$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa File: 86af315a-812f-3f1f-a43f-8f50cbe24315.roa (raw, json) Hash identifier: x/FsCakrBnyqKb/8o1HVbLGVObvZkh6V2YbMAJCBdXs= Subject key identifier: 25:EB:FD:CC:38:E2:C8:2A:51:70:26:FD:28:D6:9C:F8:79:BE:F2:9F Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B5571E67AF523A10B842786F0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 29802 IP address blocks: 75.127.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e6:7a:f5:23:a1:0b:84:27:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=72e56ac3-1bfc-4a68-ae8d-db2ff9bef4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:aa:9d:b0:20:f9:d7:ed:fa:8c:c3:50:a3: 41:6b:d4:ca:c9:d3:bd:56:df:e3:10:71:7a:97:ff: d1:9a:1a:55:d7:9f:de:a9:d4:4a:06:27:8c:06:07: b8:b7:a6:ae:33:19:1e:7d:93:54:fe:f8:dd:43:7b: 9a:27:69:8b:63:fa:59:54:74:b4:41:e9:61:7a:66: f7:df:2f:ed:d9:cf:c7:bc:75:e3:a8:cb:f9:22:24: d3:a8:63:49:ee:2d:f8:ea:a8:60:19:3a:90:c7:6a: a7:38:a0:d7:84:d1:ca:e4:7a:86:39:63:99:97:7b: 15:9c:54:75:4f:de:1d:10:2e:34:2c:41:68:e3:64: 41:53:ab:f3:25:48:28:6a:58:eb:0e:e6:89:de:a6: 95:ec:28:83:ec:1d:92:e0:a9:9f:7d:d8:7a:f4:5e: 37:28:83:f3:01:35:98:d7:ad:d3:ad:6b:b8:93:e1: 73:2b:d9:99:a6:2a:0f:75:27:a1:35:af:1d:f8:46: e7:be:e5:fd:02:f7:58:d4:5b:82:98:a0:c1:42:f8: 16:7a:ec:90:a9:c1:4b:e3:ed:78:52:f4:7b:00:84: 8c:7f:9a:42:b5:f1:41:cd:c5:c3:14:03:7c:96:97: 64:8a:a2:78:76:09:76:bd:99:cd:fe:50:a4:e7:75: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:FD:CC:38:E2:C8:2A:51:70:26:FD:28:D6:9C:F8:79:BE:F2:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:22:f6:88:4e:7d:ef:13:30:fc:c9:d9:df:7b:e8:8d:64:0d: 9c:59:92:c5:96:23:f4:6e:6e:8e:0c:f9:fe:10:1e:6c:37:68: 2e:ce:e2:ed:e7:72:41:da:17:73:c8:d8:6c:65:e7:64:b6:b6: bb:88:5e:10:55:89:34:d0:9f:ee:5c:0d:ff:f5:c5:bd:9d:13: c8:7d:af:d8:22:6f:a8:a9:7f:9a:05:ef:b7:0b:31:5c:59:73: f0:cd:48:97:28:85:62:35:51:5d:f6:aa:b3:44:cb:7f:d6:05: d2:58:59:0b:7a:33:c3:8c:fe:3b:3e:af:b7:24:fd:47:6e:36: d9:80:4e:15:fb:cf:62:79:1a:9a:d0:c5:0f:99:0e:d3:0e:1e: 0c:7e:6a:e1:7c:18:40:68:50:b5:5d:fc:42:c2:69:d4:7f:a5: d0:e1:6e:cc:60:ef:0c:63:0c:27:3e:42:02:ba:5e:2e:72:95: e8:72:17:83:68:06:6e:5c:fd:07:5c:82:81:73:eb:2c:3d:f4: 5c:fd:45:c0:07:91:af:ba:5e:05:1b:6a:0b:65:b8:d5:a4:2c: f4:98:f9:ea:92:ae:37:cc:9b:c8:dc:13:1b:1e:ad:38:38:de: d6:de:50:af:b7:d4:44:ef:66:68:b5:c5:99:8d:89:3b:27:8d: a5:ff:4a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceZ69SOhC4QnhvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NzJlNTZhYzMtMWJmYy00YTY4LWFlOGQtZGIyZmY5YmVmNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziiqnbAg+dft+ozDUKNBa9TKydO9Vt/jEHF6 l//RmhpV15/eqdRKBieMBge4t6auMxkefZNU/vjdQ3uaJ2mLY/pZVHS0Qelhemb3 3y/t2c/HvHXjqMv5IiTTqGNJ7i346qhgGTqQx2qnOKDXhNHK5HqGOWOZl3sVnFR1 T94dEC40LEFo42RBU6vzJUgoaljrDuaJ3qaV7CiD7B2S4Kmffdh69F43KIPzATWY 163TrWu4k+FzK9mZpioPdSehNa8d+EbnvuX9AvdY1FuCmKDBQvgWeuyQqcFL4+14 UvR7AISMf5pCtfFBzcXDFAN8lpdkiqJ4dgl2vZnN/lCk53VVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXr/cw44sgqUXAm/SjWnPh5vvKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODZhZjMxNWEtODEyZi0z ZjFmLWE0M2YtOGY1MGNiZTI0MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS395MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGki9ohOfe8TMPzJ2d976I1kDZxZksWWI/Rubo4M+f4QHmw3aC7O4u3n ckHaF3PI2Gxl52S2truIXhBViTTQn+5cDf/1xb2dE8h9r9gib6ipf5oF77cLMVxZ c/DNSJcohWI1UV32qrNEy3/WBdJYWQt6M8OM/js+r7ck/UduNtmAThX7z2J5GprQ xQ+ZDtMOHgx+auF8GEBoULVd/ELCadR/pdDhbsxg7wxjDCc+QgK6Xi5ylehyF4No Bm5c/QdcgoFz6yw99Fz9RcAHka+6XgUbagtluNWkLPSY+eqSrjfMm8jcExserTg4 3tbeUK+31ETvZmi1xZmNiTsnjaX/SmA= -----END CERTIFICATE-----Generated at Sat Oct 11 14:51:49 2025 by rpki-client