$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/02f3898a-a21a-37b0-ad8c-de283c62ec99.roa File: 02f3898a-a21a-37b0-ad8c-de283c62ec99.roa (raw, json) Hash identifier: JvJ1eLh+5o7PjJOvbuTZXhWcqDRMXo0emx0OXeogF04= Subject key identifier: 7E:A6:68:D6:CC:81:B2:29:E2:8A:E8:61:9B:B5:F4:D5:A4:8C:B8:21 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B6BC75EB5CBA5B314884C1700 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/02f3898a-a21a-37b0-ad8c-de283c62ec99.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7764 IP address blocks: 148.129.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5e:b5:cb:a5:b3:14:88:4c:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=7c242416-db9e-4b44-880e-6331038a9a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:69:4a:96:e3:55:30:b1:0e:b7:f4:c7:f2: df:0b:d6:e7:ff:f2:33:bb:d3:7a:29:f0:13:8d:5d: 4a:eb:39:35:38:94:16:d0:21:b1:8c:f4:9c:eb:d2: fe:7c:24:75:75:01:5a:bf:33:b6:a0:9f:6e:0d:c8: 64:de:d1:ea:7a:85:9c:57:1f:12:ae:e9:9e:5c:41: 5f:f7:09:cc:1a:19:72:d0:e1:82:db:cf:ab:f3:16: ac:95:a1:9b:60:fa:c3:fb:7c:39:d9:04:43:61:57: cd:b5:1a:8f:54:11:f4:9d:a8:2f:47:ba:96:54:d6: 24:e8:a0:c8:9a:08:5e:13:95:87:fe:28:bc:76:6f: b0:ae:ad:94:98:2d:8c:33:b2:8c:4e:cf:a7:dc:7c: 2b:2d:16:71:73:a0:7b:bf:b0:22:fa:11:18:bb:7b: e1:17:ce:69:ac:5d:13:9e:4b:26:35:ff:42:34:69: a0:9f:4f:c3:c1:e7:9e:de:ed:78:50:86:7b:80:cf: 4d:06:a6:8a:8a:ad:a3:19:45:e8:4c:f5:ad:28:75: 7f:25:c1:e6:37:54:34:b4:30:7e:3a:3a:33:f8:40: 62:6b:15:39:3a:fa:c7:ed:94:b8:8e:d3:88:1b:3c: f9:38:80:95:6c:db:1b:7c:84:fa:ac:28:be:f9:3a: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A6:68:D6:CC:81:B2:29:E2:8A:E8:61:9B:B5:F4:D5:A4:8C:B8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/02f3898a-a21a-37b0-ad8c-de283c62ec99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:99:7a:b0:f8:5c:22:6c:44:77:c6:c1:9f:db:b7:f8:d4:79: c3:e5:85:a5:1b:95:5a:36:09:d8:d3:1d:13:e4:c6:da:77:7f: 25:89:1c:3d:62:9f:3c:41:9c:54:0b:77:fb:4a:3e:3d:33:fa: bc:8d:1e:90:d5:87:53:80:28:37:26:e0:36:66:46:31:ae:10: 4e:c1:84:6a:f5:53:67:04:44:48:aa:a6:22:84:c2:dc:cb:33: 00:86:06:e8:4b:db:cd:93:3a:37:d9:6f:8f:c7:86:80:18:eb: 6f:89:56:ad:32:dd:b3:a7:e5:72:1a:90:f8:9b:6e:0c:1a:73: a2:e4:0c:53:8a:fb:cd:da:f2:56:04:4d:dd:04:b7:ae:a8:4c: b7:db:d0:28:51:2c:19:0d:45:65:c9:00:f6:87:c8:c3:7c:df: e4:9f:f1:90:68:87:72:82:39:33:60:de:d5:75:3e:45:19:f1: a4:73:23:77:04:f8:0e:ff:d9:d9:2f:e5:a2:7f:7e:98:7e:bf: a1:7d:aa:16:a4:b3:89:25:19:7b:b5:8b:33:85:5e:ad:23:03: 61:58:43:72:ac:b7:4a:20:fe:02:44:9a:83:09:f9:10:8a:26: 6f:91:f7:09:75:42:1e:b6:00:58:f3:04:44:f5:94:62:fb:6b: e0:f2:17:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx161y6WzFIhMFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk N2MyNDI0MTYtZGI5ZS00YjQ0LTg4MGUtNjMzMTAzOGE5YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL5pSpbjVTCxDrf0x/LfC9bn//Izu9N6KfAT jV1K6zk1OJQW0CGxjPSc69L+fCR1dQFavzO2oJ9uDchk3tHqeoWcVx8SrumeXEFf 9wnMGhly0OGC28+r8xaslaGbYPrD+3w52QRDYVfNtRqPVBH0nagvR7qWVNYk6KDI mgheE5WH/ii8dm+wrq2UmC2MM7KMTs+n3HwrLRZxc6B7v7Ai+hEYu3vhF85prF0T nksmNf9CNGmgn0/Dweee3u14UIZ7gM9NBqaKiq2jGUXoTPWtKHV/JcHmN1Q0tDB+ Ojoz+EBiaxU5OvrH7ZS4jtOIGzz5OICVbNsbfIT6rCi++TrKgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6maNbMgbIp4oroYZu19NWkjLghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMDJmMzg5OGEtYTIxYS0z N2IwLWFkOGMtZGUyODNjNjJlYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+ZerD4XCJsRHfGwZ/bt/jUecPlhaUblVo2CdjTHRPkxtp3fyWJHD1i nzxBnFQLd/tKPj0z+ryNHpDVh1OAKDcm4DZmRjGuEE7BhGr1U2cEREiqpiKEwtzL MwCGBuhL282TOjfZb4/HhoAY62+JVq0y3bOn5XIakPibbgwac6LkDFOK+83a8lYE Td0Et66oTLfb0ChRLBkNRWXJAPaHyMN83+Sf8ZBoh3KCOTNg3tV1PkUZ8aRzI3cE +A7/2dkv5aJ/fph+v6F9qhaks4klGXu1izOFXq0jA2FYQ3Kst0og/gJEmoMJ+RCK Jm+R9wl1Qh62AFjzBET1lGL7a+DyF2s= -----END CERTIFICATE-----Generated at Sat Oct 11 18:58:01 2025 by rpki-client