$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/698d1123-51bd-32cd-b177-e3f77049ffb3.roa File: 698d1123-51bd-32cd-b177-e3f77049ffb3.roa (raw, json) Hash identifier: npNjfNafYak1aU9+oLS9M/ZXAZBLwGpGTaCUKpoiqF0= Subject key identifier: 49:FC:92:C0:FE:58:2A:66:F3:4C:A1:0B:C8:CD:03:5A:B5:31:E1:5B Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B6BC75EF881F4F04226F3AB80 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/698d1123-51bd-32cd-b177-e3f77049ffb3.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7764 IP address blocks: 148.129.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5e:f8:81:f4:f0:42:26:f3:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6e3883cf-7827-44c2-b74f-78916ff5aaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:1b:4b:35:11:fa:92:66:1c:f1:16:71:50: d2:94:2a:28:fd:0f:a6:e1:92:e0:d8:48:b1:2a:5e: 94:5c:06:49:95:c7:77:8c:96:40:c7:01:06:1c:ae: e3:57:e8:3c:1f:63:32:c0:81:d1:90:87:ba:59:50: ca:31:49:e1:71:dd:da:51:34:49:00:0c:93:71:24: d7:79:e9:cb:e1:e9:dc:2b:cd:7b:dc:eb:7e:ad:08: 18:2d:75:37:f8:01:ad:2a:37:83:7f:da:dc:88:bf: 82:a7:8d:2f:4a:03:2d:b0:46:10:0c:d2:f8:7c:26: de:f0:cd:6b:82:ef:ec:10:cb:25:0c:2e:49:da:ab: 92:47:7a:07:7c:12:5a:37:d4:6c:51:44:06:80:2f: 19:83:29:5d:81:d1:98:05:65:d8:02:7e:ad:d8:3a: b9:c8:6d:52:0a:22:3a:a8:86:e0:a3:b5:63:11:a5: 20:6e:ee:72:93:b6:60:a3:19:1e:5e:10:e0:cf:14: 7f:4c:55:6e:88:cb:8c:46:bd:2a:4b:ab:84:53:8e: cc:90:91:2f:f6:f5:88:4f:f2:93:21:cf:55:d2:91: 19:b4:b6:ac:c5:02:29:fb:42:0e:5a:e7:24:02:1e: a9:f3:8b:83:b8:be:6d:ab:07:bf:6d:fa:b2:b2:36: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:92:C0:FE:58:2A:66:F3:4C:A1:0B:C8:CD:03:5A:B5:31:E1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/698d1123-51bd-32cd-b177-e3f77049ffb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:89:f2:13:f8:8c:33:79:0a:05:92:0c:5e:69:2d:d7:24:06: ec:3d:56:12:36:a3:4c:57:a7:33:b8:3f:dd:c7:72:c3:21:f3: c5:71:0c:b2:8f:22:7f:31:db:b9:40:1c:58:83:e0:f2:9c:d7: cc:4f:2b:11:4a:d0:dd:ac:d7:11:3a:5f:f7:15:49:40:7f:31: 3b:f4:2d:9d:91:e9:e1:e4:58:e9:4d:7d:50:af:83:53:1d:97: 94:49:92:e9:97:40:cf:ac:31:83:57:30:93:20:56:08:1a:99: 1b:f2:33:f9:2a:07:6e:70:c8:28:6c:ae:92:a9:ed:26:54:e4: ac:25:3a:45:96:04:2c:bc:19:d9:a5:35:27:77:12:36:df:d9: 47:f9:95:af:d8:92:de:3f:29:db:52:08:b8:be:9c:04:3f:b3: 32:ac:0a:05:00:7c:d7:e6:8b:0d:79:c8:8e:ae:5c:30:d1:5c: b5:fd:f9:b2:fb:eb:6b:71:c0:eb:8f:23:6e:bf:ce:5a:de:f6: b6:42:df:3a:a8:24:55:ca:ce:ee:e3:d5:23:e2:ac:06:30:31: 9c:99:c7:ae:23:92:4f:2b:77:ea:b6:9a:e4:aa:a7:cc:82:8f: d1:19:85:6a:31:6e:2e:b5:ff:36:16:c2:a7:52:f3:e1:a7:0c: 39:5c:cc:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx174gfTwQibzq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmUzODgzY2YtNzgyNy00NGMyLWI3NGYtNzg5MTZmZjVhYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM0bSzUR+pJmHPEWcVDSlCoo/Q+m4ZLg2Eix Kl6UXAZJlcd3jJZAxwEGHK7jV+g8H2MywIHRkIe6WVDKMUnhcd3aUTRJAAyTcSTX eenL4encK8173Ot+rQgYLXU3+AGtKjeDf9rciL+Cp40vSgMtsEYQDNL4fCbe8M1r gu/sEMslDC5J2quSR3oHfBJaN9RsUUQGgC8ZgyldgdGYBWXYAn6t2Dq5yG1SCiI6 qIbgo7VjEaUgbu5yk7ZgoxkeXhDgzxR/TFVuiMuMRr0qS6uEU47MkJEv9vWIT/KT Ic9V0pEZtLasxQIp+0IOWuckAh6p84uDuL5tqwe/bfqysjaOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn8ksD+WCpm80yhC8jNA1q1MeFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNjk4ZDExMjMtNTFiZC0z MmNkLWIxNzctZTNmNzcwNDlmZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlIGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGJ8hP4jDN5CgWSDF5pLdckBuw9VhI2o0xXpzO4P93HcsMh88VxDLKP In8x27lAHFiD4PKc18xPKxFK0N2s1xE6X/cVSUB/MTv0LZ2R6eHkWOlNfVCvg1Md l5RJkumXQM+sMYNXMJMgVggamRvyM/kqB25wyChsrpKp7SZU5KwlOkWWBCy8Gdml NSd3Ejbf2Uf5la/Ykt4/KdtSCLi+nAQ/szKsCgUAfNfmiw15yI6uXDDRXLX9+bL7 62txwOuPI26/zlre9rZC3zqoJFXKzu7j1SPirAYwMZyZx64jkk8rd+q2muSqp8yC j9EZhWoxbi61/zYWwqdS8+GnDDlczCc= -----END CERTIFICATE-----Generated at Sat Oct 11 19:01:00 2025 by rpki-client