$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa File: ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa (raw, json) Hash identifier: 3GWAvt58rxE2wDpGVh8jd+VDUvgEv416dsItpE2+zWA= Subject key identifier: 8F:B7:5D:4A:9A:D9:51:4A:94:87:49:55:34:4F:3C:DC:32:8D:71:96 Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F4328584B8EACC6FEDA260CC7AFE82D00 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 76.76.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c6:fe:da:26:0c:c7:af:e8:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=394ce13f-2f26-4260-bb06-00ffd1024a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:e9:16:2f:9a:43:51:75:72:84:60:2b:ad: d4:67:c7:c0:df:e5:ce:7e:ba:66:42:0b:2a:56:7a: f4:7c:5b:11:63:98:ab:18:ae:c4:50:a3:58:ee:28: 82:45:b3:a2:85:21:ec:73:11:18:bc:5e:45:72:df: bb:89:11:83:40:b0:c8:49:7e:b7:14:a7:36:5b:08: e2:f0:90:0f:5a:8c:b5:02:a1:1e:a2:36:7c:1c:13: 53:9b:35:4a:87:fd:3d:c8:4d:f6:bc:f1:c6:07:ca: 58:94:46:2e:95:ec:0d:1e:5d:c2:b5:7e:32:5e:82: fc:5c:bd:60:06:db:d1:c8:b2:8a:d5:49:02:8f:fe: f7:29:13:61:41:af:53:45:ee:53:84:45:4d:84:dd: bb:1d:83:6a:57:53:ed:ab:9b:7d:3c:90:2c:8f:a0: 15:00:a2:5b:e6:ba:af:18:73:20:05:34:39:fe:f3: 94:63:93:a4:0e:97:f3:82:11:ff:34:96:3e:d5:17: 77:4d:2d:94:1d:80:af:96:7d:95:eb:9f:be:aa:70: ef:e4:d8:b0:eb:06:ba:f9:0d:08:a6:72:53:2a:0c: fe:1c:e0:d0:2a:fb:64:da:35:d1:16:4b:55:ca:05: cc:0f:a6:e3:12:1f:f8:15:55:dc:99:dd:4c:ad:8e: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B7:5D:4A:9A:D9:51:4A:94:87:49:55:34:4F:3C:DC:32:8D:71:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 76.76.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:91:6a:24:29:99:7a:1a:36:67:3f:d2:9b:36:0d:e6:88:4c: 63:55:69:b9:50:7e:af:ba:05:d5:8d:0a:38:21:bd:e8:cf:30: 3f:18:1d:6e:1f:a6:45:b0:11:84:9c:e6:bb:77:b5:08:6d:4e: 3f:3d:4f:e0:4b:6e:06:f0:d5:c5:20:03:50:17:7e:df:ee:10: 8b:f8:00:d9:1c:5b:21:59:da:92:8b:e3:1c:ae:b9:1b:ec:8c: 2b:b3:20:9f:47:c4:f6:3d:bd:5d:95:f7:e2:45:2e:7c:73:85: 98:31:3b:db:3a:cd:1a:a7:10:82:3c:b6:36:86:01:f5:7b:39: 51:fa:7f:ef:fa:d0:cd:0f:42:21:81:56:f0:6f:39:cb:62:27: 97:b5:19:20:4e:72:16:45:c6:24:d2:c7:ff:2d:59:2b:a9:50: 74:44:1a:2c:fc:bc:76:63:23:23:74:6d:62:82:4d:14:f2:6f: 97:75:fd:f0:bf:44:7c:90:3e:fa:e0:11:03:2b:8d:63:21:0e: e8:a8:17:1f:77:4c:a0:c4:6b:2b:e3:d6:3c:01:d3:d2:99:3c: db:18:1f:36:77:d6:0b:b9:36:bc:e0:89:86:19:ce:2b:2d:73: 3e:57:d3:aa:d6:0a:fa:e9:a5:8c:b0:6b:c0:ca:6f:d3:02:44: 65:57:55:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMb+2iYMx6/oLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk Mzk0Y2UxM2YtMmYyNi00MjYwLWJiMDYtMDBmZmQxMDI0YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz7pFi+aQ1F1coRgK63UZ8fA3+XOfrpmQgsq Vnr0fFsRY5irGK7EUKNY7iiCRbOihSHscxEYvF5Fct+7iRGDQLDISX63FKc2Wwji 8JAPWoy1AqEeojZ8HBNTmzVKh/09yE32vPHGB8pYlEYulewNHl3CtX4yXoL8XL1g BtvRyLKK1UkCj/73KRNhQa9TRe5ThEVNhN27HYNqV1Ptq5t9PJAsj6AVAKJb5rqv GHMgBTQ5/vOUY5OkDpfzghH/NJY+1Rd3TS2UHYCvln2V65++qnDv5Niw6wa6+Q0I pnJTKgz+HODQKvtk2jXRFktVygXMD6bjEh/4FVXcmd1MrY6EqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+3XUqa2VFKlIdJVTRPPNwyjXGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvZWEyZDE1YzEtNWFiZS0z M2NmLWE5MmUtYzhlNDg1OTYxM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyRaiQpmXoaNmc/0ps2DeaITGNVablQfq+6BdWNCjghvejPMD8YHW4f pkWwEYSc5rt3tQhtTj89T+BLbgbw1cUgA1AXft/uEIv4ANkcWyFZ2pKL4xyuuRvs jCuzIJ9HxPY9vV2V9+JFLnxzhZgxO9s6zRqnEII8tjaGAfV7OVH6f+/60M0PQiGB VvBvOctiJ5e1GSBOchZFxiTSx/8tWSupUHREGiz8vHZjIyN0bWKCTRTyb5d1/fC/ RHyQPvrgEQMrjWMhDuioFx93TKDEayvj1jwB09KZPNsYHzZ31gu5NrzgiYYZzist cz5X06rWCvrppYywa8DKb9MCRGVXVcQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:00:50 2025 by rpki-client