$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0010dfda-baa7-37bf-9c9e-39992f8732a1.roa File: 0010dfda-baa7-37bf-9c9e-39992f8732a1.roa (raw, json) Hash identifier: VMKQq2jWLlXzEKQ3HIwh8H4YO7/V+DSJZBKDN3EFOZo= Subject key identifier: 50:3D:FF:30:73:53:3E:2B:6D:67:56:6D:EA:FD:C4:BE:69:8F:A7:2A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E09E8AEB3EC899DE474C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0010dfda-baa7-37bf-9c9e-39992f8732a1.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 75.137.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:09:e8:ae:b3:ec:89:9d:e4:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d85f3136-8be0-44a0-bf5e-04bb7cae7fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:90:dd:0c:54:0c:47:6e:bd:0f:28:78:30: 9e:34:fe:01:1c:cf:b3:65:0e:2e:79:83:f6:8e:d2: 38:5e:d1:bf:e6:de:91:05:54:68:50:2c:b0:cd:77: 78:26:94:80:13:37:d0:d9:a1:26:f8:b2:e5:34:d3: 01:fd:8f:a5:a4:56:0e:94:69:6d:e3:f3:e3:b8:d3: 0f:5d:ef:32:26:59:4f:47:03:86:f2:50:cc:32:99: fb:92:df:c3:38:ae:6c:46:30:00:f0:e1:89:dd:e1: 58:ae:98:8e:61:73:7d:ca:4d:f9:75:dc:71:88:c8: fa:87:71:62:3c:8b:bf:1a:1a:a7:a5:ff:bf:fd:9c: 39:6b:26:77:70:cb:2e:0b:26:21:2f:98:6f:9e:32: 73:e9:34:eb:4b:af:07:52:0a:48:b1:e9:2a:72:58: bb:12:7d:1e:7b:35:da:bb:4a:6e:dd:5a:73:7f:fc: 2b:20:76:a3:b6:0b:8a:9a:f5:9e:e7:bc:cb:64:27: 39:f6:3b:d3:74:eb:20:5e:cf:ce:e6:0e:3c:9b:77: d1:2a:e9:05:0e:e6:63:b5:5f:cf:ba:75:5e:c9:84: ed:0d:0d:87:3f:e9:83:24:2e:ae:71:de:f3:93:d9: d2:bd:20:28:36:c0:2a:b6:32:0f:ba:2c:64:00:2d: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3D:FF:30:73:53:3E:2B:6D:67:56:6D:EA:FD:C4:BE:69:8F:A7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0010dfda-baa7-37bf-9c9e-39992f8732a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 75.137.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:84:be:a0:7f:20:1f:1a:a0:b9:8f:72:51:31:3b:40:b5:da: 36:a9:f0:8e:f3:58:94:f6:24:65:33:e6:b7:03:85:5f:1c:e2: c2:52:9f:25:54:b9:9b:d1:77:90:26:fb:70:1d:15:a4:ca:21: 8c:1b:29:b8:01:cf:e4:3d:a9:6a:b4:86:92:e7:97:a0:61:99: d0:81:f1:15:c7:11:b4:1c:a7:68:86:c7:0a:27:a1:a3:de:84: 0f:7b:3b:06:3e:ec:50:63:3f:5b:4e:1e:7c:4d:22:35:54:48: 60:25:70:be:3f:47:00:d7:2f:00:39:bf:40:a3:22:7e:93:66: dc:38:60:b0:a2:ee:ad:79:16:67:35:fa:da:72:d6:27:3f:46: b7:80:33:b5:8e:58:31:da:ba:02:87:93:09:46:dc:ad:d9:d1: 5c:f7:37:b3:43:5e:35:72:3c:5a:98:02:ff:5b:c0:6b:ad:10: 85:9a:88:34:cf:9e:d1:c6:97:0a:22:5f:78:3d:42:b2:a8:c6: df:e9:a2:b7:8f:c4:79:f8:84:47:c6:54:a5:79:82:d6:08:3b: 74:5c:73:97:a4:3a:e4:80:9e:25:48:60:0a:f4:e6:cb:2d:a7: f6:cb:5e:40:1f:c6:c0:0d:93:ef:d3:b2:39:38:da:a1:5d:f6: f3:98:07:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgnorrPsiZ3kdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDg1ZjMxMzYtOGJlMC00NGEwLWJmNWUtMDRiYjdjYWU3ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs82Q3QxUDEduvQ8oeDCeNP4BHM+zZQ4ueYP2 jtI4XtG/5t6RBVRoUCywzXd4JpSAEzfQ2aEm+LLlNNMB/Y+lpFYOlGlt4/PjuNMP Xe8yJllPRwOG8lDMMpn7kt/DOK5sRjAA8OGJ3eFYrpiOYXN9yk35ddxxiMj6h3Fi PIu/Ghqnpf+//Zw5ayZ3cMsuCyYhL5hvnjJz6TTrS68HUgpIsekqcli7En0eezXa u0pu3Vpzf/wrIHajtguKmvWe57zLZCc59jvTdOsgXs/O5g48m3fRKukFDuZjtV/P unVeyYTtDQ2HP+mDJC6ucd7zk9nSvSAoNsAqtjIPuixkAC1X8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA9/zBzUz4rbWdWber9xL5pj6cqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDAxMGRmZGEtYmFhNy0z N2JmLTljOWUtMzk5OTJmODczMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES4ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuEvqB/IB8aoLmPclExO0C12jap8I7zWJT2JGUz5rcDhV8c4sJSnyVU uZvRd5Am+3AdFaTKIYwbKbgBz+Q9qWq0hpLnl6BhmdCB8RXHEbQcp2iGxwonoaPe hA97OwY+7FBjP1tOHnxNIjVUSGAlcL4/RwDXLwA5v0CjIn6TZtw4YLCi7q15Fmc1 +tpy1ic/RreAM7WOWDHaugKHkwlG3K3Z0Vz3N7NDXjVyPFqYAv9bwGutEIWaiDTP ntHGlwoiX3g9QrKoxt/porePxHn4hEfGVKV5gtYIO3Rcc5ekOuSAniVIYAr05sst p/bLXkAfxsANk+/Tsjk42qFd9vOYB38= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:02 2025 by rpki-client