$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa File: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (raw, json) Hash identifier: rzSTWg0nZqyUt253r/b7cEdATCeW2mlDv3M7lwCEnWM= Subject key identifier: 64:FC:67:17:67:43:E5:8D:78:85:A2:27:DA:E9:C7:32:CB:64:23:73 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584B33F1A1FC22259AB324433D80 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 54542 IP address blocks: 148.59.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a1:fc:22:25:9a:b3:24:43:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=b94f69c4-f0e5-49c7-b8a5-a15af4326da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:c8:a5:2f:80:03:0b:6d:46:66:0d:33:92: b5:dc:d4:5d:ef:2e:34:8f:f2:11:96:22:21:18:c6: cb:92:5d:61:1c:e8:bb:a1:8f:33:03:c2:d1:17:5e: 8b:fe:da:48:70:65:94:38:02:5d:5f:98:12:f1:7c: 06:54:dd:d7:02:17:1d:97:9d:a2:07:89:c6:ad:24: 59:f3:aa:1e:46:c2:c3:c0:66:59:9b:ed:c7:90:fb: 43:bc:99:84:a3:dc:a0:c2:87:62:9a:a5:35:1c:d1: f2:d0:29:7f:f6:6a:69:4f:b5:7b:33:da:b4:29:a4: bb:2c:6a:c2:76:9b:d7:c6:b6:b7:14:c3:00:38:0a: 18:f2:2c:bf:80:af:9e:cd:7b:49:78:d7:14:60:a7: c8:98:32:e8:cd:9d:1e:4a:cd:4a:d7:db:67:07:a3: 44:56:97:69:bb:22:81:30:bf:c4:be:80:08:3c:88: e2:c8:c4:f2:05:c6:1a:99:ff:c8:0a:af:6d:b4:68: 76:9d:51:2e:85:01:20:4d:c9:ad:f1:d6:ed:d3:e2: b3:b5:83:60:f8:64:2d:f5:12:4c:6f:a7:39:bb:62: a1:fe:a7:4a:49:03:83:c0:77:63:94:56:fc:bc:53: a8:19:d9:9a:e8:a5:1c:03:f0:be:60:91:5d:d0:a5: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FC:67:17:67:43:E5:8D:78:85:A2:27:DA:E9:C7:32:CB:64:23:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: 148.59.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1e:b7:a3:f8:91:f8:60:22:47:00:b9:c8:d8:43:16:56:6d: 97:11:9a:70:9b:42:5b:cd:5f:2c:73:f4:6f:ac:84:f9:68:5c: 11:3e:7a:2d:38:7e:95:23:12:ae:32:35:d4:92:16:18:43:78: e1:e9:b9:6d:1c:40:3e:e4:cd:ba:fb:aa:96:a0:c4:ce:52:6e: 4b:72:52:e0:51:28:99:95:27:81:e2:17:d6:c8:b3:62:2e:15: ab:cb:19:21:77:d2:97:61:10:7e:2d:b4:73:a2:ee:06:57:83: 87:81:35:90:c7:f2:9a:6b:14:ee:b7:a1:28:c6:91:5f:60:12: 42:f8:17:a6:0f:23:fb:48:06:a0:e8:d0:ee:38:e3:ee:d8:18: 8e:29:e2:dd:e6:50:5d:68:af:ec:27:33:f3:ea:79:e6:82:b3: cd:f2:20:7c:36:a3:68:a2:cc:1e:cc:af:ad:03:d0:05:71:ce: 27:ef:3b:86:2c:41:82:58:86:fb:56:96:50:05:d4:9f:fc:0a: f9:4b:f6:fb:ce:03:f0:0e:dc:91:e2:bb:7e:8d:8e:45:62:4b: ef:b4:3c:62:0a:7a:41:71:2d:49:03:34:0e:29:00:d1:6d:a2: 18:64:0a:0b:53:69:b1:58:a3:04:7a:81:bd:e4:92:ab:a3:00: 94:66:9a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aH8IiWasyRDPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk Yjk0ZjY5YzQtZjBlNS00OWM3LWI4YTUtYTE1YWY0MzI2ZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIXIpS+AAwttRmYNM5K13NRd7y40j/IRliIh GMbLkl1hHOi7oY8zA8LRF16L/tpIcGWUOAJdX5gS8XwGVN3XAhcdl52iB4nGrSRZ 86oeRsLDwGZZm+3HkPtDvJmEo9ygwodimqU1HNHy0Cl/9mppT7V7M9q0KaS7LGrC dpvXxra3FMMAOAoY8iy/gK+ezXtJeNcUYKfImDLozZ0eSs1K19tnB6NEVpdpuyKB ML/EvoAIPIjiyMTyBcYamf/ICq9ttGh2nVEuhQEgTcmt8dbt0+KztYNg+GQt9RJM b6c5u2Kh/qdKSQODwHdjlFb8vFOoGdma6KUcA/C+YJFd0KX98QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT8ZxdnQ+WNeIWiJ9rpxzLLZCNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvZjJmY2MzNDktNjI0Yy0z OGI3LTg4YTUtOWZlZTQ3YmMwNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQet6P4kfhgIkcAucjYQxZWbZcRmnCbQlvNXyxz9G+shPloXBE+ei04 fpUjEq4yNdSSFhhDeOHpuW0cQD7kzbr7qpagxM5SbktyUuBRKJmVJ4HiF9bIs2Iu FavLGSF30pdhEH4ttHOi7gZXg4eBNZDH8pprFO63oSjGkV9gEkL4F6YPI/tIBqDo 0O444+7YGI4p4t3mUF1or+wnM/PqeeaCs83yIHw2o2iizB7Mr60D0AVxzifvO4Ys QYJYhvtWllAF1J/8CvlL9vvOA/AO3JHiu36NjkViS++0PGIKekFxLUkDNA4pANFt ohhkCgtTabFYowR6gb3kkqujAJRmmkQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:42 2025 by rpki-client