$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/915445f1-cda5-3469-ab9f-b79a3105b54d.roa File: 915445f1-cda5-3469-ab9f-b79a3105b54d.roa (raw, json) Hash identifier: EvF4JpyAhOMiKzEFDR0jdEb49d1so+Kk30+3tPy96i4= Subject key identifier: 89:5A:5B:D9:A4:C0:AD:8A:4E:41:69:73:64:F0:74:37:6F:8F:C2:7F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E047897503798E4DB7980 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/915445f1-cda5-3469-ab9f-b79a3105b54d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 97.95.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:04:78:97:50:37:98:e4:db:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0bcc910e-28c2-42fb-a784-dfb5b2787ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:fd:6b:6a:84:e2:34:4d:12:5f:83:bb:d9: 0f:0d:24:17:62:ba:fd:3c:25:6b:fa:eb:27:db:e2: 59:f7:42:29:81:60:e0:6e:d0:83:4d:2d:ce:2e:90: c8:2b:9a:05:03:c7:cc:99:d8:20:73:bb:b8:7b:18: 1b:2d:cb:bb:7d:2d:fe:e8:c2:67:5e:99:7e:dd:61: a2:13:50:77:d0:12:6b:d3:63:a2:6f:b6:27:95:32: fc:1b:55:fd:42:ce:91:f1:85:cb:92:b7:8f:8f:aa: f7:70:be:24:15:13:fd:13:3a:2a:5c:88:ac:b4:58: 2c:eb:7d:63:ed:83:ec:b2:6c:e9:8a:5f:8d:87:be: 4b:df:8c:af:b4:98:c6:7d:3a:b2:3f:d6:a2:f1:c2: ce:33:fa:29:cf:3d:14:e4:61:51:c8:92:ec:2f:6e: 05:df:3d:94:8b:74:ca:78:e9:5c:db:a7:18:91:8c: e4:3c:81:3a:70:45:4b:ef:82:7f:a1:9e:b6:ea:b5: 60:35:37:fc:71:4a:5b:70:eb:4e:01:e6:d7:cd:b5: 3d:51:73:71:81:a7:a8:b9:c4:d4:2e:5f:89:8a:b2: 91:c5:ea:a4:b8:91:09:8b:60:dd:87:75:fc:45:5e: ad:30:36:41:6c:22:9a:a4:02:73:7f:80:0f:ae:5c: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5A:5B:D9:A4:C0:AD:8A:4E:41:69:73:64:F0:74:37:6F:8F:C2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/915445f1-cda5-3469-ab9f-b79a3105b54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.95.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:38:85:eb:fc:dc:f4:00:07:a5:f5:22:52:f5:46:9e:04:12: 47:b4:42:51:2c:93:54:77:37:88:d8:af:02:81:ef:b9:ab:b2: fa:08:f6:3b:42:1f:c7:45:06:82:ca:fc:b1:52:83:61:69:c7: 27:92:c4:3c:d8:9d:e7:57:32:d9:57:f8:72:da:54:71:51:f4: d0:8a:0b:5e:b7:e1:e9:6f:ad:7c:8d:07:15:df:78:eb:4d:de: 05:ac:8e:89:c3:23:46:47:6d:c6:1d:9e:6a:04:3e:d9:39:e1: 61:c7:3a:26:40:29:6e:fe:87:f5:c8:91:16:7e:48:cc:10:01: b9:a8:ec:b5:52:84:0f:f4:81:d7:82:1c:5d:f7:9f:dc:3d:a6: 22:86:ab:f4:04:17:fb:f5:5e:b2:f0:f4:7e:13:01:6c:1c:7b: cd:5f:47:f3:9d:c4:d0:46:a2:b4:c6:1a:ec:cc:07:db:cb:d0: bd:7b:f7:60:17:50:e2:45:5a:c8:49:6e:f9:d3:51:d3:fd:61: db:1e:74:6d:6d:42:9d:f3:b9:b7:ad:39:20:6a:2f:eb:d4:8c: b4:af:d8:86:03:4e:90:62:bd:ea:6d:d0:cd:a5:aa:84:e1:f9: 6a:b8:47:31:00:b9:e2:d4:68:82:e9:44:c3:3e:ad:12:4a:bf: 10:c9:e5:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgR4l1A3mOTbeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGJjYzkxMGUtMjhjMi00MmZiLWE3ODQtZGZiNWIyNzg3ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWf9a2qE4jRNEl+Du9kPDSQXYrr9PCVr+usn 2+JZ90IpgWDgbtCDTS3OLpDIK5oFA8fMmdggc7u4exgbLcu7fS3+6MJnXpl+3WGi E1B30BJr02Oib7YnlTL8G1X9Qs6R8YXLkrePj6r3cL4kFRP9EzoqXIistFgs631j 7YPssmzpil+Nh75L34yvtJjGfTqyP9ai8cLOM/opzz0U5GFRyJLsL24F3z2Ui3TK eOlc26cYkYzkPIE6cEVL74J/oZ626rVgNTf8cUpbcOtOAebXzbU9UXNxgaeoucTU Ll+JirKRxeqkuJEJi2Ddh3X8RV6tMDZBbCKapAJzf4APrlybxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlaW9mkwK2KTkFpc2TwdDdvj8J/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTE1NDQ1ZjEtY2RhNS0z NDY5LWFiOWYtYjc5YTMxMDViNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYV8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA4hev83PQAB6X1IlL1Rp4EEke0QlEsk1R3N4jYrwKB77mrsvoI9jtC H8dFBoLK/LFSg2FpxyeSxDzYnedXMtlX+HLaVHFR9NCKC1634elvrXyNBxXfeOtN 3gWsjonDI0ZHbcYdnmoEPtk54WHHOiZAKW7+h/XIkRZ+SMwQAbmo7LVShA/0gdeC HF33n9w9piKGq/QEF/v1XrLw9H4TAWwce81fR/OdxNBGorTGGuzMB9vL0L1792AX UOJFWshJbvnTUdP9YdsedG1tQp3zubetOSBqL+vUjLSv2IYDTpBivept0M2lqoTh +Wq4RzEAueLUaILpRMM+rRJKvxDJ5UM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:30:07 2025 by rpki-client