$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa File: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (raw, json) Hash identifier: 2We7IJCneOXj5JL9p8TCYLUbFpiXjNTcoP/GU1j1W/Y= Subject key identifier: 5E:E2:A0:17:04:11:CE:68:EB:50:A0:A4:55:69:61:FA:8A:0F:47:3A Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584AFEE6A22DB8E7F58A474AFB80 Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 148.59.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a2:2d:b8:e7:f5:8a:47:4a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=20138a94-56dc-4ddc-b51a-15b71f0a59b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:25:60:6e:75:ec:6f:06:c9:8c:36:50:a5: 95:68:82:e0:2b:2a:27:c2:b4:5a:d1:a2:90:55:a4: d2:c8:4f:8a:33:50:fb:e5:65:e6:1f:2b:31:6d:6b: 62:57:9c:57:e7:7e:6a:76:57:ce:c0:6d:ca:a4:e6: d8:ae:e3:25:8a:f5:b6:f0:70:fb:72:07:63:99:9d: 15:31:d5:cb:b5:28:b5:89:05:b1:d7:91:0e:18:89: 07:03:05:94:8d:dc:46:f5:b3:a9:cf:98:77:b5:a8: 0a:2c:35:a7:09:80:6d:1f:98:3c:04:a6:37:cc:6d: 9f:af:9b:36:73:b2:09:5d:93:9a:36:69:e8:78:fb: f9:90:ae:a7:8b:c2:e3:92:e3:1f:e1:c2:84:1b:61: c0:d8:78:25:49:aa:44:7d:05:40:a8:b6:81:bf:0f: 77:3b:6c:1a:53:77:71:c1:97:ae:3e:bb:3a:5c:48: fe:df:e7:ce:b2:ac:1b:ea:dc:21:76:97:89:c5:c2: 83:2c:e5:48:24:cc:00:e6:2a:38:3f:a3:c3:66:70: 4c:81:41:66:88:8c:2a:3e:44:fb:21:e7:1a:1b:e5: a4:9c:fe:b7:99:ed:ff:92:b4:36:73:e9:3d:1e:5c: 0a:7f:53:5b:d1:22:3c:f4:f3:2c:66:e6:65:e2:a8: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:A0:17:04:11:CE:68:EB:50:A0:A4:55:69:61:FA:8A:0F:47:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: 148.59.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:10:47:64:e9:f9:d9:c9:7e:40:8b:a6:f7:6a:89:f5:d1:df: cd:0f:2f:34:f0:6d:86:cb:01:03:a5:f2:cc:c6:2e:f2:29:d1: 48:a0:25:a5:87:e5:c4:2a:02:35:dc:76:a6:25:07:df:94:5c: 55:70:b7:d9:b4:fe:33:14:b4:55:83:cb:34:53:4e:a6:b9:de: 3a:14:62:28:8b:ee:b5:03:c3:0e:f6:b6:c2:d7:af:58:b9:d4: 92:50:c9:9f:51:6d:8c:b9:47:fa:f2:78:88:f8:76:93:be:9b: 53:c9:1c:08:6c:a4:df:1b:b0:00:f0:e4:47:3c:80:6a:4a:0e: f5:2e:b1:71:56:20:67:dc:bf:8d:fc:2b:28:6b:6f:4f:31:be: 9a:a0:a1:33:bc:05:aa:a0:d3:d9:35:b3:67:82:87:e5:66:9d: fc:08:f8:c0:60:83:85:48:4c:77:7b:8f:73:95:4e:ca:62:93: f0:90:0d:f9:c0:f0:b2:7c:d2:39:8b:b7:7d:cc:14:6d:45:23: 39:73:09:65:d3:f1:2f:64:1e:46:83:46:28:ee:db:8c:37:21: b6:b3:91:8f:ad:2a:63:7f:27:3a:bd:bb:cd:21:59:c4:01:e4: 21:99:e4:f1:94:1d:8b:71:76:da:2f:36:34:79:88:36:78:5b: 1f:3e:1e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qItuOf1ikdK+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MjAxMzhhOTQtNTZkYy00ZGRjLWI1MWEtMTViNzFmMGE1OWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ4lYG517G8GyYw2UKWVaILgKyonwrRa0aKQ VaTSyE+KM1D75WXmHysxbWtiV5xX535qdlfOwG3KpObYruMlivW28HD7cgdjmZ0V MdXLtSi1iQWx15EOGIkHAwWUjdxG9bOpz5h3tagKLDWnCYBtH5g8BKY3zG2fr5s2 c7IJXZOaNmnoePv5kK6ni8LjkuMf4cKEG2HA2HglSapEfQVAqLaBvw93O2waU3dx wZeuPrs6XEj+3+fOsqwb6twhdpeJxcKDLOVIJMwA5io4P6PDZnBMgUFmiIwqPkT7 IecaG+WknP63me3/krQ2c+k9HlwKf1Nb0SI89PMsZuZl4qiFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7ioBcEEc5o61CgpFVpYfqKD0c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvM2NjNzEzMWQtN2E2MC0z NzEyLTkyZGQtMzUyODAyNjQzNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcQR2Tp+dnJfkCLpvdqifXR380PLzTwbYbLAQOl8szGLvIp0UigJaWH 5cQqAjXcdqYlB9+UXFVwt9m0/jMUtFWDyzRTTqa53joUYiiL7rUDww72tsLXr1i5 1JJQyZ9RbYy5R/ryeIj4dpO+m1PJHAhspN8bsADw5Ec8gGpKDvUusXFWIGfcv438 Kyhrb08xvpqgoTO8Baqg09k1s2eCh+VmnfwI+MBgg4VITHd7j3OVTspik/CQDfnA 8LJ80jmLt33MFG1FIzlzCWXT8S9kHkaDRiju24w3IbazkY+tKmN/Jzq9u80hWcQB 5CGZ5PGUHYtxdtovNjR5iDZ4Wx8+Hj4= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:29 2025 by rpki-client