$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa File: 6a46475d-4bf3-3cf5-806a-8e9461339682.roa (raw, json) Hash identifier: OyH3q6cZ2CRZ8Czcb1jdyVPBI1Duek8i0luwlMfmYxc= Subject key identifier: 11:FC:92:D1:64:05:0A:5C:49:67:6B:AC:D8:94:FC:34:E3:B0:02:CE Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BF4E153C783402925640 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 148.59.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bf:4e:15:3c:78:34:02:92:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=347463c0-6583-48fb-bee2-854bd9355a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7d:b6:87:06:a2:74:3f:39:bc:0f:30:bc:82: 8f:3a:a2:aa:80:86:c3:9f:a2:16:52:31:39:19:49: 1f:c0:ba:84:cc:3f:20:2c:30:af:c2:9c:cb:68:23: c2:05:80:81:e0:d9:b2:b8:f5:1f:5a:d7:96:c0:9f: f7:e0:15:bd:29:22:62:61:a4:3e:72:ac:d8:4d:0a: 77:76:d3:57:63:d8:64:01:d2:40:4d:09:d4:b7:45: 17:c2:e5:86:78:5f:f9:cf:0f:e7:3e:2f:ae:aa:b4: 7d:92:a5:c7:10:19:9d:6a:b3:05:cc:d1:7d:3c:a3: ae:f4:69:cc:d0:e8:a9:03:8f:1a:ce:d0:c5:16:59: 0d:1e:c4:d0:a7:91:ba:26:35:7c:d2:85:05:c4:4d: 0c:86:66:75:fb:69:17:e4:f8:d0:ff:89:a9:28:2e: 04:cb:c6:7b:d6:8d:45:c7:50:cb:94:e9:4f:90:d9: 03:95:ae:58:4b:15:b6:f4:9d:98:e3:cf:4b:f9:47: 4e:22:5c:52:d6:eb:17:6a:0b:18:e4:3e:17:de:34: d3:e7:43:2e:61:27:5a:8a:bd:f5:83:30:90:47:84: 9d:49:bb:64:e1:98:b1:36:70:7c:f1:2c:14:68:d0: 95:d0:36:fe:1f:1d:8c:73:4e:e2:12:d0:82:89:26: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:92:D1:64:05:0A:5C:49:67:6B:AC:D8:94:FC:34:E3:B0:02:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2d:4f:ec:50:95:01:9f:c9:94:21:ec:bc:ba:32:a4:f2:25: 9e:04:07:f7:ce:fd:79:d2:6b:4e:7b:0e:39:ea:99:a8:02:d8: b1:ce:bb:95:5e:e7:f0:45:66:fd:d9:8c:c6:34:6f:a9:1c:95: f3:78:b8:53:e0:2a:cd:c5:0a:09:2d:29:97:c0:e4:60:e7:9d: 5a:d9:e0:c1:72:bc:c7:e7:b0:80:5f:54:94:5a:83:98:39:5f: 18:a5:74:44:3e:fd:be:55:89:86:9f:e1:fc:c9:8a:34:9f:27: ba:3e:f2:4c:60:74:b6:75:72:fb:91:52:6c:c9:69:5b:25:6d: 74:5f:6d:c8:72:48:b3:71:8d:24:69:7c:f9:37:07:b8:92:d8: c6:fe:af:96:4b:a3:76:da:68:dc:a2:be:3a:33:f7:d3:29:2e: e4:c3:e3:04:fc:1d:53:b2:5e:31:c5:14:af:62:b3:de:85:1c: 57:58:b3:5b:09:71:b3:c1:f6:47:9f:35:65:90:ad:90:e4:bc: 35:18:e3:14:42:3d:b4:f2:a6:2c:d3:a0:bf:f1:37:18:8b:88: 73:da:80:cc:b3:42:87:74:6b:17:87:48:de:7f:ec:48:5a:7e: 96:44:aa:cf:55:c8:6c:1b:41:8d:0c:d5:f2:a5:93:64:f1:aa: 49:aa:e8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB79OFTx4NAKSVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzQ3NDYzYzAtNjU4My00OGZiLWJlZTItODU0YmQ5MzU1YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn22hwaidD85vA8wvIKPOqKqgIbDn6IWUjE5 GUkfwLqEzD8gLDCvwpzLaCPCBYCB4NmyuPUfWteWwJ/34BW9KSJiYaQ+cqzYTQp3 dtNXY9hkAdJATQnUt0UXwuWGeF/5zw/nPi+uqrR9kqXHEBmdarMFzNF9PKOu9GnM 0OipA48aztDFFlkNHsTQp5G6JjV80oUFxE0MhmZ1+2kX5PjQ/4mpKC4Ey8Z71o1F x1DLlOlPkNkDla5YSxW29J2Y489L+UdOIlxS1usXagsY5D4X3jTT50MuYSdair31 gzCQR4SdSbtk4ZixNnB88SwUaNCV0Db+Hx2Mc07iEtCCiSbd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH8ktFkBQpcSWdrrNiU/DTjsALOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNmE0NjQ3NWQtNGJmMy0z Y2Y1LTgwNmEtOGU5NDYxMzM5NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADItT+xQlQGfyZQh7Ly6MqTyJZ4EB/fO/XnSa057DjnqmagC2LHOu5Ve 5/BFZv3ZjMY0b6kclfN4uFPgKs3FCgktKZfA5GDnnVrZ4MFyvMfnsIBfVJRag5g5 XxildEQ+/b5ViYaf4fzJijSfJ7o+8kxgdLZ1cvuRUmzJaVslbXRfbchySLNxjSRp fPk3B7iS2Mb+r5ZLo3baaNyivjoz99MpLuTD4wT8HVOyXjHFFK9is96FHFdYs1sJ cbPB9kefNWWQrZDkvDUY4xRCPbTypizToL/xNxiLiHPagMyzQod0axeHSN5/7Eha fpZEqs9VyGwbQY0M1fKlk2Txqkmq6Ms= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:04 2025 by rpki-client