$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa File: f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa (raw, json) Hash identifier: 20GqRWgCVjzQlNdY5NMUVzCF1IgW5lWb+6NVquESD64= Subject key identifier: FF:A1:96:09:12:C4:49:B9:EC:91:C5:E2:78:EF:F3:0B:05:7B:C0:A1 Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F4328584B9CA231DF95C4C84C1ECD1580 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 398101 IP address blocks: 148.72.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:31:df:95:c4:c8:4c:1e:cd:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=081e9ab2-aba1-4eaa-9892-fed3a34000e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:42:3d:50:04:54:1b:d2:f3:f8:fb:bc:5b: b1:2f:d6:22:b9:37:b0:36:5e:f6:b7:fa:85:a8:ac: cf:9d:18:f3:97:7e:97:6a:99:7f:24:7b:21:1a:b1: 26:35:78:bb:db:c2:f0:99:73:3b:56:8c:d1:a8:41: 6a:78:4c:1f:d2:86:9d:91:ab:e0:d5:a8:eb:56:ba: ec:01:cc:91:73:85:43:4b:6d:3e:57:81:b6:c7:5b: 38:d3:36:80:d7:6f:ba:c1:42:e4:36:47:27:9c:c6: 1a:5a:88:32:6a:4b:88:18:8f:dd:91:86:d6:f4:69: c1:87:6b:07:3d:0c:5d:59:ef:91:5b:0c:9a:32:f2: 82:38:e4:1b:4a:86:f6:74:0b:e3:64:38:e8:a2:0e: 17:67:a9:8b:05:94:a7:f4:4e:5f:9c:36:a2:7b:15: 7d:58:37:33:6e:7f:7a:b4:ab:77:14:0e:95:36:0e: ef:5a:bf:b9:f6:bd:85:6c:49:b9:45:1a:79:f6:2d: 58:64:93:92:ab:01:95:39:54:89:ad:6d:9c:c7:e2: 8c:66:d5:b3:22:b3:57:fd:8e:5c:b2:36:80:31:6c: 85:91:41:4f:67:c0:04:6a:3d:2c:b4:4d:9f:21:f6: 65:94:26:6a:15:6c:4e:3e:02:21:fe:d2:d2:b2:83: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:96:09:12:C4:49:B9:EC:91:C5:E2:78:EF:F3:0B:05:7B:C0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 148.72.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ec:10:27:9d:d9:db:c8:92:8c:ba:db:39:db:16:36:cc:b4: 21:22:6c:94:e1:74:23:3c:19:5b:57:8e:85:34:99:10:a0:78: 0d:ed:81:8f:ff:65:ea:15:27:03:1c:1d:ce:df:4c:8e:4c:22: 34:73:0a:a6:b4:39:cc:f6:47:6e:cd:08:64:66:d1:56:7b:d8: 57:4d:04:06:61:7f:cd:9c:9d:46:e6:cc:50:8c:76:21:46:40: e7:da:70:af:0c:7d:6d:11:de:5a:9b:6c:80:4b:48:f8:34:85: 33:e6:0b:98:a8:06:e9:65:a6:cc:b0:01:89:a9:67:5e:da:84: f6:38:4b:61:16:cd:ef:69:24:a2:f4:7b:3d:bc:e8:5d:80:99: a9:b0:da:5b:80:23:56:c7:6b:3f:9d:8f:be:91:6d:55:78:ee: 88:7c:a8:13:36:3b:2a:1b:1b:f2:79:47:3d:b3:80:75:7f:c3: f6:76:b4:ed:37:ac:ac:6b:f4:17:51:7b:21:8c:81:84:c0:42: 32:c8:9d:91:f9:8a:c7:64:20:3d:c0:32:6f:c3:4f:c6:96:24: 53:4e:2e:9e:85:66:ff:55:13:f3:3c:7e:42:97:4e:fa:14:87: 2c:57:8b:9d:2b:f6:ea:4e:cc:94:51:7e:7a:3d:3a:2f:98:b6: 5d:8a:73:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojHflcTITB7NFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MDgxZTlhYjItYWJhMS00ZWFhLTk4OTItZmVkM2EzNDAwMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry9CPVAEVBvS8/j7vFuxL9YiuTewNl72t/qF qKzPnRjzl36Xapl/JHshGrEmNXi728LwmXM7VozRqEFqeEwf0oadkavg1ajrVrrs AcyRc4VDS20+V4G2x1s40zaA12+6wULkNkcnnMYaWogyakuIGI/dkYbW9GnBh2sH PQxdWe+RWwyaMvKCOOQbSob2dAvjZDjoog4XZ6mLBZSn9E5fnDaiexV9WDczbn96 tKt3FA6VNg7vWr+59r2FbEm5RRp59i1YZJOSqwGVOVSJrW2cx+KMZtWzIrNX/Y5c sjaAMWyFkUFPZ8AEaj0stE2fIfZllCZqFWxOPgIh/tLSsoMmiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+hlgkSxEm57JHF4njv8wsFe8ChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvZjc0YzkwNzAtYmM3Zi0z ZGI4LWEwMDAtMmY2NWQ2YmY0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlEhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7sECed2dvIkoy62znbFjbMtCEibJThdCM8GVtXjoU0mRCgeA3tgY// ZeoVJwMcHc7fTI5MIjRzCqa0Ocz2R27NCGRm0VZ72FdNBAZhf82cnUbmzFCMdiFG QOfacK8MfW0R3lqbbIBLSPg0hTPmC5ioBullpsywAYmpZ17ahPY4S2EWze9pJKL0 ez286F2Amamw2luAI1bHaz+dj76RbVV47oh8qBM2OyobG/J5Rz2zgHV/w/Z2tO03 rKxr9BdReyGMgYTAQjLInZH5isdkID3AMm/DT8aWJFNOLp6FZv9VE/M8fkKXTvoU hyxXi50r9upOzJRRfno9Oi+Ytl2Kc2I= -----END CERTIFICATE-----Generated at Mon Nov 3 08:53:22 2025 by rpki-client