$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e3fc475d-f445-377e-9c02-3bbb66043806.roa File: e3fc475d-f445-377e-9c02-3bbb66043806.roa (raw, json) Hash identifier: 1W7b85UYmVy+vjknLoPoASMKfpCMnWKWozT9uFqejR4= Subject key identifier: 9E:9F:1A:2D:83:67:86:37:F0:8D:ED:92:DF:95:2C:CC:31:73:8F:EE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B072E57EA32654C1F495440 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e3fc475d-f445-377e-9c02-3bbb66043806.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 75.154.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2e:57:ea:32:65:4c:1f:49:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=fa6e0bb0-e204-4e29-ae93-6dbf3edf1332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:29:b5:1b:af:57:0a:78:01:cb:4f:a7:ef: d9:0c:23:9b:bd:2e:11:18:79:9c:3f:bb:ed:ac:67: fb:0a:09:10:aa:b5:3e:e2:5d:26:78:c7:cf:d6:c2: 6f:4b:08:3e:a3:ab:46:1a:e7:9c:3d:31:07:c4:30: 1b:ba:23:df:c1:fc:29:c1:16:c0:bd:ba:04:09:fb: 09:09:6d:f2:e5:1d:19:a2:50:b6:db:4d:f3:1d:47: 1e:4e:54:25:df:42:ed:eb:93:35:64:89:ee:4b:01: 7c:8d:49:66:31:99:cb:1b:ed:c1:48:e7:5d:27:da: 61:1a:5d:f6:a3:d3:67:7f:10:bf:ee:fe:ba:21:89: 39:54:8f:23:1b:fe:ee:88:0f:7b:20:65:ca:ff:d2: f4:77:ba:30:8f:a0:e4:a9:1a:85:6b:b8:e7:a2:8b: 59:7c:a9:83:df:ff:f1:5e:1b:10:f3:86:b0:35:c5: cc:8f:90:a0:95:67:19:5b:68:ce:92:31:ad:e7:74: 10:d9:cc:85:8f:38:cc:4b:42:e8:93:e9:ce:25:a0: f1:04:af:99:c6:af:b9:79:02:f1:25:25:56:18:e9: 1a:84:a5:16:f1:c0:69:ab:8e:f3:57:ab:f4:f0:93: b6:76:2f:ea:d6:03:e7:4c:74:6c:c4:32:4b:1d:8e: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9F:1A:2D:83:67:86:37:F0:8D:ED:92:DF:95:2C:CC:31:73:8F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e3fc475d-f445-377e-9c02-3bbb66043806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.154.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:af:e6:5a:ec:91:ec:2a:01:54:8b:d9:d3:1b:28:96:62:3c: 78:81:a2:20:dc:c6:fb:57:c0:f9:41:52:94:8e:c0:1f:1b:c3: 00:9d:30:78:2f:da:85:10:20:f3:95:ca:10:5c:18:95:46:6c: 50:4e:d0:d7:4d:00:50:d8:32:46:10:d0:40:51:31:97:97:6a: e5:66:97:e3:06:e2:84:6e:ef:71:55:eb:16:e6:4d:9a:28:15: ce:1b:7d:e7:92:b9:1b:5f:f7:0e:39:47:d9:e8:98:ef:22:00: 4e:97:5b:19:67:12:a5:81:87:07:38:58:14:c4:dc:1f:e5:8b: 6f:47:cd:fe:04:61:49:ee:79:2a:55:59:d8:ba:80:32:de:fa: f8:85:10:5c:d3:ec:1c:78:5f:3a:c0:6e:f4:b1:45:62:40:3d: ad:51:77:82:9e:0a:0f:17:43:3d:d5:cd:9d:3a:2f:66:48:e6: f9:ff:06:29:54:ce:76:3a:46:1f:02:59:d6:3f:da:49:a6:38: 04:e1:59:50:cf:7c:83:c7:b7:9a:d6:cb:96:f3:31:6a:39:44: 7c:06:0c:40:2f:b3:ce:ba:ef:a3:1e:fd:33:33:c8:2b:b9:d6: 93:3a:e2:ef:72:42:bd:fb:a9:d4:6f:0c:3d:16:af:22:84:b0: ef:91:db:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBy5X6jJlTB9JVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZmE2ZTBiYjAtZTIwNC00ZTI5LWFlOTMtNmRiZjNlZGYxMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsQptRuvVwp4ActPp+/ZDCObvS4RGHmcP7vt rGf7CgkQqrU+4l0meMfP1sJvSwg+o6tGGuecPTEHxDAbuiPfwfwpwRbAvboECfsJ CW3y5R0ZolC2203zHUceTlQl30Lt65M1ZInuSwF8jUlmMZnLG+3BSOddJ9phGl32 o9NnfxC/7v66IYk5VI8jG/7uiA97IGXK/9L0d7owj6DkqRqFa7jnootZfKmD3//x XhsQ84awNcXMj5CglWcZW2jOkjGt53QQ2cyFjzjMS0Lok+nOJaDxBK+Zxq+5eQLx JSVWGOkahKUW8cBpq47zV6v08JO2di/q1gPnTHRsxDJLHY5K8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6fGi2DZ4Y38I3tkt+VLMwxc4/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTNmYzQ3NWQtZjQ0NS0z NzdlLTljMDItM2JiYjY2MDQzODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGS5pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiv5lrskewqAVSL2dMbKJZiPHiBoiDcxvtXwPlBUpSOwB8bwwCdMHgv 2oUQIPOVyhBcGJVGbFBO0NdNAFDYMkYQ0EBRMZeXauVml+MG4oRu73FV6xbmTZoo Fc4bfeeSuRtf9w45R9nomO8iAE6XWxlnEqWBhwc4WBTE3B/li29Hzf4EYUnueSpV Wdi6gDLe+viFEFzT7Bx4XzrAbvSxRWJAPa1Rd4KeCg8XQz3VzZ06L2ZI5vn/BilU znY6Rh8CWdY/2kmmOAThWVDPfIPHt5rWy5bzMWo5RHwGDEAvs86676Me/TMzyCu5 1pM64u9yQr37qdRvDD0WryKEsO+R2zc= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:04 2025 by rpki-client