$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa File: 1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa (raw, json) Hash identifier: /xLQzs/Zk+2RZ3NU0v62lNhqzvvjZUub1xr8IQFFX0E= Subject key identifier: E3:B9:5D:72:8C:12:74:99:2A:AD:D4:B2:D0:A5:CB:D3:DE:F6:62:7A Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B6BC75E917771D9A42A1B4F20 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7764 IP address blocks: 148.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5e:91:77:71:d9:a4:2a:1b:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ab70d436-8453-4370-b7f9-3118249cff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:9e:19:b1:0b:cc:fd:a8:64:4f:2c:f4:af: 72:74:f5:4e:87:da:32:e7:d5:52:ee:14:ee:27:e7: 80:5d:3f:a3:18:75:5e:94:29:74:b0:5b:ac:f1:48: a3:d7:96:fa:18:99:75:bf:4d:29:7d:94:81:1d:e0: e9:78:88:82:cc:4e:11:46:e8:c2:0a:f9:25:d2:45: fe:d1:c4:49:81:83:45:04:a9:d9:bf:56:0b:2f:3d: 56:c2:1b:7e:69:c8:15:83:6c:61:e6:a0:3e:32:29: e1:d7:71:5e:b0:3c:a9:cc:5c:f3:5c:9b:21:95:56: ce:9b:20:c2:25:87:0d:8e:bf:94:c8:2a:41:12:6c: d5:d5:e4:1c:21:99:31:45:4a:f5:75:47:51:73:77: 73:f7:44:0c:47:fb:f9:c6:03:fe:4e:6a:56:3b:6b: 1f:b3:9e:1b:5f:8e:a9:b4:f2:55:d8:39:92:3c:be: 7d:42:0f:81:f5:83:3d:b9:29:d9:b1:40:5c:79:78: 2e:a8:d8:99:3d:77:36:13:8a:fb:0c:3e:1f:20:55: a6:8e:c0:b9:f3:d3:c7:f4:70:56:66:f7:91:c2:0b: 4c:46:67:db:15:23:ca:0b:ad:c0:8f:81:75:13:1a: b4:82:82:0d:96:7c:29:93:b9:3d:08:58:5e:cb:7a: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B9:5D:72:8C:12:74:99:2A:AD:D4:B2:D0:A5:CB:D3:DE:F6:62:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a2:16:31:71:c8:9f:54:7a:70:1c:88:cd:4e:66:84:6c:37: 83:3c:90:d0:e7:97:ef:da:b9:1c:c2:dd:84:20:38:48:bd:88: 33:5c:93:7f:b9:7a:04:15:c3:b6:47:73:ba:5d:8c:97:ff:44: f3:14:7f:1c:94:78:44:d5:db:c7:2e:61:71:7d:46:3e:9c:73: 11:b5:1f:e9:93:27:31:65:4c:ea:08:4b:80:e9:6b:7b:65:f3: bb:21:b9:0d:0f:78:02:91:48:c1:15:d7:9a:b9:b7:d1:9d:3a: 3d:1b:9c:d4:6b:30:71:8c:fa:9f:82:b1:47:c0:36:4e:16:6d: f4:3f:95:9c:7c:47:34:52:82:38:42:0a:9c:ab:81:97:14:83: c4:ac:9c:69:0f:6d:b2:b7:4b:d6:f9:10:47:d8:5a:4c:2d:07: 96:15:f6:bd:8e:a5:ee:91:20:e9:f4:76:b7:91:73:4b:59:5b: d6:00:18:be:f2:88:14:c2:ec:60:28:46:63:03:1c:1f:04:61: 8d:63:58:82:e1:0d:16:8e:5c:38:5a:db:bc:cb:10:41:74:83: 59:d9:1c:67:91:e5:23:62:76:54:73:9e:04:7f:20:fa:02:8d: 46:e4:3d:9b:d8:be:76:69:d3:cd:13:26:04:a7:aa:a5:25:10: 4d:4e:a6:b1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtrx16Rd3HZpCobTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YWI3MGQ0MzYtODQ1My00MzcwLWI3ZjktMzExODI0OWNmZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroGeGbELzP2oZE8s9K9ydPVOh9oy59VS7hTu J+eAXT+jGHVelCl0sFus8Uij15b6GJl1v00pfZSBHeDpeIiCzE4RRujCCvkl0kX+ 0cRJgYNFBKnZv1YLLz1Wwht+acgVg2xh5qA+Minh13FesDypzFzzXJshlVbOmyDC JYcNjr+UyCpBEmzV1eQcIZkxRUr1dUdRc3dz90QMR/v5xgP+TmpWO2sfs54bX46p tPJV2DmSPL59Qg+B9YM9uSnZsUBceXguqNiZPXc2E4r7DD4fIFWmjsC589PH9HBW ZveRwgtMRmfbFSPKC63Aj4F1Exq0goINlnwpk7k9CFhey3pIKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOO5XXKMEnSZKq3UstCly9Pe9mJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMWVlYTRlYWMtNmRhZC0z NmNmLWI1YjYtZjg3YTE1NWVlMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlIEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALqIWMXHIn1R6cByIzU5mhGw3gzyQ0OeX79q5HMLdhCA4SL2IM1yTf7l6 BBXDtkdzul2Ml/9E8xR/HJR4RNXbxy5hcX1GPpxzEbUf6ZMnMWVM6ghLgOlre2Xz uyG5DQ94ApFIwRXXmrm30Z06PRuc1GswcYz6n4KxR8A2ThZt9D+VnHxHNFKCOEIK nKuBlxSDxKycaQ9tsrdL1vkQR9haTC0HlhX2vY6l7pEg6fR2t5FzS1lb1gAYvvKI FMLsYChGYwMcHwRhjWNYguENFo5cOFrbvMsQQXSDWdkcZ5HlI2J2VHOeBH8g+gKN RuQ9m9i+dmnTzRMmBKeqpSUQTU6msQ== -----END CERTIFICATE-----Generated at Sat Oct 11 19:02:06 2025 by rpki-client