$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa File: 8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa (raw, json) Hash identifier: rxNwhvgcMi/Qv/+yn7RAkYhLq1Fk5efzqgWYuqcP1nc= Subject key identifier: 0F:9E:4F:37:CB:EB:D1:02:E3:DB:11:76:94:C2:C2:BE:72:20:97:B6 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B95A79D09B38F3682B9E8C600 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3477 IP address blocks: 192.149.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9d:09:b3:8f:36:82:b9:e8:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c069fa00-763d-4f8f-9720-ed79c82e6064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:cd:36:80:16:fa:d1:da:b6:42:ef:f9:a2: d3:dd:be:31:d9:f7:0d:d5:4d:07:ea:ba:73:80:9b: cd:5e:4e:dd:dc:95:b0:e9:de:eb:96:cb:ea:f1:6e: 54:69:49:c0:20:e1:9f:69:8c:48:54:a7:df:01:1e: dc:cd:68:c0:79:56:29:c5:df:63:55:a5:af:0e:df: a4:39:2c:92:1f:56:ed:eb:c5:1e:fb:f4:c7:b5:c9: 60:0d:0d:c4:3d:7c:1b:0b:06:50:36:a3:57:03:9c: 4e:73:03:a2:ce:d4:aa:c5:34:0f:bd:07:d0:a8:bc: 25:58:95:d1:d3:4b:0d:e8:17:7a:94:38:50:d8:da: cc:89:f0:f0:57:14:75:66:5c:89:eb:f8:d1:d8:8d: 5c:72:97:e6:13:c3:e9:ef:9f:b7:ab:b2:b6:93:4c: 5c:07:c1:06:ca:60:c7:bf:13:2c:a8:32:a0:f9:1f: 84:2a:d9:e0:18:5c:b7:aa:db:ad:7e:1b:d6:5e:1b: c4:a2:19:f6:96:88:d8:14:6d:0b:a7:d4:b2:c6:08: 8a:67:47:8c:ed:38:42:66:80:76:6c:64:72:1c:b4: 32:cb:23:56:de:df:f8:be:aa:11:71:52:aa:d1:d5: ff:2e:d2:82:f2:6a:f7:b8:89:37:86:87:9d:4d:a2: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9E:4F:37:CB:EB:D1:02:E3:DB:11:76:94:C2:C2:BE:72:20:97:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.149.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b9:c4:1f:e0:5b:78:12:1b:dd:ec:5a:b0:5c:4b:31:1d:9b: b3:4a:f6:25:b3:48:37:f7:06:32:54:4a:c8:a8:d7:12:14:30: 1f:82:5c:5a:7c:f7:77:fc:70:8b:48:d0:ed:54:d2:a8:40:5a: 1c:68:4a:f1:09:6b:cb:b7:da:1b:6c:4a:cc:3a:05:58:69:00: 10:70:59:dd:64:3c:db:71:0d:95:fa:cb:a0:9c:ed:7c:5c:ec: 91:dc:37:10:de:4a:b3:32:24:be:a2:4f:e0:11:40:31:29:41: d0:26:9f:29:0c:d3:3e:de:48:54:fd:08:4a:a1:42:d6:79:da: 4f:fe:73:b1:4d:76:6b:58:93:b0:9a:3b:38:75:0d:3e:6b:1c: eb:54:2e:4e:24:0b:61:ee:cf:d4:3c:9e:35:17:8a:86:50:43: 44:a8:dd:43:c7:8a:6b:c6:2a:b1:6f:d0:d4:72:eb:58:4f:5e: ef:87:4e:5e:fb:1c:19:9e:b0:10:3b:c0:f9:92:b3:dd:74:4a: f5:1c:6f:1c:0e:f1:30:13:ff:c2:c8:55:f5:1f:ff:9f:e6:3a: 19:e1:a9:71:69:ad:9a:57:a7:0f:3d:fe:17:0f:85:d7:f1:53: f9:9f:dd:08:47:8c:c9:04:45:70:25:b2:33:31:14:22:61:6e: 73:34:3e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp50Js482grnoxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzA2OWZhMDAtNzYzZC00ZjhmLTk3MjAtZWQ3OWM4MmU2MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWnNNoAW+tHatkLv+aLT3b4x2fcN1U0H6rpz gJvNXk7d3JWw6d7rlsvq8W5UaUnAIOGfaYxIVKffAR7czWjAeVYpxd9jVaWvDt+k OSySH1bt68Ue+/THtclgDQ3EPXwbCwZQNqNXA5xOcwOiztSqxTQPvQfQqLwlWJXR 00sN6Bd6lDhQ2NrMifDwVxR1ZlyJ6/jR2I1ccpfmE8Pp75+3q7K2k0xcB8EGymDH vxMsqDKg+R+EKtngGFy3qtutfhvWXhvEohn2lojYFG0Lp9SyxgiKZ0eM7ThCZoB2 bGRyHLQyyyNW3t/4vqoRcVKq0dX/LtKC8mr3uIk3hoedTaJIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+eTzfL69EC49sRdpTCwr5yIJe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvOGFiMTFiOGItOGJlYy0z M2RhLWFiOTgtOWQ3YjRlOGRmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+5xB/gW3gSG93sWrBcSzEdm7NK9iWzSDf3BjJUSsio1xIUMB+CXFp8 93f8cItI0O1U0qhAWhxoSvEJa8u32htsSsw6BVhpABBwWd1kPNtxDZX6y6Cc7Xxc 7JHcNxDeSrMyJL6iT+ARQDEpQdAmnykM0z7eSFT9CEqhQtZ52k/+c7FNdmtYk7Ca Ozh1DT5rHOtULk4kC2Huz9Q8njUXioZQQ0So3UPHimvGKrFv0NRy61hPXu+HTl77 HBmesBA7wPmSs910SvUcbxwO8TAT/8LIVfUf/5/mOhnhqXFprZpXpw89/hcPhdfx U/mf3QhHjMkERXAlsjMxFCJhbnM0Pvw= -----END CERTIFICATE-----Generated at Fri Oct 24 00:39:27 2025 by rpki-client