$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa File: 34356240-b9ca-32e3-ba11-33750e597e1e.roa (raw, json) Hash identifier: GKsZ0jUG88eLSy0btLU7Yi/tBiz0hr15QPNAW4ec3MU= Subject key identifier: 8A:E4:F8:15:5E:AE:21:7E:0D:D8:55:1B:89:AA:67:88:48:E1:8C:5C Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584EAE81A65520F4D6E2BA7AC400 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7764 IP address blocks: 148.129.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:a6:55:20:f4:d6:e2:ba:7a:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=2a41e7e2-eac2-4269-94e0-fa40b4d6c15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:58:a4:de:77:77:23:f4:c8:c1:9b:22:10: 27:ac:12:2e:51:c9:11:65:a2:3f:38:d9:38:b1:fd: ed:f2:a7:33:9c:58:2a:7f:11:0a:ea:66:9a:66:54: 07:dd:e6:0e:fe:7c:f5:7f:6a:81:4a:d3:49:93:3b: 12:d0:b7:e8:59:74:22:9c:f1:29:d5:f3:86:75:68: 70:c5:5c:fd:df:2d:1e:47:27:19:7a:be:42:ed:d8: c0:a3:2e:bb:7f:87:68:3e:ad:64:04:49:af:82:c1: a3:95:11:40:2d:b5:85:54:d6:76:b8:4b:1f:f3:b2: 31:24:9a:48:23:b5:c9:e3:ad:e2:70:a3:3f:f6:0e: 18:83:f3:23:52:e4:28:1f:32:36:c0:b7:c1:cd:39: 7f:49:ef:e5:e7:7b:b2:99:f1:c3:08:c9:31:a3:25: be:b2:90:c0:82:88:33:09:17:b7:3c:16:a6:39:4a: 69:50:1e:0d:76:1a:98:fa:65:43:98:26:00:06:0f: d0:6f:81:df:4a:14:a6:a2:af:c6:ce:15:d1:52:37: 5d:50:2f:bb:68:9e:21:fb:2d:28:c1:62:98:cb:60: 81:bc:bf:5b:ad:72:27:a9:6c:df:a2:97:dd:56:4a: b4:d2:73:c8:61:78:45:1f:3f:f9:6a:52:79:c2:42: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:F8:15:5E:AE:21:7E:0D:D8:55:1B:89:AA:67:88:48:E1:8C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:65:c2:31:d8:1e:b3:96:f1:5b:83:6a:af:41:44:39:7b:4d: af:b0:fb:1f:36:c8:49:3d:af:44:70:54:4b:b8:14:b1:42:3e: 29:82:af:1f:79:d4:81:b3:cf:43:f8:9e:cb:45:e4:ad:e8:82: 47:f5:a1:bb:10:b9:2a:d9:74:24:97:af:08:17:e9:6c:4a:62: d3:b6:a8:bd:37:e6:34:63:d7:7b:93:2e:87:35:06:45:02:2e: a7:a1:9e:5a:8a:e4:06:3c:12:a0:c8:af:ee:c3:f3:c8:fb:ca: 82:c9:a3:ec:b3:53:d8:9c:6d:1a:e7:cf:f4:22:be:da:41:06: 1b:00:aa:1f:68:9c:c8:ed:39:7a:be:84:10:53:74:5d:0c:f5: cd:6b:18:89:d8:cc:fc:be:e7:77:0c:55:62:2f:2d:2c:dd:a6: e0:a3:1f:6f:c4:f7:04:88:60:c1:d7:f4:de:ef:7b:0a:10:66: 4e:c6:dd:ff:e0:ec:d6:f0:d8:dd:86:91:39:a7:5e:ae:b8:13: a6:5e:cd:6b:cc:bf:89:15:a4:bc:fc:5a:1b:69:c5:54:d8:77: e8:38:89:5d:83:3c:32:9d:6d:1e:e2:d2:17:46:89:26:1f:3c: 05:d6:cb:77:9e:16:97:67:e4:91:e5:ea:e7:59:2c:66:c7:6d: 72:24:2f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugaZVIPTW4rp6xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MmE0MWU3ZTItZWFjMi00MjY5LTk0ZTAtZmE0MGI0ZDZjMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1VYpN53dyP0yMGbIhAnrBIuUckRZaI/ONk4 sf3t8qcznFgqfxEK6maaZlQH3eYO/nz1f2qBStNJkzsS0LfoWXQinPEp1fOGdWhw xVz93y0eRycZer5C7djAoy67f4doPq1kBEmvgsGjlRFALbWFVNZ2uEsf87IxJJpI I7XJ463icKM/9g4Yg/MjUuQoHzI2wLfBzTl/Se/l53uymfHDCMkxoyW+spDAgogz CRe3PBamOUppUB4NdhqY+mVDmCYABg/Qb4HfShSmoq/GzhXRUjddUC+7aJ4h+y0o wWKYy2CBvL9brXInqWzfopfdVkq00nPIYXhFHz/5alJ5wkIBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrk+BVeriF+DdhVG4mqZ4hI4YxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMzQzNTYyNDAtYjljYS0z MmUzLWJhMTEtMzM3NTBlNTk3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRlwjHYHrOW8VuDaq9BRDl7Ta+w+x82yEk9r0RwVEu4FLFCPimCrx95 1IGzz0P4nstF5K3ogkf1obsQuSrZdCSXrwgX6WxKYtO2qL035jRj13uTLoc1BkUC LqehnlqK5AY8EqDIr+7D88j7yoLJo+yzU9icbRrnz/QivtpBBhsAqh9onMjtOXq+ hBBTdF0M9c1rGInYzPy+53cMVWIvLSzdpuCjH2/E9wSIYMHX9N7vewoQZk7G3f/g 7Nbw2N2GkTmnXq64E6ZezWvMv4kVpLz8WhtpxVTYd+g4iV2DPDKdbR7i0hdGiSYf PAXWy3eeFpdn5JHl6udZLGbHbXIkLz4= -----END CERTIFICATE-----Generated at Sun Sep 13 18:15:43 2026 by rpki-client