$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa File: 34356240-b9ca-32e3-ba11-33750e597e1e.roa (raw, json) Hash identifier: JjU/CDB4Ssf5RUPtg6y3Ju6Hc+B5f5pN+Xs0ZDVTUvc= Subject key identifier: 03:0B:F3:4F:84:90:1F:95:EC:40:C5:BC:A6:F6:45:33:B9:BA:F5:45 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B6BC75ED654759E742C8ACC40 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7764 IP address blocks: 148.129.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5e:d6:54:75:9e:74:2c:8a:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b018d0a5-7c35-4684-8712-0cd5f956148c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:36:79:13:67:09:8f:0d:a5:b6:12:d1:54: 19:08:a1:e7:c6:a7:d0:fb:73:38:0a:85:06:1a:f1: b7:59:22:1c:a8:b4:89:86:01:23:07:48:d3:82:74: fb:fd:2c:6d:6f:ff:54:97:80:27:7e:bb:28:9d:fb: b0:c5:3f:bc:05:43:16:bd:42:bc:50:2e:eb:04:85: 8a:23:0a:86:8c:34:a9:9d:d4:e5:a2:db:54:33:b2: 01:c6:c6:8b:b1:1c:be:8e:ea:49:93:e7:41:fa:d7: 2f:7f:12:2c:90:31:bd:97:40:46:73:e2:b2:7f:f5: 52:03:0e:2c:25:27:4f:45:0d:0c:55:3c:3c:40:4d: e1:83:e4:73:b7:c3:4e:05:0b:2b:96:63:1a:8b:da: 9e:b2:ee:0e:4f:00:8a:b3:f6:2b:64:c2:c2:64:0c: 49:94:28:b9:a6:28:2f:69:a3:ee:0e:4b:c8:5a:30: b0:1b:46:8a:0c:9b:c2:8e:72:13:6d:98:4a:e5:4a: cb:1a:65:8e:3f:da:18:e5:6f:2c:00:c5:41:d7:73: 62:b4:8a:95:dd:fe:2c:4a:75:39:74:98:c1:57:b3: bc:16:95:81:86:5a:1b:67:b5:b6:2c:3d:5a:e4:13: 12:c9:b3:93:96:20:33:e6:c4:16:7f:24:a9:5f:fa: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:F3:4F:84:90:1F:95:EC:40:C5:BC:A6:F6:45:33:B9:BA:F5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1b:f9:c5:3e:04:a1:1f:61:33:50:67:13:c8:20:a6:08:42: 28:a7:5f:f1:89:ce:72:e2:72:71:eb:a8:12:61:d1:03:5a:af: 08:f6:39:cd:6e:2f:f2:11:6a:75:85:28:96:42:c4:df:c9:84: 0c:c0:26:2e:66:83:96:a0:1d:ad:90:d2:e0:c3:55:e7:c4:90: 50:4c:75:5f:ac:46:8c:35:66:fc:79:e4:12:87:47:50:84:da: a4:f2:ea:1e:a9:4a:6c:10:ee:f5:80:0a:9b:3b:2d:fc:a1:a8: 43:10:5a:dc:9b:91:a4:39:a5:ec:4c:c8:11:e4:4b:eb:5b:e1: 62:4d:a7:c3:c4:cd:51:9a:39:4c:ef:67:39:e1:1f:4e:ed:b0: 3f:8e:05:4b:94:d8:4e:a1:0d:01:40:56:d7:80:df:6f:0e:fe: 96:1a:4d:08:d3:8c:80:66:b9:8c:bf:ab:22:d1:8a:3a:b2:e3: 3a:2a:3c:85:f6:47:5c:c5:8c:dc:cb:f0:f1:a4:a7:30:58:dc: 84:c2:07:ed:fe:c4:07:4e:ba:05:6f:94:94:81:c3:3f:b2:d0: 4c:8c:ae:99:d2:d2:b2:41:75:ad:89:b5:17:e6:23:67:81:4b: a6:35:9b:e9:f4:29:f9:13:80:f3:90:44:53:92:24:a7:31:89: eb:f7:7d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx17WVHWedCyKzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjAxOGQwYTUtN2MzNS00Njg0LTg3MTItMGNkNWY5NTYxNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWY2eRNnCY8NpbYS0VQZCKHnxqfQ+3M4CoUG GvG3WSIcqLSJhgEjB0jTgnT7/Sxtb/9Ul4AnfrsonfuwxT+8BUMWvUK8UC7rBIWK IwqGjDSpndTlottUM7IBxsaLsRy+jupJk+dB+tcvfxIskDG9l0BGc+Kyf/VSAw4s JSdPRQ0MVTw8QE3hg+Rzt8NOBQsrlmMai9qesu4OTwCKs/YrZMLCZAxJlCi5pigv aaPuDkvIWjCwG0aKDJvCjnITbZhK5UrLGmWOP9oY5W8sAMVB13NitIqV3f4sSnU5 dJjBV7O8FpWBhlobZ7W2LD1a5BMSybOTliAz5sQWfySpX/oUpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAML80+EkB+V7EDFvKb2RTO5uvVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMzQzNTYyNDAtYjljYS0z MmUzLWJhMTEtMzM3NTBlNTk3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUb+cU+BKEfYTNQZxPIIKYIQiinX/GJznLicnHrqBJh0QNarwj2Oc1u L/IRanWFKJZCxN/JhAzAJi5mg5agHa2Q0uDDVefEkFBMdV+sRow1Zvx55BKHR1CE 2qTy6h6pSmwQ7vWACps7LfyhqEMQWtybkaQ5pexMyBHkS+tb4WJNp8PEzVGaOUzv ZznhH07tsD+OBUuU2E6hDQFAVteA328O/pYaTQjTjIBmuYy/qyLRijqy4zoqPIX2 R1zFjNzL8PGkpzBY3ITCB+3+xAdOugVvlJSBwz+y0EyMrpnS0rJBda2JtRfmI2eB S6Y1m+n0KfkTgPOQRFOSJKcxiev3fUE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:51 2025 by rpki-client