$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa File: 76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa (raw, json) Hash identifier: 4E0tKBpA53wh8W9ve4218U4lMqAptzMEBkgearvw5N4= Subject key identifier: DA:A4:7D:96:8A:82:1D:E0:5C:05:64:F5:75:EF:4F:11:FC:27:2F:83 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584B9E07C0C2879A25E7711D1880 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 8014 IP address blocks: 216.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c0:c2:87:9a:25:e7:71:1d:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=41744386-82ce-41ba-8851-ee306f1393de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:70:44:8b:17:1e:7f:5f:7e:4f:5b:e7:f1: dc:76:be:40:64:94:35:78:69:39:49:27:89:84:2c: 5d:44:83:0d:29:1b:37:1b:e9:2e:12:02:6b:eb:23: 54:f2:d5:50:20:06:1f:3f:d0:cd:da:4c:7c:69:fb: a4:56:32:c5:62:5a:4c:83:76:84:56:73:44:03:29: 51:ae:4e:af:5e:d0:96:f4:9c:a2:30:b3:c0:2e:b8: b5:f1:70:a8:90:a2:a6:9e:00:67:a6:3d:4f:15:dd: 4b:d5:f9:61:5d:12:71:3e:77:09:82:30:15:a5:10: 6c:90:d7:73:1a:bd:e9:7f:20:49:f9:03:c0:07:fb: 9d:81:0b:83:20:c3:16:43:af:5c:d1:1e:c0:9b:5f: 07:64:08:52:8b:91:6a:dd:d4:b7:5c:f7:39:6c:b9: 13:a0:45:4c:e1:cd:22:90:99:85:97:89:c8:8f:5f: 06:1f:7a:76:c5:4c:81:57:79:7a:e4:6e:3c:b1:2a: d6:75:22:d5:d2:9e:1d:37:50:7e:9d:43:bf:35:77: 40:47:d7:1c:f7:6d:6e:b5:fd:e9:f3:66:53:66:40: 23:a8:60:8a:d3:03:06:75:ee:68:8f:cf:1e:dc:cf: df:c3:aa:32:91:51:8f:df:03:8a:d3:2c:e1:4d:63: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A4:7D:96:8A:82:1D:E0:5C:05:64:F5:75:EF:4F:11:FC:27:2F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 216.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b0:9c:79:90:4c:40:61:76:a9:ca:55:83:78:36:a2:dc:84: c5:be:e3:cd:d8:fa:9b:1e:ec:91:85:cd:2d:2f:35:f8:3c:49: 46:ef:39:57:0d:da:fa:13:a3:c3:2f:56:73:70:a2:a8:f2:c4: 53:c3:d8:15:b5:80:91:12:ca:cc:55:b3:43:0b:57:4b:3d:58: 0d:af:6c:bd:99:06:9d:36:1f:15:0d:c0:97:06:aa:4d:1c:02: cc:b9:3c:39:a1:8d:61:31:ce:5e:8c:63:58:79:65:30:30:57: 0b:c6:eb:54:c9:00:8b:14:37:be:7b:a0:35:36:e7:bc:ed:82: 87:7f:ee:b4:8d:10:a9:b9:db:ad:e6:a4:25:96:b2:2e:d4:43: ff:df:41:90:3c:ec:5c:24:67:35:48:ac:14:2a:81:3c:e3:94: 57:5a:bb:9f:77:a8:9f:c8:db:7b:49:f6:7a:dd:3c:9d:a9:ed: bd:f2:7a:91:1c:69:9b:04:7f:44:fb:63:fc:fe:a2:fb:24:89: 69:fc:76:35:96:36:5f:9a:6d:ff:79:15:30:c8:07:b5:18:71: 62:a8:30:ac:e9:b4:f6:c9:9e:fc:a4:d9:0f:1e:43:b2:28:64: 6e:b0:bc:ca:f7:70:5a:83:71:00:3c:25:c6:7d:77:d1:8e:e9: 29:b5:66:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8DCh5ol53EdGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDE3NDQzODYtODJjZS00MWJhLTg4NTEtZWUzMDZmMTM5M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7xwRIsXHn9ffk9b5/Hcdr5AZJQ1eGk5SSeJ hCxdRIMNKRs3G+kuEgJr6yNU8tVQIAYfP9DN2kx8afukVjLFYlpMg3aEVnNEAylR rk6vXtCW9JyiMLPALri18XCokKKmngBnpj1PFd1L1flhXRJxPncJgjAVpRBskNdz Gr3pfyBJ+QPAB/udgQuDIMMWQ69c0R7Am18HZAhSi5Fq3dS3XPc5bLkToEVM4c0i kJmFl4nIj18GH3p2xUyBV3l65G48sSrWdSLV0p4dN1B+nUO/NXdAR9cc921utf3p 82ZTZkAjqGCK0wMGde5oj88e3M/fw6oykVGP3wOK0yzhTWMGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqkfZaKgh3gXAVk9XXvTxH8Jy+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNzZkMmNhZGItNjhmNS0z NzdjLWJlNmUtNzk5MmUxZTFjMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2wnHmQTEBhdqnKVYN4NqLchMW+483Y+pse7JGFzS0vNfg8SUbvOVcN 2voTo8MvVnNwoqjyxFPD2BW1gJESysxVs0MLV0s9WA2vbL2ZBp02HxUNwJcGqk0c Asy5PDmhjWExzl6MY1h5ZTAwVwvG61TJAIsUN757oDU257ztgod/7rSNEKm5263m pCWWsi7UQ//fQZA87FwkZzVIrBQqgTzjlFdau593qJ/I23tJ9nrdPJ2p7b3yepEc aZsEf0T7Y/z+ovskiWn8djWWNl+abf95FTDIB7UYcWKoMKzptPbJnvyk2Q8eQ7Io ZG6wvMr3cFqDcQA8JcZ9d9GO6Sm1ZlQ= -----END CERTIFICATE-----Generated at Fri Oct 24 00:49:49 2025 by rpki-client