$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa File: 345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa (raw, json) Hash identifier: SscOXQbHJZS5ro7Euhll+VVOrkTIO+trqCR37QXLK50= Subject key identifier: F2:85:99:3A:2E:49:50:39:21:46:31:65:D4:00:8E:C9:26:2E:C6:36 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC22F766EDEF756F197B80 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 24.214.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:22:f7:66:ed:ef:75:6f:19:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=42404ba2-30f5-4999-b3fd-1c5888aa2992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:ef:c4:10:c0:e2:f5:53:5b:a8:8f:82:69: 12:98:1a:65:df:fb:d9:ee:4f:e9:b0:68:ee:5f:91: 95:d3:69:5b:d3:2b:09:27:c8:5f:2f:b4:76:c8:14: c0:0e:03:7f:cf:af:a0:c6:3c:ae:b9:09:97:73:81: c1:99:30:bc:2c:ef:ef:9f:65:2d:47:ea:8c:a6:33: fb:10:d3:47:85:73:f9:08:f2:a1:4a:74:32:4f:71: 32:41:8a:09:19:2a:8b:03:e0:7e:74:60:21:3f:8f: 5f:4c:2c:ca:2c:dd:f3:e7:68:c4:9e:bb:ea:c2:89: 83:95:35:1a:8a:8f:28:b3:d8:00:7b:c2:21:29:c9: e3:74:8c:70:e5:ae:99:fe:2b:1b:d6:83:6b:d9:a5: a2:4a:be:97:35:b7:1b:f8:f1:df:e4:46:76:d8:85: 7e:38:ad:f2:de:bf:c9:a3:33:f4:f8:54:3e:07:17: 11:e8:ec:fe:76:5d:0a:11:50:79:ac:b6:7e:9f:66: 8a:7b:99:31:88:5e:12:ad:e6:fc:f7:fd:f0:7a:32: 61:8c:0a:f2:d0:67:02:19:fa:ee:53:11:c0:50:b8: dd:71:31:a2:26:fe:2a:50:96:87:32:b4:f8:5a:22: e9:4e:c3:16:60:d5:c1:e2:2a:ce:1c:98:ba:08:33: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:85:99:3A:2E:49:50:39:21:46:31:65:D4:00:8E:C9:26:2E:C6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:eb:28:28:e2:f6:2b:78:ad:a3:df:29:a5:ee:65:f3:1e:79: 24:70:0d:89:bd:7d:5c:18:28:99:91:c6:f7:bd:9a:5a:61:8c: 4f:61:06:4a:8f:b8:76:ef:93:71:ac:1e:ac:de:3b:de:5a:e1: 42:13:88:f6:ff:be:f6:c0:71:9a:72:71:1e:80:9a:8c:a4:ba: 3d:36:a8:da:72:7a:ce:bf:4c:e2:1e:79:83:3b:57:6f:d1:05: 4c:d8:45:64:33:f9:e6:2d:93:94:36:70:2e:82:e0:64:df:8d: 42:93:19:f0:50:70:d8:ef:06:e5:0c:36:9a:bc:27:11:40:16: c8:3a:8c:f0:20:9c:be:99:04:7d:21:d2:3b:28:7e:d8:75:56: 43:45:40:04:e2:68:1f:f9:64:95:01:48:59:18:61:3c:77:1a: f6:14:b9:d2:72:42:7d:4f:83:2d:ee:f0:c8:74:0e:12:b5:da: 1b:ab:21:e5:29:c2:1e:cd:d6:db:fe:59:b4:cf:34:0d:45:a1: ea:d7:6c:87:3a:05:54:54:60:a8:89:94:45:c0:70:d7:ea:bf: f3:fd:03:32:31:be:07:c7:27:66:aa:a2:1f:5a:01:f2:6f:4a: 03:85:01:89:38:5c:b4:8e:65:81:fb:23:01:ee:23:67:29:7a: a1:82:97:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCL3Zu3vdW8Ze4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NDI0MDRiYTItMzBmNS00OTk5LWIzZmQtMWM1ODg4YWEyOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3XvxBDA4vVTW6iPgmkSmBpl3/vZ7k/psGju X5GV02lb0ysJJ8hfL7R2yBTADgN/z6+gxjyuuQmXc4HBmTC8LO/vn2UtR+qMpjP7 ENNHhXP5CPKhSnQyT3EyQYoJGSqLA+B+dGAhP49fTCzKLN3z52jEnrvqwomDlTUa io8os9gAe8IhKcnjdIxw5a6Z/isb1oNr2aWiSr6XNbcb+PHf5EZ22IV+OK3y3r/J ozP0+FQ+BxcR6Oz+dl0KEVB5rLZ+n2aKe5kxiF4Sreb89/3wejJhjAry0GcCGfru UxHAULjdcTGiJv4qUJaHMrT4WiLpTsMWYNXB4irOHJi6CDOmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKFmTouSVA5IUYxZdQAjskmLsY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMzQ1Y2FmNDgtNTYzYi0z ZmQ3LTljYjYtNjU5MGE1N2UyZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrrKCji9it4raPfKaXuZfMeeSRwDYm9fVwYKJmRxve9mlphjE9hBkqP uHbvk3GsHqzeO95a4UITiPb/vvbAcZpycR6Amoykuj02qNpyes6/TOIeeYM7V2/R BUzYRWQz+eYtk5Q2cC6C4GTfjUKTGfBQcNjvBuUMNpq8JxFAFsg6jPAgnL6ZBH0h 0jsofth1VkNFQATiaB/5ZJUBSFkYYTx3GvYUudJyQn1Pgy3u8Mh0DhK12hurIeUp wh7N1tv+WbTPNA1FoerXbIc6BVRUYKiJlEXAcNfqv/P9AzIxvgfHJ2aqoh9aAfJv SgOFAYk4XLSOZYH7IwHuI2cpeqGClyg= -----END CERTIFICATE-----Generated at Sat Oct 11 15:51:03 2025 by rpki-client