$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965da8fc-4acc-300c-8c51-680a4dccdc6b.roa File: 965da8fc-4acc-300c-8c51-680a4dccdc6b.roa (raw, json) Hash identifier: 6PFb5SCDEiv8V71QksgvJBhaTLax5PZc1uEek1f5nao= Subject key identifier: C4:38:6B:D7:72:C4:8D:76:34:A9:F3:7D:03:DB:17:43:7C:27:F4:B9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E071C92940A8E85C43E60 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965da8fc-4acc-300c-8c51-680a4dccdc6b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 75.131.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:07:1c:92:94:0a:8e:85:c4:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=effa9d65-15ae-466f-ab9e-dffdca78ae3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:81:ba:c1:60:de:f7:ff:f7:b4:ca:33:6a: b3:38:26:42:66:d1:2a:77:fc:97:9f:e2:3a:b8:63: 0b:f1:e0:c6:77:ae:54:b3:ff:01:ca:29:f9:92:fd: c3:69:32:42:58:23:ba:ac:e2:78:50:7c:50:d2:e1: 68:83:0e:e2:ca:db:57:a9:a9:12:52:93:95:ca:44: 06:a1:3f:bd:03:98:b7:d1:42:46:a7:4d:f3:e1:d7: 74:d4:1e:2c:fa:25:ab:60:fa:40:7d:51:41:6e:ac: d3:2e:9d:48:95:4d:b4:18:1b:11:3d:34:7c:10:a2: 9c:ac:f7:03:e6:65:1a:d8:f7:9a:ba:79:17:ac:10: 47:af:ab:c9:71:fe:9c:5f:bd:64:f7:e8:f2:7c:9c: e3:73:6a:37:e8:3c:18:20:c6:a4:45:bd:27:65:9a: 41:82:ad:25:70:c5:29:5d:8b:b3:6d:3f:8c:26:d4: 02:a2:1d:cf:21:d2:29:0e:f8:4e:bb:0f:b4:86:11: ff:34:dc:55:d8:80:4a:0f:02:ff:9f:90:c0:fd:87: a9:52:0f:ec:f1:f0:06:8d:dd:35:e1:40:e9:92:76: 6b:ed:11:ed:fe:ca:bd:07:1d:9d:9f:53:49:34:1a: 71:04:a7:75:00:59:ba:27:b0:41:3c:15:2a:c5:09: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:38:6B:D7:72:C4:8D:76:34:A9:F3:7D:03:DB:17:43:7C:27:F4:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965da8fc-4acc-300c-8c51-680a4dccdc6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 75.131.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:26:6e:42:7b:0d:c1:4f:49:28:cf:b2:9f:6c:84:b0:1d:88: 5d:40:f0:16:1f:17:17:e2:22:24:33:91:53:f2:13:5f:47:08: ec:a9:69:18:42:34:fe:53:f4:69:10:62:aa:8a:28:b2:40:78: bb:4c:8e:0e:33:ae:b9:b1:34:bd:9f:8f:96:5c:ae:b3:30:28: af:84:8f:bb:5d:9d:cc:b2:bc:64:70:46:3b:f0:ec:9c:b1:e6: e1:5a:06:7c:3e:15:07:3b:58:6e:e4:2c:f6:f9:3a:8e:68:75: 9c:6e:e4:25:61:b7:43:59:0b:e7:a2:72:32:84:88:1a:d9:c5: 9d:03:50:0a:7d:d3:d2:7f:90:0f:6d:15:d8:ea:1f:66:ab:81: 11:de:81:51:36:7f:02:ed:22:08:f8:6d:a6:3e:72:85:70:fc: d1:97:87:47:b2:6c:34:b0:df:2f:bc:6d:27:5d:44:68:32:ae: 56:26:24:b6:f0:db:5b:b1:74:2e:58:b4:f4:d3:37:48:16:95: ac:83:73:57:12:d4:97:24:75:ae:c9:e1:2b:15:2d:27:5f:8b: f0:82:13:01:95:47:81:e9:c7:73:9b:63:ef:69:00:29:0f:e7: e8:e3:fa:01:e4:cb:b2:b3:f9:b7:89:17:40:35:96:c3:1e:fa: c8:6a:05:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgcckpQKjoXEPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZWZmYTlkNjUtMTVhZS00NjZmLWFiOWUtZGZmZGNhNzhhZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKWBusFg3vf/97TKM2qzOCZCZtEqd/yXn+I6 uGML8eDGd65Us/8Byin5kv3DaTJCWCO6rOJ4UHxQ0uFogw7iyttXqakSUpOVykQG oT+9A5i30UJGp03z4dd01B4s+iWrYPpAfVFBbqzTLp1IlU20GBsRPTR8EKKcrPcD 5mUa2PeaunkXrBBHr6vJcf6cX71k9+jyfJzjc2o36DwYIMakRb0nZZpBgq0lcMUp XYuzbT+MJtQCoh3PIdIpDvhOuw+0hhH/NNxV2IBKDwL/n5DA/YepUg/s8fAGjd01 4UDpknZr7RHt/sq9Bx2dn1NJNBpxBKd1AFm6J7BBPBUqxQn+vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ4a9dyxI12NKnzfQPbF0N8J/S5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTY1ZGE4ZmMtNGFjYy0z MDBjLThjNTEtNjgwYTRkY2NkYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS4OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANImbkJ7DcFPSSjPsp9shLAdiF1A8BYfFxfiIiQzkVPyE19HCOypaRhC NP5T9GkQYqqKKLJAeLtMjg4zrrmxNL2fj5ZcrrMwKK+Ej7tdncyyvGRwRjvw7Jyx 5uFaBnw+FQc7WG7kLPb5Oo5odZxu5CVht0NZC+eicjKEiBrZxZ0DUAp909J/kA9t FdjqH2argRHegVE2fwLtIgj4baY+coVw/NGXh0eybDSw3y+8bSddRGgyrlYmJLbw 21uxdC5YtPTTN0gWlayDc1cS1Jckda7J4SsVLSdfi/CCEwGVR4Hpx3ObY+9pACkP 5+jj+gHky7Kz+beJF0A1lsMe+shqBQs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:07 2025 by rpki-client