$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa File: 658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa (raw, json) Hash identifier: q4Y4wrG0rCYu6UZV6XpIBihWRLY1gNGTKKw/rRx7v+Q= Subject key identifier: B8:4E:5E:D2:8B:43:4B:15:1B:50:29:2F:EE:31:21:22:AB:53:52:7C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B07357190795CD81AFDDE9E Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 75.152.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:35:71:90:79:5c:d8:1a:fd:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=4b76016f-9fba-4257-88c0-3373e08ce52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:6d:d7:9e:54:03:5a:29:87:ef:d9:e3:bd: f7:5d:2c:51:4d:12:92:1e:57:71:60:95:00:3d:71: f1:9c:f7:52:61:0c:86:ba:de:ea:64:ba:46:1d:66: 60:77:04:5e:61:fb:14:21:e8:5f:14:ae:92:fc:d7: 2f:66:1e:3d:8d:f1:77:1e:f8:d5:79:76:05:c3:23: 70:e3:b9:da:53:fe:86:f7:02:66:94:00:49:25:d3: 23:97:ff:9d:26:97:af:9f:39:e2:a9:22:91:40:10: 4c:a4:b9:83:db:5f:6e:4d:43:5f:02:61:df:53:39: d3:6f:33:e1:de:e8:d1:43:6d:66:ac:5f:1a:8c:48: 2e:d7:db:fd:ab:5a:b1:21:30:21:2a:15:d7:bb:4c: 95:99:8b:7b:ba:4b:6a:a1:1b:fe:9b:ab:eb:2a:9e: ed:87:24:78:62:0a:1f:cf:d0:3b:9e:b8:7e:e1:41: 80:fd:e7:10:ce:66:88:e1:4c:f2:83:28:1a:66:c5: 97:df:b4:d0:3b:15:91:c9:be:80:96:8e:07:ea:d9: 8b:98:a9:5e:e6:1f:dc:b7:ff:95:9c:16:3f:5f:8a: 8a:d0:4c:59:2f:ac:5b:2e:70:7c:8d:c0:6a:9c:c8: 62:b5:b9:67:da:09:83:34:4e:63:76:fd:b0:67:8c: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4E:5E:D2:8B:43:4B:15:1B:50:29:2F:EE:31:21:22:AB:53:52:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.152.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6d:0b:17:dc:eb:dc:12:15:4f:08:a0:a9:15:11:85:db:70: 05:d9:c7:fb:12:d5:21:3f:8d:b6:88:b0:12:3f:d3:c4:6e:47: 1c:79:25:36:0c:3d:8c:82:34:01:ff:f9:f2:91:db:af:ef:5f: 2e:9f:1d:d1:ff:aa:39:2d:23:b3:a6:89:a3:b7:f3:e8:0a:97: 4f:5b:55:39:e5:c7:59:03:66:0d:ab:20:e9:b9:2f:bb:b7:97: 1e:7d:0b:6c:e5:81:3b:b2:85:d7:35:67:0d:c9:62:66:3c:7d: 54:d5:d0:15:65:de:59:09:ee:68:92:f9:9a:60:c3:f0:19:64: f2:50:54:85:a0:69:3d:c3:72:81:e9:35:5e:ff:65:7b:ea:7b: 13:ee:b6:63:eb:a6:90:61:ca:be:67:b7:9b:1e:7c:93:af:3a: 02:1f:86:08:8a:87:20:0d:1a:66:5f:5f:c5:83:3c:d0:a8:2c: 82:7c:9b:09:d8:99:dc:08:7c:cd:6a:7a:7c:35:c4:71:3d:dd: ef:44:83:4c:ed:ca:b1:2b:37:e7:0b:ff:f5:aa:2b:e0:4e:a8: 38:41:d5:9d:9c:eb:c9:d8:1f:71:37:ca:ad:29:2e:6d:ff:16: 86:87:ef:cc:62:bc:56:03:4b:cd:7e:eb:93:92:1b:9f:80:2a: 58:34:cc:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzVxkHlc2Br93p4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NGI3NjAxNmYtOWZiYS00MjU3LTg4YzAtMzM3M2UwOGNlNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdt155UA1oph+/Z4733XSxRTRKSHldxYJUA PXHxnPdSYQyGut7qZLpGHWZgdwReYfsUIehfFK6S/NcvZh49jfF3HvjVeXYFwyNw 47naU/6G9wJmlABJJdMjl/+dJpevnzniqSKRQBBMpLmD219uTUNfAmHfUznTbzPh 3ujRQ21mrF8ajEgu19v9q1qxITAhKhXXu0yVmYt7uktqoRv+m6vrKp7thyR4Ygof z9A7nrh+4UGA/ecQzmaI4UzygygaZsWX37TQOxWRyb6Alo4H6tmLmKle5h/ct/+V nBY/X4qK0ExZL6xbLnB8jcBqnMhitbln2gmDNE5jdv2wZ4xZFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhOXtKLQ0sVG1ApL+4xISKrU1J8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjU4ZDRiNTQtMzdhNS0z ZGIxLThhYTAtOGIyZDkxZDZlOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS5hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdtCxfc69wSFU8IoKkVEYXbcAXZx/sS1SE/jbaIsBI/08RuRxx5JTYM PYyCNAH/+fKR26/vXy6fHdH/qjktI7OmiaO38+gKl09bVTnlx1kDZg2rIOm5L7u3 lx59C2zlgTuyhdc1Zw3JYmY8fVTV0BVl3lkJ7miS+Zpgw/AZZPJQVIWgaT3DcoHp NV7/ZXvqexPutmPrppBhyr5nt5sefJOvOgIfhgiKhyANGmZfX8WDPNCoLIJ8mwnY mdwIfM1qenw1xHE93e9Eg0ztyrErN+cL//WqK+BOqDhB1Z2c68nYH3E3yq0pLm3/ FoaH78xivFYDS81+65OSG5+AKlg0zDI= -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:59 2025 by rpki-client