdUz3O7vOkoJyNuofYV15/VYB eGWoALfZweGQBr6rL2bQO200CWEk+S4qbtGMLalC8GeVFQxTRu7J5osHxXykK0mO 8Caae8AvY500HNDA9/MMnbNy+TLVQi+NJqQSMKqcGoT5tySw35OEeWgRtwqd+m2t NKN5iD+OKIM0IU5ZvH0Gtc2cEgeYSAqnnNHaKnQO7r4MQzfHPxk9mpFv/kjiUmsc 6ujZq8d3uzTWITZSCiDe9A3iB3EJ0Ao= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:23 2025 by rpki-client