$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a220f03f-a8bf-3016-acc0-d62f1f32b450.roa File: a220f03f-a8bf-3016-acc0-d62f1f32b450.roa (raw, json) Hash identifier: /bBh1LB3yvX0zLUhQB0rv8/GiihiE06lIhHLa9c+QL4= Subject key identifier: 07:8F:81:77:2D:0E:BD:43:57:FE:93:C6:72:F6:7A:0E:FB:D0:C8:33 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E0D013A9F9AD938E867F8 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a220f03f-a8bf-3016-acc0-d62f1f32b450.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 75.136.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:0d:01:3a:9f:9a:d9:38:e8:67:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=51fb9aa8-d9be-4b0a-a486-c20a1c696e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:bf:d4:28:ea:65:b9:c8:71:3d:ff:e4:5d: b3:59:26:c8:73:3c:2b:fe:d8:15:f4:21:0d:80:ea: b9:8f:e2:5b:b4:fd:2d:ba:94:9f:aa:f3:5d:db:b3: d8:79:a1:d8:80:c4:23:87:75:9c:c3:e0:dd:ab:96: 0c:98:94:1d:2f:1e:a9:62:0c:e2:5c:16:d6:48:f3: 17:f1:6d:1e:3a:09:8f:5f:68:f5:ea:e3:b1:ed:31: 32:3d:d4:b0:f9:2b:04:1e:9d:c7:7d:80:59:18:b4: e4:38:27:f4:7f:0f:30:40:c6:d5:4a:bf:95:ca:a3: fa:4a:5b:fe:8c:47:ff:a1:5e:68:42:d8:d1:e2:30: 3f:61:06:8f:ff:01:4f:b3:18:cc:75:17:97:89:da: 69:73:05:26:7c:84:a5:e0:b0:2c:74:88:df:43:95: 09:ba:dc:f3:92:53:f0:76:a9:75:a3:6d:8e:2f:cc: ac:80:05:bb:a6:83:9c:df:e7:b2:0a:23:ec:5e:a3: 4a:a6:53:60:20:8e:02:d1:e8:e4:6e:93:46:08:ec: 7d:b9:43:72:19:e4:6c:c3:ff:35:10:84:9d:f2:9e: 89:14:20:a3:86:76:ad:93:40:65:8d:5e:10:2f:7c: 59:e3:19:a0:01:72:7f:11:3d:e7:64:e5:4d:c5:aa: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8F:81:77:2D:0E:BD:43:57:FE:93:C6:72:F6:7A:0E:FB:D0:C8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a220f03f-a8bf-3016-acc0-d62f1f32b450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 75.136.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f7:64:e3:a4:1f:71:d1:93:7f:26:f8:a8:4a:4f:89:c0:78: a3:fe:05:ce:c2:5f:31:ea:c2:cb:1c:5c:36:1f:25:c6:13:42: 94:90:cd:f9:4b:46:2c:08:14:75:18:45:11:dc:4d:7d:f4:10: 65:e4:52:45:46:43:5b:cd:41:94:47:a6:92:bc:c9:7d:4a:97: 2b:e7:9e:77:8d:00:8d:a9:06:95:72:d9:59:bb:0a:ff:b5:d1: e5:16:f7:c5:fa:e7:e5:a0:1d:5f:74:37:d9:fc:fe:4c:f1:aa: 6d:68:11:e2:7e:33:c4:4b:94:3d:40:21:ee:81:e0:6d:00:32: 88:3e:a2:1c:b9:a7:85:03:a1:e5:f2:68:35:9d:51:40:b6:bf: 77:be:2b:ef:f7:a4:cd:50:ad:c7:85:b6:70:7a:0b:c9:3b:57: 2b:3a:76:f4:2d:78:5d:ac:c7:1e:89:2f:b3:d9:af:4a:7c:13: b1:a3:0d:98:23:83:8a:da:d3:93:56:1c:6e:a6:4e:36:de:c9: 25:f3:64:60:65:39:eb:93:b0:48:4a:77:6f:8f:9f:d8:57:79: 46:1b:e2:c5:83:1c:e1:08:58:14:d7:7f:b3:ae:5a:ad:17:98: 77:52:94:00:72:98:b6:dc:7f:9b:3f:26:ad:36:a1:3d:02:68: 61:c3:a8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHg0BOp+a2TjoZ/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTFmYjlhYTgtZDliZS00YjBhLWE0ODYtYzIwYTFjNjk2ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LG/1CjqZbnIcT3/5F2zWSbIczwr/tgV9CEN gOq5j+JbtP0tupSfqvNd27PYeaHYgMQjh3Wcw+Ddq5YMmJQdLx6pYgziXBbWSPMX 8W0eOgmPX2j16uOx7TEyPdSw+SsEHp3HfYBZGLTkOCf0fw8wQMbVSr+VyqP6Slv+ jEf/oV5oQtjR4jA/YQaP/wFPsxjMdReXidppcwUmfISl4LAsdIjfQ5UJutzzklPw dql1o22OL8ysgAW7poOc3+eyCiPsXqNKplNgII4C0ejkbpNGCOx9uUNyGeRsw/81 EISd8p6JFCCjhnatk0BljV4QL3xZ4xmgAXJ/ET3nZOVNxap12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAePgXctDr1DV/6TxnL2eg770MgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTIyMGYwM2YtYThiZi0z MDE2LWFjYzAtZDYyZjFmMzJiNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS4iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/3ZOOkH3HRk38m+KhKT4nAeKP+Bc7CXzHqwsscXDYfJcYTQpSQzflL RiwIFHUYRRHcTX30EGXkUkVGQ1vNQZRHppK8yX1KlyvnnneNAI2pBpVy2Vm7Cv+1 0eUW98X65+WgHV90N9n8/kzxqm1oEeJ+M8RLlD1AIe6B4G0AMog+ohy5p4UDoeXy aDWdUUC2v3e+K+/3pM1QrceFtnB6C8k7Vys6dvQteF2sxx6JL7PZr0p8E7GjDZgj g4ra05NWHG6mTjbeySXzZGBlOeuTsEhKd2+Pn9hXeUYb4sWDHOEIWBTXf7OuWq0X mHdSlABymLbcf5s/Jq02oT0CaGHDqBI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:08 2025 by rpki-client