$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3669ca0e-7d09-308b-84b9-199641eeb6c5.roa File: 3669ca0e-7d09-308b-84b9-199641eeb6c5.roa (raw, json) Hash identifier: oNdI3O/jJ1noSd+FQLhKcyeoAhoyEQK6bqm7jwd8RpY= Subject key identifier: 01:BA:29:45:C6:BC:81:7B:50:C5:02:C7:A6:FA:EA:85:A8:67:FE:F5 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B3CD4626E9F68D11DEDD56080 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3669ca0e-7d09-308b-84b9-199641eeb6c5.roa Signing time: Thu 18 Sep 2025 17:24:08 +0000 ROA not before: Thu 18 Sep 2025 17:24:08 +0000 ROA not after: Wed 17 Dec 2025 18:24:08 +0000 asID: 23473 IP address blocks: 76.10.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:d4:62:6e:9f:68:d1:1d:ed:d5:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 18 17:24:08 2025 GMT Not After : Dec 17 18:24:08 2025 GMT Subject: CN=e5ea2c34-640e-4203-b57f-8a9b78485e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cc:cb:59:7b:0d:01:3b:b2:3b:7c:1d:96:3c: a5:c8:14:ac:6a:cd:d5:13:44:d4:73:e8:0d:9a:4c: 9f:37:c4:22:82:d7:96:5f:f8:4a:e8:e0:40:cd:0c: 8d:4b:cc:0b:b9:17:5b:0f:55:7b:53:66:b8:ac:25: b9:d1:7f:b5:02:14:75:e8:c7:65:b5:cb:ea:c6:4a: 3e:38:66:3d:26:df:1b:51:1a:cd:a1:c3:dd:df:47: d3:8d:3d:4e:78:3e:c4:92:52:c0:45:6f:f7:55:c9: b9:64:84:c9:01:3f:47:4f:83:cf:96:ea:25:a1:cd: 1d:05:cf:01:10:54:25:e5:66:f5:43:ad:15:ce:1b: 5c:ea:47:64:d3:da:e8:f2:40:55:3d:d2:2f:f9:a5: bd:50:4d:ee:d6:93:ad:49:57:19:62:53:e7:d0:66: ab:af:77:00:37:5d:11:bf:49:f4:37:eb:ea:b0:0b: a6:7c:01:97:bc:80:40:51:2c:12:21:36:e0:f0:8e: 14:5f:5f:8a:6a:1e:14:c0:ab:96:19:97:de:e1:f5: 32:40:f1:21:a5:f2:8f:70:94:08:54:0f:54:49:5e: cb:dc:bc:78:24:df:ce:7b:01:3d:cc:1c:97:88:e7: f8:f3:11:34:b1:56:3d:9e:3d:dd:cd:25:f2:a3:ec: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BA:29:45:C6:BC:81:7B:50:C5:02:C7:A6:FA:EA:85:A8:67:FE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3669ca0e-7d09-308b-84b9-199641eeb6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 76.10.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e3:6d:ca:9b:0f:36:53:d9:ba:17:9d:78:df:d4:bd:ca:e6: 53:ec:7c:83:9f:b9:84:47:2c:17:a8:09:47:ac:f0:41:67:7c: 05:64:d7:3d:88:b6:f8:40:bd:db:fd:27:77:17:7d:b7:24:63: a7:c9:79:f3:62:07:57:13:ba:65:c1:08:60:e6:6e:76:70:3b: 5f:30:f2:75:42:34:8c:ec:3c:b9:8a:c3:bb:32:a6:6d:e6:af: 8d:a7:19:b6:bc:90:6d:f4:74:51:56:8d:de:dd:d1:6e:52:d3: 46:8e:fc:01:3b:9d:6a:f9:d5:f4:16:77:f7:5d:d5:e4:4b:28: 59:75:29:de:13:2d:ea:ba:f1:a3:ab:09:e4:b2:d4:a1:f0:a2: 7a:e8:cf:e9:4c:41:e1:33:95:50:0b:07:de:2b:f1:dd:c0:08: 2f:82:4a:6f:f3:4b:2e:76:5d:1a:cb:3f:e9:7b:71:48:96:d0: 25:8c:67:d3:ed:a5:9c:e9:6d:95:a1:29:c2:a1:de:9e:7a:9b: 89:f1:89:a1:87:ea:49:cc:1b:e9:0a:41:b1:71:03:fe:e5:f7: 16:5a:ad:66:4c:a8:ff:c8:a8:bd:c2:98:9b:39:b4:a1:9c:e5: 27:b1:b9:47:2d:39:eb:89:57:8a:1b:c4:58:dc:42:f2:60:c1: b0:31:68:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs81GJun2jRHe3VYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxODE3MjQwOFoXDTI1MTIxNzE4MjQwOFowLzEtMCsGA1UEAxMk ZTVlYTJjMzQtNjQwZS00MjAzLWI1N2YtOGE5Yjc4NDg1ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8zLWXsNATuyO3wdljylyBSsas3VE0TUc+gN mkyfN8QigteWX/hK6OBAzQyNS8wLuRdbD1V7U2a4rCW50X+1AhR16Mdltcvqxko+ OGY9Jt8bURrNocPd30fTjT1OeD7EklLARW/3Vcm5ZITJAT9HT4PPluoloc0dBc8B EFQl5Wb1Q60Vzhtc6kdk09ro8kBVPdIv+aW9UE3u1pOtSVcZYlPn0Garr3cAN10R v0n0N+vqsAumfAGXvIBAUSwSITbg8I4UX1+Kah4UwKuWGZfe4fUyQPEhpfKPcJQI VA9USV7L3Lx4JN/OewE9zByXiOf48xE0sVY9nj3dzSXyo+xrmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG6KUXGvIF7UMUCx6b66oWoZ/71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzY2OWNhMGUtN2QwOS0z MDhiLTg0YjktMTk5NjQxZWViNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTAomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvjbcqbDzZT2boXnXjf1L3K5lPsfIOfuYRHLBeoCUes8EFnfAVk1z2I tvhAvdv9J3cXfbckY6fJefNiB1cTumXBCGDmbnZwO18w8nVCNIzsPLmKw7sypm3m r42nGba8kG30dFFWjd7d0W5S00aO/AE7nWr51fQWd/dd1eRLKFl1Kd4TLeq68aOr CeSy1KHwonroz+lMQeEzlVALB94r8d3ACC+CSm/zSy52XRrLP+l7cUiW0CWMZ9Pt pZzpbZWhKcKh3p56m4nxiaGH6knMG+kKQbFxA/7l9xZarWZMqP/IqL3CmJs5tKGc 5SexuUctOeuJV4obxFjcQvJgwbAxaE4= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:46 2025 by rpki-client