$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa File: 712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa (raw, json) Hash identifier: yhVQKeYbtIa0KpKW+2Fi0+qZq25CVULHvcXaynp4HlA= Subject key identifier: CD:58:DC:33:1C:85:93:F4:BB:A9:BD:8D:B1:48:37:11:63:8E:9D:AD Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B64CE669DEA8BDEDC77DF0680 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 3477 IP address blocks: 137.75.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:66:9d:ea:8b:de:dc:77:df:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c50fcb65-e68f-4c4e-9809-3d9afdc81f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:06:a3:14:90:d7:cd:d4:4e:94:3a:2f:26: 85:3e:ce:80:28:22:7c:55:9e:71:58:59:f4:24:cb: 79:42:e1:1a:47:62:2d:9d:ca:35:27:56:85:86:f0: 26:52:51:87:30:88:51:f2:22:37:fc:cf:6f:c6:fc: 49:74:69:e2:90:b2:95:7c:11:80:94:de:33:8d:28: 8d:c1:00:93:6a:d5:5b:c8:3e:6e:42:dc:8f:5e:c3: 8b:a2:39:ee:b6:94:8d:8e:c9:af:0f:ab:b8:66:2b: 47:6a:59:0b:28:2c:45:d4:6c:12:ae:c0:45:39:eb: 3f:97:c2:5a:6c:d8:5b:a4:73:87:56:40:0c:cc:72: 00:ef:c5:51:03:03:34:1e:b9:ca:2c:cf:12:65:71: d6:a7:00:ad:8f:e2:b9:6a:ec:83:e6:d2:8e:3d:e6: 73:68:3f:8d:1a:7c:a4:57:36:21:a9:d5:ef:49:28: 1f:a3:80:f9:7b:08:4f:5d:4e:96:aa:23:c3:55:c6: 3c:9c:7a:f7:3f:2f:8d:cd:45:fb:6d:a2:d9:24:ae: 5e:0b:d8:78:e4:24:b5:69:b2:10:d2:22:3c:e6:71: 20:94:d2:53:58:11:4a:32:99:ce:b5:64:61:4a:89: e5:c1:a4:c8:59:04:f7:f4:34:09:d6:75:4d:41:60: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:DC:33:1C:85:93:F4:BB:A9:BD:8D:B1:48:37:11:63:8E:9D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 137.75.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:71:64:b7:27:cc:b6:b5:3c:a6:dd:0c:13:25:4d:b1:ef:07: 99:3e:79:7c:f4:12:c9:77:57:17:58:95:76:c9:75:b8:ab:fe: 9c:ba:61:40:a8:5f:78:7d:5c:13:fc:c9:6f:96:33:fe:08:61: 8b:fa:c4:65:e7:c8:2c:c6:53:7c:e9:06:42:c1:4d:3f:12:92: c5:a0:8f:9b:e5:55:1c:eb:6d:56:9c:5d:d6:a7:ef:7f:93:1e: d9:5d:81:f1:8b:77:c1:e6:1a:fc:d7:36:9b:0c:6c:7e:74:5f: 44:b8:66:fa:3d:0c:19:84:4f:8f:d4:8b:85:8a:7b:20:f9:3d: 4c:45:ff:94:ec:16:8e:12:f6:32:34:a0:91:5b:40:5a:27:d9: 82:b9:9c:24:6a:59:f9:63:fd:3b:d8:4a:39:e8:55:44:65:69: 90:80:45:2b:f4:38:14:63:a9:b8:4c:1e:43:7e:7d:30:7c:eb: b9:aa:17:e4:27:a2:ed:b1:2a:81:09:b4:ca:af:ec:1e:53:c2: ab:4e:aa:d5:f3:c4:dd:d2:e0:81:46:88:42:32:58:f1:96:61: 78:64:2e:eb:06:f7:6e:46:46:2c:d6:7d:07:b6:97:3b:c8:fc: be:ae:b5:9e:2d:b7:62:2a:7a:35:e4:d5:38:f1:31:8f:d6:0d: a9:93:4b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzmad6ove3HffBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzUwZmNiNjUtZTY4Zi00YzRlLTk4MDktM2Q5YWZkYzgxZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYkGoxSQ183UTpQ6LyaFPs6AKCJ8VZ5xWFn0 JMt5QuEaR2Itnco1J1aFhvAmUlGHMIhR8iI3/M9vxvxJdGnikLKVfBGAlN4zjSiN wQCTatVbyD5uQtyPXsOLojnutpSNjsmvD6u4ZitHalkLKCxF1GwSrsBFOes/l8Ja bNhbpHOHVkAMzHIA78VRAwM0HrnKLM8SZXHWpwCtj+K5auyD5tKOPeZzaD+NGnyk VzYhqdXvSSgfo4D5ewhPXU6WqiPDVcY8nHr3Py+NzUX7baLZJK5eC9h45CS1abIQ 0iI85nEglNJTWBFKMpnOtWRhSonlwaTIWQT39DQJ1nVNQWAMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Y3DMchZP0u6m9jbFINxFjjp2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNzEyYzRmNTMtZWI0ZS0z YmJmLTg3NWYtZGM2MzlmZTFiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiUtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpxZLcnzLa1PKbdDBMlTbHvB5k+eXz0Esl3VxdYlXbJdbir/py6YUCo X3h9XBP8yW+WM/4IYYv6xGXnyCzGU3zpBkLBTT8SksWgj5vlVRzrbVacXdan73+T HtldgfGLd8HmGvzXNpsMbH50X0S4Zvo9DBmET4/Ui4WKeyD5PUxF/5TsFo4S9jI0 oJFbQFon2YK5nCRqWflj/TvYSjnoVURlaZCARSv0OBRjqbhMHkN+fTB867mqF+Qn ou2xKoEJtMqv7B5TwqtOqtXzxN3S4IFGiEIyWPGWYXhkLusG925GRizWfQe2lzvI /L6utZ4tt2IqejXk1TjxMY/WDamTS9A= -----END CERTIFICATE-----Generated at Fri Oct 24 00:42:07 2025 by rpki-client