$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa File: ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa (raw, json) Hash identifier: KFUX0VOF5ozpKH+U8wfoTEZITf8+c2HkrCwsyBwpyzw= Subject key identifier: 61:A6:A9:54:2B:E5:FC:70:8A:0D:76:CE:E4:A7:6A:37:51:E6:4A:60 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B26825C5DB7CB7CAC940 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 148.59.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b2:68:25:c5:db:7c:b7:ca:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=9e26c82c-bfc8-436b-a916-87c857fd97f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:9b:bc:ed:50:fa:3d:c9:33:d5:89:50:65: 2d:68:5d:26:1c:de:29:8b:84:6f:27:48:93:36:dd: 3a:87:1b:e9:f3:86:f1:b5:46:0f:7e:ac:73:7c:d3: f1:5d:d8:a8:50:85:dc:f0:0b:cb:44:d5:f4:5d:43: 55:45:86:b7:d0:0c:96:48:69:c3:a0:06:e8:89:4f: ca:0b:70:52:4d:dc:c4:e7:3f:77:56:d5:f8:f2:cd: 00:31:d4:4a:1a:84:30:c6:0f:f3:c1:01:79:ae:6a: 27:ed:d6:f0:84:d9:90:47:b4:25:19:de:7e:7d:e4: 27:51:a2:ee:b6:09:ca:5a:bb:ff:37:00:f7:12:0a: 0d:3e:f1:da:57:5c:1a:d1:da:8e:0a:d4:e2:10:10: 99:43:b3:62:d0:58:bd:8c:27:49:b8:d3:6d:ab:03: c2:44:92:d8:7b:d4:d9:71:ae:a0:cb:3e:2f:1f:e6: ea:3d:5c:2f:13:7c:55:4f:bd:4a:4f:1b:81:b6:c2: 13:bb:82:62:c0:e3:a8:31:9b:dd:8f:8c:f1:4f:c1: ba:1d:b7:04:ad:92:70:83:7e:58:57:42:7d:74:4d: 3d:95:1b:43:f7:6b:4a:a3:b7:4b:b1:83:fc:6b:ce: 5f:63:7f:39:d6:f5:79:1b:f1:5b:45:97:0e:a2:76: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:A9:54:2B:E5:FC:70:8A:0D:76:CE:E4:A7:6A:37:51:E6:4A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ec02407c-76ea-3f4b-859f-1f5319a67f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c3:76:25:d7:78:48:97:10:32:dc:e8:12:59:96:94:24:58: c9:67:47:08:db:38:23:db:41:24:d1:be:f5:a7:fc:ce:c6:69: 8f:18:42:78:b1:88:b4:2a:e8:50:5b:92:81:5e:7e:bc:f8:d7: 90:f0:d4:20:ab:ca:e2:9e:66:b8:bb:c9:87:17:e8:7e:84:a6: 0d:d1:01:59:45:92:a9:b2:fd:e5:44:7d:e9:a7:1e:0d:21:77: c1:4e:2c:10:41:8e:a0:ba:31:1a:a1:85:a9:28:9c:41:7c:ed: b2:3b:50:39:bd:07:35:73:eb:e8:e9:ff:8a:3b:e4:81:31:ed: 30:ac:65:6b:99:a3:0f:29:60:85:a5:17:b7:b0:fc:74:ed:41: 86:db:0d:7a:6a:b6:04:e6:29:47:7d:71:51:10:f4:aa:90:f0: 09:93:b5:d4:37:bd:17:dd:cc:4a:72:36:ac:ce:c0:81:0d:0f: a9:13:0f:06:ea:79:ba:34:14:0d:c1:0e:47:f8:30:04:60:2f: cb:66:b4:d5:0d:d6:f6:84:f2:0b:83:9b:2a:7b:dd:0e:fc:0a: 5a:2f:62:56:9d:37:dc:6c:f1:a3:d5:19:8e:75:e4:62:eb:8e: d6:35:eb:b8:ff:10:87:88:16:68:c0:e1:50:74:af:9b:5b:a4: a4:20:bc:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7JoJcXbfLfKyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OWUyNmM4MmMtYmZjOC00MzZiLWE5MTYtODdjODU3ZmQ5N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcCbvO1Q+j3JM9WJUGUtaF0mHN4pi4RvJ0iT Nt06hxvp84bxtUYPfqxzfNPxXdioUIXc8AvLRNX0XUNVRYa30AyWSGnDoAboiU/K C3BSTdzE5z93VtX48s0AMdRKGoQwxg/zwQF5rmon7dbwhNmQR7QlGd5+feQnUaLu tgnKWrv/NwD3EgoNPvHaV1wa0dqOCtTiEBCZQ7Ni0Fi9jCdJuNNtqwPCRJLYe9TZ ca6gyz4vH+bqPVwvE3xVT71KTxuBtsITu4JiwOOoMZvdj4zxT8G6HbcErZJwg35Y V0J9dE09lRtD92tKo7dLsYP8a85fY3851vV5G/FbRZcOonZUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGmqVQr5fxwig12zuSnajdR5kpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZWMwMjQwN2MtNzZlYS0z ZjRiLTg1OWYtMWY1MzE5YTY3ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHDdiXXeEiXEDLc6BJZlpQkWMlnRwjbOCPbQSTRvvWn/M7GaY8YQnix iLQq6FBbkoFefrz415Dw1CCryuKeZri7yYcX6H6Epg3RAVlFkqmy/eVEfemnHg0h d8FOLBBBjqC6MRqhhakonEF87bI7UDm9BzVz6+jp/4o75IEx7TCsZWuZow8pYIWl F7ew/HTtQYbbDXpqtgTmKUd9cVEQ9KqQ8AmTtdQ3vRfdzEpyNqzOwIEND6kTDwbq ebo0FA3BDkf4MARgL8tmtNUN1vaE8guDmyp73Q78ClovYladN9xs8aPVGY515GLr jtY167j/EIeIFmjA4VB0r5tbpKQgvNM= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:50 2025 by rpki-client