$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa File: 5856eae9-9332-3fd4-b7c9-f243db302cc8.roa (raw, json) Hash identifier: 2pYZhBkHF37knVadLUoYP3112Of6qtq6bdaaTqslsl8= Subject key identifier: B8:A8:36:C7:9C:8A:0D:59:91:86:DA:A0:3B:02:5A:33:77:DE:46:1E Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B6BC75EE8C9B0AF212D8D8400 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7764 IP address blocks: 148.129.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5e:e8:c9:b0:af:21:2d:8d:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=13541aea-221f-4107-9619-e4489cf698a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a8:16:b1:d0:a2:45:d0:1c:08:44:9b:e1:23: 55:57:78:5a:4d:dc:cb:cb:aa:43:4c:fe:ea:9a:a5: c8:af:c9:b0:86:61:0a:85:94:84:77:a3:88:df:c3: 26:13:ad:1a:70:8c:62:15:82:7d:7e:ca:a4:82:99: 70:12:b5:7a:43:f0:7f:14:d9:f6:3c:97:39:23:79: 2f:02:53:b0:ed:80:b5:a8:0d:a2:f7:e4:14:0d:15: ee:c8:b0:9b:bb:0b:15:b5:06:ac:f5:c5:bd:14:3e: a1:96:7d:76:8a:6c:8a:b3:2a:f2:47:9b:75:43:9e: 4b:74:1a:3a:a7:e3:72:31:57:62:1d:cc:4b:25:99: 2c:41:31:81:fa:e5:bd:49:ff:01:8c:2f:d5:e5:fd: 06:89:3c:82:1b:37:c2:08:01:1e:be:52:70:f6:75: 0d:38:b4:ae:ac:c0:91:11:4d:f5:e2:30:cc:f0:4b: 45:82:2f:82:4e:a5:64:53:c2:bc:cd:ab:c9:1f:33: 9f:e1:9c:63:2a:09:e4:20:01:cd:41:4a:6c:b7:e9: a8:38:af:e7:06:af:a5:d8:68:93:de:96:e0:04:24: cb:6b:f1:7a:fa:64:1d:49:45:e2:d3:ac:f7:ab:a2: 94:47:01:00:d9:f8:d7:62:3b:88:68:42:3a:ff:71: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A8:36:C7:9C:8A:0D:59:91:86:DA:A0:3B:02:5A:33:77:DE:46:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:59:bc:f3:65:36:72:0c:18:c7:0f:6c:f9:48:14:d7:da:ae: 62:49:1f:8c:6b:50:b7:23:90:99:24:c9:b0:0c:5f:65:f0:cc: 95:76:f7:d2:91:a9:8d:98:eb:64:b2:45:01:75:a6:42:1a:4e: 2a:cf:f1:15:80:bd:e7:24:98:0e:ca:5a:cd:48:af:43:42:6a: ef:99:15:88:71:a7:f4:02:74:c4:cc:60:b3:20:73:78:51:bd: 9f:2b:a9:46:f2:12:c8:b6:69:ec:ba:8f:ad:0b:33:99:08:c4: 61:b8:61:58:a1:ab:3a:74:e3:f5:83:17:9b:36:d2:dd:57:06: f2:d9:f6:6c:2a:d1:fb:6a:fc:0b:b0:d4:2c:ef:00:3c:b4:13: 01:e6:25:4b:33:12:d6:8e:6f:6a:3e:af:11:63:9a:02:a7:a2: 88:e0:ef:70:41:68:db:d8:c2:4c:00:04:f6:21:48:89:a1:fc: 14:3b:66:39:43:b0:e6:2f:b0:9a:bd:01:f5:72:0e:68:d5:76: ca:0e:10:fe:81:0b:d8:a0:c6:0b:ae:67:4d:ad:47:1e:fe:52: bf:b8:4b:0e:fd:07:e6:92:82:d6:f6:fa:9c:6d:aa:62:73:b2: 4a:04:11:5d:cb:da:58:5d:b3:a5:26:a7:fc:08:cc:d6:da:2d: f2:b5:3d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx17oybCvIS2NhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTM1NDFhZWEtMjIxZi00MTA3LTk2MTktZTQ0ODljZjY5OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhagWsdCiRdAcCESb4SNVV3haTdzLy6pDTP7q mqXIr8mwhmEKhZSEd6OI38MmE60acIxiFYJ9fsqkgplwErV6Q/B/FNn2PJc5I3kv AlOw7YC1qA2i9+QUDRXuyLCbuwsVtQas9cW9FD6hln12imyKsyryR5t1Q55LdBo6 p+NyMVdiHcxLJZksQTGB+uW9Sf8BjC/V5f0GiTyCGzfCCAEevlJw9nUNOLSurMCR EU314jDM8EtFgi+CTqVkU8K8zavJHzOf4ZxjKgnkIAHNQUpst+moOK/nBq+l2GiT 3pbgBCTLa/F6+mQdSUXi06z3q6KURwEA2fjXYjuIaEI6/3EY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLioNsecig1ZkYbaoDsCWjN33kYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNTg1NmVhZTktOTMzMi0z ZmQ0LWI3YzktZjI0M2RiMzAyY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVZvPNlNnIMGMcPbPlIFNfarmJJH4xrULcjkJkkybAMX2XwzJV299KR qY2Y62SyRQF1pkIaTirP8RWAveckmA7KWs1Ir0NCau+ZFYhxp/QCdMTMYLMgc3hR vZ8rqUbyEsi2aey6j60LM5kIxGG4YVihqzp04/WDF5s20t1XBvLZ9mwq0ftq/Auw 1CzvADy0EwHmJUszEtaOb2o+rxFjmgKnoojg73BBaNvYwkwABPYhSImh/BQ7ZjlD sOYvsJq9AfVyDmjVdsoOEP6BC9igxguuZ02tRx7+Ur+4Sw79B+aSgtb2+pxtqmJz skoEEV3L2lhds6Ump/wIzNbaLfK1PZo= -----END CERTIFICATE-----Generated at Sat Oct 11 19:02:06 2025 by rpki-client