$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bdd4aede-8e0f-38b5-84f1-3c6c6d5df150.roa File: bdd4aede-8e0f-38b5-84f1-3c6c6d5df150.roa (raw, json) Hash identifier: l0EddyBz19ZbsN6XBxo8xfmuOzDMI8sDMclHIPBdJlM= Subject key identifier: 52:C7:2A:FB:A1:56:11:55:0F:99:B8:7A:9F:9A:26:E0:E5:23:AD:28 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B0FA6BB8A2E2E165877E32FE0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bdd4aede-8e0f-38b5-84f1-3c6c6d5df150.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 75.127.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:bb:8a:2e:2e:16:58:77:e3:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=e592543d-7868-4a9b-8fb7-2b334ae3fb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:62:6d:5f:f8:1d:f9:39:b8:51:6d:6a:82: 42:f3:ad:f5:f8:78:9a:0c:70:6d:d2:69:9f:a3:27: 1c:5c:bd:33:51:0e:93:b5:e1:ee:dc:e9:c6:5f:92: 51:e9:4a:a5:b2:35:cf:41:a5:47:ca:e2:91:21:24: 6a:9f:86:cc:70:a5:c1:c7:fe:c8:8d:99:b7:c6:db: e9:51:cc:80:34:dc:50:cd:5e:b4:0c:c0:f9:b8:43: 7c:e5:d4:ab:ee:e0:73:ed:9f:cd:7d:d1:d9:f8:8c: 13:58:d4:75:af:f4:97:3d:af:ee:14:d6:5b:f6:d8: 97:6e:b9:96:a9:f6:68:62:cf:2d:e6:63:12:61:25: bc:52:c7:92:8c:26:82:0d:71:8e:ef:0b:4b:3c:d3: ee:60:56:e1:2b:b2:08:66:02:ae:be:48:95:26:50: a1:2c:3e:56:f3:67:00:6c:90:7d:90:ce:29:5f:ff: b2:f5:74:0a:e8:2c:71:99:da:ec:08:57:cf:5c:d3: d0:be:92:c6:d6:96:ef:a6:f4:62:5a:fa:2e:b2:22: 11:15:e2:b5:74:b4:f0:9b:61:78:2f:56:dc:65:c6: e4:92:3d:0b:40:a3:a9:68:e0:d9:71:0f:e3:49:11: fb:94:bc:a8:42:b6:b3:b5:fb:61:8b:eb:66:53:cd: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C7:2A:FB:A1:56:11:55:0F:99:B8:7A:9F:9A:26:E0:E5:23:AD:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bdd4aede-8e0f-38b5-84f1-3c6c6d5df150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c0:ae:75:69:89:cb:5e:58:96:1e:e4:33:43:8d:7b:ac:9b: c3:81:7b:65:87:2d:7f:9c:8f:f8:4c:40:2e:9d:c8:d6:1e:d8: a0:1e:32:71:07:bb:92:05:05:47:4d:66:96:b7:a5:76:10:c4: f0:f1:51:7e:b0:7f:3b:62:7f:8b:14:c9:3e:7e:f7:33:cd:20: 1e:d6:31:cd:79:94:37:ba:43:22:81:86:bc:04:da:5b:64:1f: 73:b5:b1:76:5a:7f:51:73:c8:e4:6f:8e:29:83:eb:29:2d:65: 71:67:29:db:dd:b7:75:31:0e:40:bf:e4:bc:77:e8:ed:b5:e5: b2:93:0a:74:5c:f7:f2:1f:4e:fa:4d:31:41:e7:fd:91:de:b2: d0:98:eb:9d:43:82:fa:ce:9f:ef:8b:04:5e:09:39:59:86:59: f7:4e:1a:50:72:83:53:a3:70:7e:9f:47:93:fc:6c:84:ca:23: ac:21:3f:7c:70:79:d5:f3:c3:48:02:e2:12:5c:05:74:aa:c7: ef:38:7c:fc:df:58:bc:c0:a4:21:b0:39:d5:c0:a2:74:77:ab: 9d:d0:ab:0f:d4:7a:3c:91:0d:87:0c:18:3b:2e:c0:e3:f0:c4: ca:64:ac:7d:47:87:c5:d6:31:e9:9b:d5:1c:e9:5b:fb:31:5f: 3d:37:38:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpruKLi4WWHfjL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTU5MjU0M2QtNzg2OC00YTliLThmYjctMmIzMzRhZTNmYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilJibV/4Hfk5uFFtaoJC8631+HiaDHBt0mmf oyccXL0zUQ6TteHu3OnGX5JR6UqlsjXPQaVHyuKRISRqn4bMcKXBx/7IjZm3xtvp UcyANNxQzV60DMD5uEN85dSr7uBz7Z/NfdHZ+IwTWNR1r/SXPa/uFNZb9tiXbrmW qfZoYs8t5mMSYSW8UseSjCaCDXGO7wtLPNPuYFbhK7IIZgKuvkiVJlChLD5W82cA bJB9kM4pX/+y9XQK6CxxmdrsCFfPXNPQvpLG1pbvpvRiWvousiIRFeK1dLTwm2F4 L1bcZcbkkj0LQKOpaODZcQ/jSRH7lLyoQraztfthi+tmU801WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLHKvuhVhFVD5m4ep+aJuDlI60oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYmRkNGFlZGUtOGUwZi0z OGI1LTg0ZjEtM2M2YzZkNWRmMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS39sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3ArnVpicteWJYe5DNDjXusm8OBe2WHLX+cj/hMQC6dyNYe2KAeMnEH u5IFBUdNZpa3pXYQxPDxUX6wfztif4sUyT5+9zPNIB7WMc15lDe6QyKBhrwE2ltk H3O1sXZaf1FzyORvjimD6yktZXFnKdvdt3UxDkC/5Lx36O215bKTCnRc9/IfTvpN MUHn/ZHestCY651DgvrOn++LBF4JOVmGWfdOGlByg1OjcH6fR5P8bITKI6whP3xw edXzw0gC4hJcBXSqx+84fPzfWLzApCGwOdXAonR3q53Qqw/UejyRDYcMGDsuwOPw xMpkrH1Hh8XWMemb1RzpW/sxXz03OBk= -----END CERTIFICATE-----Generated at Sat Oct 11 14:51:49 2025 by rpki-client