$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa File: 873d4b38-1604-341a-a8a0-f8b12792ef66.roa (raw, json) Hash identifier: A/DH28KUqIBdYX4U586O8GD9QF5oEjTI1ZhRjonRSl8= Subject key identifier: 60:35:03:80:70:20:36:22:B5:9E:F8:13:FA:57:62:93:E1:26:A5:8A Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BF5E5F39D309DAB4BD80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 148.59.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bf:5e:5f:39:d3:09:da:b4:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b9840ee1-9f48-4919-a819-a942e14e845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:1f:c7:4f:99:67:48:c3:eb:56:ab:38:1a: 06:59:e7:45:6e:a7:d9:ae:e4:d4:58:d6:ee:97:46: 67:50:22:7d:56:2c:31:f0:b4:9f:67:1c:3a:5b:78: b8:80:25:3f:6e:2f:81:ab:62:d0:6f:5f:0b:fd:de: bf:56:7e:df:58:b3:e3:42:5d:5a:81:1f:25:df:eb: 83:7e:10:98:40:8e:11:33:14:1f:95:5e:a7:57:20: bc:79:8d:6a:37:21:94:45:57:63:d9:17:1e:64:fc: eb:67:f9:71:87:ea:8d:18:b9:f9:16:91:bc:9e:96: ef:6b:cd:29:ec:9d:ba:36:c6:49:4e:0e:a6:82:ab: 4d:ef:09:5e:49:d9:f6:dc:90:43:c6:20:ac:31:74: 11:2e:6d:e4:2d:2e:90:30:65:85:13:ba:53:4c:86: c3:e5:30:c0:c4:c9:91:f5:64:9f:a4:ea:e1:b6:47: 99:9d:1b:df:5c:d7:22:15:52:0f:7b:24:fe:56:66: 1a:a7:fa:97:00:ba:74:17:0a:8e:09:39:e4:60:d9: 21:6b:ec:a7:e2:59:6a:ae:08:f8:36:19:5b:bd:c5: 90:fa:46:43:c4:ac:a0:a0:7f:55:15:ca:a2:1f:2e: 7e:40:c4:97:42:26:a8:9a:b4:f5:07:a0:4b:72:58: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:35:03:80:70:20:36:22:B5:9E:F8:13:FA:57:62:93:E1:26:A5:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:09:2a:c5:d6:b4:91:92:4d:15:53:a5:da:eb:e4:14:62:29: 1c:25:b9:88:15:3a:4d:f8:a8:d7:c4:5a:6a:86:91:ba:86:44: b2:c7:ae:9e:cf:75:8f:4e:63:e4:cf:98:bc:37:4f:a2:2e:71: 26:65:f4:1e:ef:be:af:24:ab:c6:4c:2c:0a:9a:3a:57:47:06: 8b:5f:03:b1:4e:08:b9:91:3b:e1:d2:94:85:33:dc:97:c7:66: 4b:07:97:9f:12:fb:c4:2b:21:e6:c7:63:63:9d:40:98:b7:d2: 5e:39:b2:06:d8:7b:8f:a6:b4:f6:82:3c:42:02:33:20:04:df: 2c:d5:10:36:ed:44:0c:fb:1c:4c:70:c7:19:f8:a5:cc:98:98: 7a:e8:7e:50:86:74:02:9b:8b:a3:bd:96:30:6f:68:d9:cf:59: d8:a7:8c:d3:d2:78:c6:f9:0d:d3:a9:91:52:55:be:22:29:72: 42:07:8e:28:62:45:e4:2b:ee:92:98:17:3d:1a:17:8e:d1:45: 7d:c4:44:c5:09:bc:69:30:05:8c:fe:45:bf:9d:02:b3:55:70: 75:4e:8d:fb:0a:dc:b5:97:8a:a9:71:35:09:43:77:e0:a0:5d: df:7c:35:97:e0:b6:62:75:31:7b:a6:ae:7b:93:fd:d2:c6:02: c4:87:1c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB79eXznTCdq0vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Yjk4NDBlZTEtOWY0OC00OTE5LWE4MTktYTk0MmUxNGU4NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQkfx0+ZZ0jD61arOBoGWedFbqfZruTUWNbu l0ZnUCJ9Viwx8LSfZxw6W3i4gCU/bi+Bq2LQb18L/d6/Vn7fWLPjQl1agR8l3+uD fhCYQI4RMxQflV6nVyC8eY1qNyGURVdj2RceZPzrZ/lxh+qNGLn5FpG8npbva80p 7J26NsZJTg6mgqtN7wleSdn23JBDxiCsMXQRLm3kLS6QMGWFE7pTTIbD5TDAxMmR 9WSfpOrhtkeZnRvfXNciFVIPeyT+VmYap/qXALp0FwqOCTnkYNkha+yn4llqrgj4 NhlbvcWQ+kZDxKygoH9VFcqiHy5+QMSXQiaomrT1B6BLclgm6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA1A4BwIDYitZ74E/pXYpPhJqWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODczZDRiMzgtMTYwNC0z NDFhLWE4YTAtZjhiMTI3OTJlZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQJKsXWtJGSTRVTpdrr5BRiKRwluYgVOk34qNfEWmqGkbqGRLLHrp7P dY9OY+TPmLw3T6IucSZl9B7vvq8kq8ZMLAqaOldHBotfA7FOCLmRO+HSlIUz3JfH ZksHl58S+8QrIebHY2OdQJi30l45sgbYe4+mtPaCPEICMyAE3yzVEDbtRAz7HExw xxn4pcyYmHroflCGdAKbi6O9ljBvaNnPWdinjNPSeMb5DdOpkVJVviIpckIHjihi ReQr7pKYFz0aF47RRX3ERMUJvGkwBYz+Rb+dArNVcHVOjfsK3LWXiqlxNQlDd+Cg Xd98NZfgtmJ1MXumrnuT/dLGAsSHHBQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:07 2025 by rpki-client