$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9fc095c-6da5-3a71-84a7-7aa61e8071be.roa File: b9fc095c-6da5-3a71-84a7-7aa61e8071be.roa (raw, json) Hash identifier: xq/ma2g0ZVAVN5FXt89i5zpnKMauf9BxpE+9pDvU0sQ= Subject key identifier: B9:A1:0C:11:D2:01:63:EA:AC:3B:65:91:05:6A:97:7D:26:7B:EB:F1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D60A82EE4B91C7D377040 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9fc095c-6da5-3a71-84a7-7aa61e8071be.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 97.87.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:60:a8:2e:e4:b9:1c:7d:37:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=a58a2e53-96bb-453b-9c76-6f0b35dd905c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:bc:04:79:e4:a6:46:2b:8c:04:6b:b6:49: 36:af:72:02:a7:39:4e:a2:85:ee:8d:dc:00:f1:db: b0:dc:4a:41:34:26:fc:8a:46:ee:59:ba:49:8e:3a: 60:fd:38:e6:39:ba:b5:51:d1:49:da:8a:99:88:64: be:f9:3a:11:44:35:8b:68:93:b6:89:a5:3b:3c:7d: 4c:da:d4:e3:be:ef:b7:df:7f:43:f5:78:f7:09:ba: 14:13:79:11:39:72:eb:fb:23:fa:d5:b1:38:af:15: 38:d3:2d:04:b9:9c:5a:d2:47:d5:35:76:dc:7b:e1: b0:f2:07:e4:76:d4:15:21:5e:5a:37:63:b6:0c:e5: 66:8f:f2:3d:66:25:83:56:0a:7f:e9:d8:f7:3c:95: 2d:69:47:88:fb:49:17:ea:f3:43:04:3b:33:42:48: db:0b:ed:01:32:82:ad:f8:b1:78:9d:f0:99:71:19: e7:9e:fc:4e:9e:93:83:29:d2:7c:11:cc:b0:b4:7b: 23:93:14:98:cc:25:b8:90:f9:3c:20:f4:ee:53:e7: 91:49:2a:88:7d:e2:6d:7a:45:08:4e:0b:48:62:1d: b4:8f:c9:b8:45:6c:6c:de:6f:9d:d1:51:1d:27:b4: d0:a3:33:a5:ba:15:c1:1c:ff:ee:fa:c3:70:87:d3: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:0C:11:D2:01:63:EA:AC:3B:65:91:05:6A:97:7D:26:7B:EB:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9fc095c-6da5-3a71-84a7-7aa61e8071be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.87.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1e:73:59:7c:d1:c9:d0:d2:7f:db:7a:32:68:15:c4:1f:26: 65:07:f5:85:82:33:4d:67:b3:72:cf:95:4e:8f:60:3d:96:63: 44:c6:0f:d2:cf:69:4d:60:b8:21:30:89:ac:e1:75:c5:ce:32: 96:b4:92:60:e2:18:a8:3e:ce:d6:17:2b:8d:4e:5a:e9:6c:0f: 3e:87:e4:5d:82:f9:90:f7:15:b5:e7:85:91:98:0e:54:de:5f: 4b:36:48:07:42:95:9d:36:71:46:2e:db:eb:55:cd:8f:73:43: e6:cb:f3:c5:e3:07:2d:e9:5f:24:d2:ab:b2:10:54:86:75:f6: 22:d7:9a:8f:1b:39:83:d7:14:13:e2:b9:91:d2:cf:7c:97:3e: f4:f3:2c:d4:67:98:46:0e:d0:31:8d:12:7b:b6:25:21:8b:dc: 9f:89:1a:d1:a8:30:f7:58:c2:27:38:ea:7e:d7:02:85:b0:74: e8:4b:94:fd:d6:67:4d:a2:26:4e:7d:f0:46:d3:92:20:65:cf: b0:77:95:a3:f3:e3:b8:05:ca:51:01:5b:07:59:b7:66:14:63: e7:52:68:c7:88:2c:c2:a5:bd:ef:12:a8:44:72:c1:cf:bd:83: aa:c9:b4:35:c5:0c:19:47:9b:61:1f:da:9a:c4:f4:35:3a:19: e2:81:1c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHWCoLuS5HH03cEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YTU4YTJlNTMtOTZiYi00NTNiLTljNzYtNmYwYjM1ZGQ5MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHy8BHnkpkYrjARrtkk2r3ICpzlOooXujdwA 8duw3EpBNCb8ikbuWbpJjjpg/TjmObq1UdFJ2oqZiGS++ToRRDWLaJO2iaU7PH1M 2tTjvu+3339D9Xj3CboUE3kROXLr+yP61bE4rxU40y0EuZxa0kfVNXbce+Gw8gfk dtQVIV5aN2O2DOVmj/I9ZiWDVgp/6dj3PJUtaUeI+0kX6vNDBDszQkjbC+0BMoKt +LF4nfCZcRnnnvxOnpODKdJ8EcywtHsjkxSYzCW4kPk8IPTuU+eRSSqIfeJtekUI TgtIYh20j8m4RWxs3m+d0VEdJ7TQozOluhXBHP/u+sNwh9OrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmhDBHSAWPqrDtlkQVql30me+vxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjlmYzA5NWMtNmRhNS0z YTcxLTg0YTctN2FhNjFlODA3MWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUec1l80cnQ0n/bejJoFcQfJmUH9YWCM01ns3LPlU6PYD2WY0TGD9LP aU1guCEwiazhdcXOMpa0kmDiGKg+ztYXK41OWulsDz6H5F2C+ZD3FbXnhZGYDlTe X0s2SAdClZ02cUYu2+tVzY9zQ+bL88XjBy3pXyTSq7IQVIZ19iLXmo8bOYPXFBPi uZHSz3yXPvTzLNRnmEYO0DGNEnu2JSGL3J+JGtGoMPdYwic46n7XAoWwdOhLlP3W Z02iJk598EbTkiBlz7B3laPz47gFylEBWwdZt2YUY+dSaMeILMKlve8SqERywc+9 g6rJtDXFDBlHm2Ef2prE9DU6GeKBHIg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:40 2025 by rpki-client