$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa File: 2319d758-c98d-395e-8e3d-c34f7f632200.roa (raw, json) Hash identifier: iXa7ib72dB9Js7d5JpgKF6J5jFnbOlLuYkqQJo0p4vQ= Subject key identifier: EA:8A:3E:3D:04:72:8D:34:AA:52:2A:B2:96:F7:A4:F7:D0:44:D7:E5 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B2553469B839A256DE00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 148.59.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b2:55:34:69:b8:39:a2:56:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=07cce45c-e64f-4d53-ae68-80a1015dede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:0b:e1:ef:70:95:9e:f7:86:ed:8a:c5:f7: 65:6e:91:90:13:57:24:67:c8:06:c4:b6:d7:9c:39: 35:7d:dd:06:71:aa:ae:09:63:12:58:86:05:f2:a6: b7:bf:b9:1c:78:6e:1a:73:41:f7:e7:40:23:56:91: 5e:89:25:6c:47:55:4a:e7:17:10:d0:22:72:7d:66: 36:c3:b9:dd:00:4e:36:69:84:97:a9:f6:95:cb:0b: 4f:7b:60:f0:b6:1f:53:4e:b4:db:b5:e4:0c:94:ad: 67:44:81:83:f1:31:9e:06:44:00:76:31:e2:ac:2a: 4e:7f:c4:40:e0:cd:b5:95:ab:88:e0:18:4c:9c:ed: 12:bf:4e:59:0f:ed:c6:f4:b6:da:5b:80:a9:70:24: d9:43:c6:30:57:17:8a:aa:91:99:89:a6:ef:91:d7: d6:72:d8:ba:61:bb:14:bc:47:e9:0f:08:cc:1e:59: de:9a:71:28:56:06:48:bd:30:e0:ea:5b:96:bd:80: 60:16:b6:10:a9:5a:ed:f6:67:ba:4d:71:c3:fb:b6: d5:93:4e:ef:dd:20:e1:9f:2e:f2:b8:4c:3a:b3:6e: f7:ab:f3:27:34:f1:82:1e:36:6a:0e:56:ba:ed:d5: 28:1f:0e:a9:8b:15:95:4c:ec:4c:fe:21:5b:d2:d4: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:3E:3D:04:72:8D:34:AA:52:2A:B2:96:F7:A4:F7:D0:44:D7:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a4:9f:59:20:30:0a:6f:dc:9d:cd:89:21:9d:5f:99:e8:8e: ff:65:17:a3:21:a1:05:5e:2c:98:d1:12:b5:b4:31:ab:d0:a3: e0:29:72:54:52:34:1f:bb:c1:57:fe:fe:0e:ff:fa:f9:43:3a: 8e:61:97:a1:ea:be:18:eb:7c:da:02:25:3a:00:47:ec:92:ad: 9b:ec:c6:32:b5:56:ee:ba:2c:1f:a5:43:69:04:89:3b:7d:f2: 4d:76:f1:0d:dd:04:78:6d:cc:49:b1:6c:fe:34:12:d4:3f:21: 2d:24:c4:9e:9b:31:54:c1:70:06:f7:46:8c:d6:77:b9:66:9e: 90:9d:a4:d5:1e:d3:db:1b:e9:d4:1d:e0:e7:42:44:82:26:51: 7b:89:45:a9:ed:a7:50:5d:65:70:15:e5:3e:d5:10:1c:03:1d: 43:ba:ed:e1:69:5c:fd:31:4b:48:0c:bd:8e:f0:94:d2:84:60: 2f:64:4a:c5:01:c1:e4:95:11:14:f2:ad:1c:91:f2:96:e0:a7: ac:dd:12:4a:15:55:1e:09:aa:31:4e:7c:09:58:2e:2d:8f:ec: fb:a6:81:6c:a4:97:f6:37:bf:5d:8d:06:87:3f:f0:c3:e3:0d: 75:91:8e:47:ad:69:7e:bb:7f:6c:52:6f:86:97:2b:ad:77:97: ad:55:3c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7JVNGm4OaJW3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDdjY2U0NWMtZTY0Zi00ZDUzLWFlNjgtODBhMTAxNWRlZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8L4e9wlZ73hu2KxfdlbpGQE1ckZ8gGxLbX nDk1fd0GcaquCWMSWIYF8qa3v7kceG4ac0H350AjVpFeiSVsR1VK5xcQ0CJyfWY2 w7ndAE42aYSXqfaVywtPe2Dwth9TTrTbteQMlK1nRIGD8TGeBkQAdjHirCpOf8RA 4M21lauI4BhMnO0Sv05ZD+3G9LbaW4CpcCTZQ8YwVxeKqpGZiabvkdfWcti6YbsU vEfpDwjMHlnemnEoVgZIvTDg6luWvYBgFrYQqVrt9me6TXHD+7bVk07v3SDhny7y uEw6s273q/MnNPGCHjZqDla67dUoHw6pixWVTOxM/iFb0tQJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqKPj0Eco00qlIqspb3pPfQRNflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjMxOWQ3NTgtYzk4ZC0z OTVlLThlM2QtYzM0ZjdmNjMyMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOkn1kgMApv3J3NiSGdX5nojv9lF6MhoQVeLJjRErW0MavQo+ApclRS NB+7wVf+/g7/+vlDOo5hl6HqvhjrfNoCJToAR+ySrZvsxjK1Vu66LB+lQ2kEiTt9 8k128Q3dBHhtzEmxbP40EtQ/IS0kxJ6bMVTBcAb3RozWd7lmnpCdpNUe09sb6dQd 4OdCRIImUXuJRantp1BdZXAV5T7VEBwDHUO67eFpXP0xS0gMvY7wlNKEYC9kSsUB weSVERTyrRyR8pbgp6zdEkoVVR4JqjFOfAlYLi2P7PumgWykl/Y3v12NBoc/8MPj DXWRjketaX67f2xSb4aXK613l61VPDY= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:49 2025 by rpki-client