$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ceaa7606-ec87-378e-8f51-a01d28cf5f16.roa File: ceaa7606-ec87-378e-8f51-a01d28cf5f16.roa (raw, json) Hash identifier: JXuPIUBI5CshabM3zCuAEGqMlli2j6yJY5hmcxU9FGI= Subject key identifier: 2F:21:F3:D5:78:AC:88:27:45:79:E1:04:D5:AF:15:34:FB:6A:19:BD Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584F761D7CE2F78017EB9CD9CEC0 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ceaa7606-ec87-378e-8f51-a01d28cf5f16.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 7764 IP address blocks: 148.129.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7c:e2:f7:80:17:eb:9c:d9:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=c0da8861-bbf0-4141-b8b6-a00cbab9da50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:4a:b5:c0:8d:a6:67:34:d8:b2:3c:bd:e4: 74:0f:ae:89:95:3b:8b:47:28:69:d5:73:6a:32:6b: 9c:d1:cc:9f:be:27:23:05:1e:70:66:37:b6:20:98: cf:00:eb:a6:e6:95:2b:ca:42:75:d1:66:96:44:f0: d8:ed:f8:b4:ed:00:85:c9:9d:0d:65:57:90:08:d9: 23:96:9e:56:26:c7:d6:3e:30:5a:51:10:68:f3:6d: 87:b1:95:fe:fe:0d:ce:e9:a6:42:f5:f7:59:c1:07: 05:07:31:2c:26:bf:2a:0d:31:d1:29:3f:92:38:3a: b5:0c:4e:e9:d6:3e:c8:83:4f:aa:40:c8:97:a6:b2: ce:2b:48:01:67:f4:23:37:3c:d3:04:53:39:f2:da: eb:00:0f:1e:94:8a:5b:20:d5:12:2f:68:51:64:c7: 77:85:cf:29:87:3e:58:20:dd:a6:77:6a:84:1b:b2: 17:8b:49:2a:eb:d4:fe:59:c6:ef:6c:0e:67:09:01: ca:f8:af:39:dd:13:c6:c2:69:90:78:00:1b:04:fe: 38:95:d2:67:ac:e2:5b:30:a5:ec:9e:b6:d9:17:94: ad:91:c4:d0:7f:aa:8c:b6:1a:b4:cc:a8:e4:39:95: 81:5f:33:1c:26:60:2f:f8:e3:73:65:3e:76:88:4d: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:21:F3:D5:78:AC:88:27:45:79:E1:04:D5:AF:15:34:FB:6A:19:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ceaa7606-ec87-378e-8f51-a01d28cf5f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3f:03:29:47:9a:7a:0f:40:c9:53:16:3e:ce:e3:31:c9:d2: c6:21:73:c7:1c:47:34:06:55:98:6b:70:1b:be:39:6b:43:52: c6:43:23:b2:77:92:12:dd:0b:d9:9e:a0:20:c5:07:c1:43:db: c2:b9:dd:15:1a:1a:74:b1:50:78:2b:5f:eb:87:d7:7a:a4:60: 1a:ef:c5:d6:76:ed:81:f7:34:51:41:e0:83:96:e8:6d:3a:47: e2:94:4e:86:5a:e7:a9:3a:0b:06:2c:f2:21:8b:94:8d:af:83: 90:62:08:04:d0:23:59:cf:f3:4e:ff:ed:81:ab:20:90:6d:0b: 3f:59:e4:26:e0:bc:49:37:58:d2:d9:b0:13:a4:97:b0:77:6b: ff:54:92:04:90:11:66:2f:e7:63:f9:62:e2:fb:2b:47:57:35: 7f:9b:6c:7b:5f:a9:38:99:d6:8c:cb:ce:2e:9f:0b:32:1e:d5: ac:fa:5b:cf:9a:dc:2f:8c:83:20:36:58:9c:d7:0d:06:f5:66: 0c:c2:0e:df:85:9e:08:6c:9e:07:4d:6c:15:fa:d2:83:6f:8c: 26:0f:d3:89:94:ae:9f:6f:3b:3f:5a:6d:17:5b:0b:3f:9e:07: 2f:73:72:8b:3d:54:12:7d:88:9a:93:d9:cd:5f:da:c7:bb:f4: 76:49:19:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92HXzi94AX65zZzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk YzBkYTg4NjEtYmJmMC00MTQxLWI4YjYtYTAwY2JhYjlkYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko9KtcCNpmc02LI8veR0D66JlTuLRyhp1XNq Mmuc0cyfvicjBR5wZje2IJjPAOum5pUrykJ10WaWRPDY7fi07QCFyZ0NZVeQCNkj lp5WJsfWPjBaURBo822HsZX+/g3O6aZC9fdZwQcFBzEsJr8qDTHRKT+SODq1DE7p 1j7Ig0+qQMiXprLOK0gBZ/QjNzzTBFM58trrAA8elIpbINUSL2hRZMd3hc8phz5Y IN2md2qEG7IXi0kq69T+WcbvbA5nCQHK+K853RPGwmmQeAAbBP44ldJnrOJbMKXs nrbZF5StkcTQf6qMthq0zKjkOZWBXzMcJmAv+ONzZT52iE2OnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8h89V4rIgnRXnhBNWvFTT7ahm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvY2VhYTc2MDYtZWM4Ny0z NzhlLThmNTEtYTAxZDI4Y2Y1ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlIEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc/AylHmnoPQMlTFj7O4zHJ0sYhc8ccRzQGVZhrcBu+OWtDUsZDI7J3 khLdC9meoCDFB8FD28K53RUaGnSxUHgrX+uH13qkYBrvxdZ27YH3NFFB4IOW6G06 R+KUToZa56k6CwYs8iGLlI2vg5BiCATQI1nP807/7YGrIJBtCz9Z5CbgvEk3WNLZ sBOkl7B3a/9UkgSQEWYv52P5YuL7K0dXNX+bbHtfqTiZ1ozLzi6fCzIe1az6W8+a 3C+MgyA2WJzXDQb1ZgzCDt+FnghsngdNbBX60oNvjCYP04mUrp9vOz9abRdbCz+e By9zcos9VBJ9iJqT2c1f2se79HZJGRo= -----END CERTIFICATE-----Generated at Tue Oct 13 04:31:30 2026 by rpki-client