$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/a6c1822e-c1ca-338e-832b-541af7d2ecc9.roa File: a6c1822e-c1ca-338e-832b-541af7d2ecc9.roa (raw, json) Hash identifier: 7GSQRvbkSjsTyHN2HTIM3mKDlbhWxsDAC0zJ6qn06c4= Subject key identifier: 8A:49:FA:0B:EC:64:15:14:A6:B1:DE:BB:10:CF:E2:51:25:92:7C:8E Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584F761D7CD3CD5A102C0F0507C0 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/a6c1822e-c1ca-338e-832b-541af7d2ecc9.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 7764 IP address blocks: 148.129.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7c:d3:cd:5a:10:2c:0f:05:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=dfabf5dc-07fb-4f3f-bac2-12b6d7560454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:3f:3e:8a:5c:9e:a6:22:37:25:45:bf:13: 8b:7a:c7:ff:1b:b6:c4:60:38:ec:2d:e7:ae:58:f4: 73:c8:12:78:d9:51:ee:f2:62:43:88:5c:cc:0b:6f: 0a:91:69:71:22:55:9f:59:02:39:7d:6d:dc:2d:e8: 62:7b:34:b4:f0:3e:c9:3e:ab:15:bf:f3:c1:43:5d: 53:8c:85:b4:2f:79:16:22:32:fb:28:5b:21:9d:76: c1:a6:f1:2b:6a:a1:a4:6d:c9:5c:b3:e8:09:c5:44: 42:9c:28:be:0b:05:a4:36:e9:93:e3:27:59:7c:f3: c5:74:92:01:6d:23:6d:77:63:98:ba:f0:b3:15:f0: 7d:ec:92:81:05:4d:53:bb:06:d5:c3:cb:df:2e:16: 01:80:e9:1a:08:41:13:1c:20:e4:60:eb:0e:ea:96: 47:a5:a3:17:79:b9:1c:ef:1f:5f:dc:4d:89:91:dc: e0:7c:c3:9d:12:60:19:fc:5c:98:eb:80:1e:e2:ab: ab:30:39:7d:2a:d1:c2:49:e6:96:b2:5f:96:d1:14: 22:19:99:08:9e:f5:e7:58:8c:db:8f:40:0e:47:1b: db:5c:95:e0:e4:49:f8:e4:22:a1:04:c3:08:4a:77: 22:a3:2d:7b:8b:24:c0:d7:b6:1e:72:bc:e7:51:aa: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:49:FA:0B:EC:64:15:14:A6:B1:DE:BB:10:CF:E2:51:25:92:7C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/a6c1822e-c1ca-338e-832b-541af7d2ecc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:27:28:58:b0:1c:3d:cc:6f:b2:ba:c2:fd:cf:a7:71:31:62: 85:43:4a:02:32:b2:b0:75:73:3a:55:67:91:3a:4e:79:09:c2: b0:d1:a1:64:ff:6d:01:a9:d7:98:75:12:8b:3e:33:fd:9f:e0: 6d:44:ea:67:0a:09:d1:40:ab:7c:dc:02:e6:35:e1:33:62:e2: 55:5e:ac:ee:55:3e:8a:41:c6:df:e9:85:76:38:22:12:fb:ce: 88:5c:41:0d:de:76:7d:ba:aa:cb:c0:6a:b5:64:9c:a9:06:d2: 0a:a5:35:bd:38:a1:c7:82:bc:05:09:9a:17:7c:12:f7:95:df: 53:d7:72:5e:01:9c:59:7c:a2:5e:16:7d:1f:75:e3:d6:aa:73: 2a:25:7d:b4:83:9c:89:dc:f3:62:cf:98:8c:47:5d:12:b7:a3: b0:33:11:44:37:86:8f:73:c0:f1:2f:23:78:f5:26:e9:0f:2d: de:46:d8:7f:8a:cb:de:cb:b6:38:ee:87:90:d9:51:ce:f6:0e: 7d:0d:b0:42:e7:a3:e7:e3:a9:7b:9c:5a:db:6d:00:46:22:bd: 85:ab:41:b8:02:5d:e7:05:55:48:15:80:b0:cf:12:2c:30:1f: 6c:b3:37:ef:81:17:74:28:9d:8c:5d:50:db:32:f5:e3:1b:10: ec:ac:0a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92HXzTzVoQLA8FB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk ZGZhYmY1ZGMtMDdmYi00ZjNmLWJhYzItMTJiNmQ3NTYwNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAg/PopcnqYiNyVFvxOLesf/G7bEYDjsLeeu WPRzyBJ42VHu8mJDiFzMC28KkWlxIlWfWQI5fW3cLehiezS08D7JPqsVv/PBQ11T jIW0L3kWIjL7KFshnXbBpvEraqGkbclcs+gJxURCnCi+CwWkNumT4ydZfPPFdJIB bSNtd2OYuvCzFfB97JKBBU1TuwbVw8vfLhYBgOkaCEETHCDkYOsO6pZHpaMXebkc 7x9f3E2JkdzgfMOdEmAZ/FyY64Ae4qurMDl9KtHCSeaWsl+W0RQiGZkInvXnWIzb j0AORxvbXJXg5En45CKhBMMISncioy17iyTA17YecrznUapbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpJ+gvsZBUUprHeuxDP4lElknyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYTZjMTgyMmUtYzFjYS0z MzhlLTgzMmItNTQxYWY3ZDJlY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlIEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8nKFiwHD3Mb7K6wv3Pp3ExYoVDSgIysrB1czpVZ5E6TnkJwrDRoWT/ bQGp15h1Eos+M/2f4G1E6mcKCdFAq3zcAuY14TNi4lVerO5VPopBxt/phXY4IhL7 zohcQQ3edn26qsvAarVknKkG0gqlNb04oceCvAUJmhd8EveV31PXcl4BnFl8ol4W fR9149aqcyolfbSDnInc82LPmIxHXRK3o7AzEUQ3ho9zwPEvI3j1JukPLd5G2H+K y97Ltjjuh5DZUc72Dn0NsELno+fjqXucWtttAEYivYWrQbgCXecFVUgVgLDPEiww H2yzN++BF3QonYxdUNsy9eMbEOysClo= -----END CERTIFICATE-----Generated at Sun Nov 1 21:05:23 2026 by rpki-client