$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa File: 90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa (raw, json) Hash identifier: c2BebZCLXM/HsO7pfE0Na3fwl3Yu0aM9wnLS9iI35no= Subject key identifier: 2C:04:E0:B4:55:15:C3:27:33:35:72:0A:23:C8:49:63:C9:34:D3:1D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B1FA1B85C4B98EA5AA60 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 148.59.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b1:fa:1b:85:c4:b9:8e:a5:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=778155ce-a9d7-40b6-a841-cb1c6eb887c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d9:5f:b2:da:cc:6f:f6:54:f2:7f:9c:e0:11: ae:e8:0e:e6:d0:19:a5:89:c7:87:1b:99:13:40:65: cb:f2:d6:54:aa:f0:03:9d:74:a8:7f:74:06:e8:33: 44:c3:b1:2e:90:12:b5:d6:8c:85:d0:93:a6:4a:35: 08:7b:93:1f:ae:66:09:25:6f:7a:90:06:1b:83:02: a2:38:14:a3:5a:70:b4:df:44:81:dd:29:b0:d4:1d: 52:39:a5:1d:db:49:4a:d9:e3:98:af:f9:16:7e:a6: 2c:36:97:b9:8c:7e:22:57:2e:12:c2:3f:42:0b:15: 21:0c:bf:2f:95:69:62:75:87:8c:9a:b0:ce:b3:cf: 9b:d8:11:91:be:ef:b9:b0:e1:85:4f:13:43:55:e1: 43:a6:ee:c8:13:85:7d:3d:a1:99:55:db:0f:7a:a9: 44:8a:a6:4f:c7:ac:45:4f:ff:45:71:46:a3:be:da: 21:72:77:75:a0:d3:57:5d:33:84:f9:57:65:1a:9a: f9:0c:bd:cc:55:99:23:92:91:84:b2:41:f8:d5:d3: c4:95:10:d1:67:78:76:c1:40:34:00:8a:59:75:2a: 51:fe:4c:fa:57:af:c6:63:28:9b:0b:bd:38:56:eb: 9b:98:ce:48:ab:20:a6:77:ea:f7:94:a6:b9:a1:a7: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:E0:B4:55:15:C3:27:33:35:72:0A:23:C8:49:63:C9:34:D3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:97:6c:3f:ad:03:ec:c7:14:46:7d:48:69:99:bd:04:e1:68: 60:91:5c:23:14:b4:4d:9e:fb:e5:c1:ac:84:37:c2:73:67:6c: 45:03:d7:56:1f:b9:e9:86:b8:2a:e8:8c:d0:84:9c:a6:ba:dd: 47:10:60:b5:12:d5:a2:e8:47:91:6a:11:3e:ec:a4:e3:94:42: 13:db:78:a0:b8:ec:55:c5:24:c6:22:1b:b6:df:2a:40:47:43: e6:5a:10:0e:e0:0c:17:a0:1f:46:07:8c:10:f3:27:64:15:91: 74:4c:bf:21:d0:95:be:e1:b5:bd:b0:07:d2:7d:97:77:27:55: 14:09:8a:67:29:5f:4b:04:96:46:0c:00:52:dc:15:11:a2:a0: 6c:94:75:1f:55:39:47:8e:9e:54:0d:cb:54:35:50:b2:65:de: fc:12:f6:76:0d:41:7b:8a:38:6b:fb:f3:f5:e6:b5:b0:e2:ff: 19:21:bc:86:09:a9:76:fb:e9:05:6e:d5:7e:70:55:c8:d4:e6: 7c:ea:12:1a:04:85:b3:2f:d7:b2:8d:3b:ae:70:e8:bb:ef:f4: c2:ea:7f:fb:c7:6f:7a:a3:bd:d5:11:84:69:f1:cb:2c:a7:ab: 51:06:1c:2d:5d:f7:a7:56:19:e8:fe:d3:c6:8d:4d:27:3c:88: 3d:36:fa:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7H6G4XEuY6lqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Nzc4MTU1Y2UtYTlkNy00MGI2LWE4NDEtY2IxYzZlYjg4N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdlfstrMb/ZU8n+c4BGu6A7m0BmliceHG5kT QGXL8tZUqvADnXSof3QG6DNEw7EukBK11oyF0JOmSjUIe5MfrmYJJW96kAYbgwKi OBSjWnC030SB3Smw1B1SOaUd20lK2eOYr/kWfqYsNpe5jH4iVy4Swj9CCxUhDL8v lWlidYeMmrDOs8+b2BGRvu+5sOGFTxNDVeFDpu7IE4V9PaGZVdsPeqlEiqZPx6xF T/9FcUajvtohcnd1oNNXXTOE+VdlGpr5DL3MVZkjkpGEskH41dPElRDRZ3h2wUA0 AIpZdSpR/kz6V6/GYyibC704VuubmM5IqyCmd+r3lKa5oaepNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwE4LRVFcMnMzVyCiPISWPJNNMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOTBjNjBmMGYtZDhkYi0z ZGE2LWFjYjQtMTRiY2Y2OGYxMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDsuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOXbD+tA+zHFEZ9SGmZvQThaGCRXCMUtE2e++XBrIQ3wnNnbEUD11Yf uemGuCrojNCEnKa63UcQYLUS1aLoR5FqET7spOOUQhPbeKC47FXFJMYiG7bfKkBH Q+ZaEA7gDBegH0YHjBDzJ2QVkXRMvyHQlb7htb2wB9J9l3cnVRQJimcpX0sElkYM AFLcFRGioGyUdR9VOUeOnlQNy1Q1ULJl3vwS9nYNQXuKOGv78/XmtbDi/xkhvIYJ qXb76QVu1X5wVcjU5nzqEhoEhbMv17KNO65w6Lvv9MLqf/vHb3qjvdURhGnxyyyn q1EGHC1d96dWGej+08aNTSc8iD02+iQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:51 2025 by rpki-client