$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa File: 0d01bd33-7e08-326f-a0a3-2cc096265d22.roa (raw, json) Hash identifier: ZwJ+tnWNpRxeJB3wGJJKL8D+4sSkCO4CU/8rlAWlNMI= Subject key identifier: 71:AE:45:D3:F6:8C:0F:E9:C4:9C:D9:50:7C:C2:52:9C:0B:50:4F:D0 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584BB727B8C0BA5B7F29BEDD1360 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 6195 IP address blocks: 148.86.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b8:c0:ba:5b:7f:29:be:dd:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=eae1f33a-2e86-45f3-af98-64631234ccf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:01:6c:d4:90:3b:c4:e8:57:ff:dc:e6:4a: 53:07:e1:20:3f:dd:30:72:ac:05:3f:0f:90:55:15: 50:86:d2:40:e9:c9:16:b8:f5:e2:9b:55:0d:d3:42: 07:db:da:da:66:fd:15:cf:6a:47:c4:4b:13:3d:0d: ea:c4:a5:11:b4:80:57:c5:b2:f5:28:4e:5f:d1:ba: 53:55:04:04:74:74:0c:51:86:86:35:e0:36:e3:03: 1a:0b:38:25:95:d4:dd:1b:09:60:69:0e:1e:66:f9: 14:61:ff:f6:47:56:ce:6c:fe:03:83:6e:95:d8:c0: 6f:8e:88:8f:51:a9:66:b9:5d:5a:2d:63:fb:e6:36: 17:80:53:2f:dd:88:72:4e:24:15:a7:ba:f0:b9:2d: d6:d6:9b:f5:ac:0a:60:16:30:a5:ef:64:d6:45:b9: 89:9b:8c:72:ec:9e:fd:ee:ab:6a:27:4d:35:e9:19: 32:49:2a:24:a9:f9:c7:48:e1:f8:3c:98:f1:d2:8e: d9:4f:1f:19:24:8a:19:a0:b4:33:11:c9:0d:99:99: ba:52:23:ab:57:f8:f6:da:d7:3c:6a:51:3b:2a:6f: e8:c5:08:51:60:89:13:4e:43:b9:a4:25:cb:83:6e: 37:94:da:dd:45:2a:fb:07:dc:bb:9d:17:a7:70:2c: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AE:45:D3:F6:8C:0F:E9:C4:9C:D9:50:7C:C2:52:9C:0B:50:4F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 148.86.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c8:0b:63:ec:51:05:9d:9b:81:6d:d4:fc:bb:72:fb:fe:9e: d6:c4:63:6e:96:75:67:1d:3c:8e:c5:c9:40:79:34:c6:67:d1: b6:40:03:aa:67:8d:1d:39:4d:c0:71:4e:2d:2b:f3:36:42:65: 5e:f9:bb:b1:ef:a2:65:bf:db:9f:db:c9:6c:40:21:9a:ea:de: c8:0b:42:35:7e:d8:cd:a6:4e:ec:5d:87:f1:03:f0:7b:c2:4d: 33:93:f6:be:6e:df:2c:93:0d:15:5c:7f:41:03:1e:11:08:31: 63:50:eb:f3:26:6a:c8:15:3c:de:46:4d:1d:d7:a8:da:62:d0: fc:02:32:65:c5:b2:86:4b:4a:5d:66:f5:61:12:95:08:1e:88: c3:f4:e9:93:c1:93:60:d2:2b:37:4a:8f:d9:a3:68:4e:c2:05: 7c:f1:7d:f6:56:03:69:9e:a7:9c:b0:b9:1b:3a:29:30:06:44: b3:aa:79:57:c7:a7:2c:eb:b5:8b:45:c1:16:b6:1f:1a:16:e6: f3:41:90:4f:73:d0:63:75:a8:c7:49:58:d2:58:78:75:3b:23: c3:91:fa:f1:f0:5f:ee:c4:e4:06:cb:7c:f9:b1:2a:5a:1c:4d: 87:dc:b0:9a:c5:7b:fd:39:9c:8a:89:ba:53:c4:df:d6:90:c8: 51:98:cd:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7jAult/Kb7dE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWFlMWYzM2EtMmU4Ni00NWYzLWFmOTgtNjQ2MzEyMzRjY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf0BbNSQO8ToV//c5kpTB+EgP90wcqwFPw+Q VRVQhtJA6ckWuPXim1UN00IH29raZv0Vz2pHxEsTPQ3qxKURtIBXxbL1KE5f0bpT VQQEdHQMUYaGNeA24wMaCzglldTdGwlgaQ4eZvkUYf/2R1bObP4Dg26V2MBvjoiP UalmuV1aLWP75jYXgFMv3YhyTiQVp7rwuS3W1pv1rApgFjCl72TWRbmJm4xy7J79 7qtqJ0016RkySSokqfnHSOH4PJjx0o7ZTx8ZJIoZoLQzEckNmZm6UiOrV/j22tc8 alE7Km/oxQhRYIkTTkO5pCXLg243lNrdRSr7B9y7nRencCxYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGuRdP2jA/pxJzZUHzCUpwLUE/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMGQwMWJkMzMtN2UwOC0z MjZmLWEwYTMtMmNjMDk2MjY1ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlFYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7IC2PsUQWdm4Ft1Py7cvv+ntbEY26WdWcdPI7FyUB5NMZn0bZAA6pn jR05TcBxTi0r8zZCZV75u7HvomW/25/byWxAIZrq3sgLQjV+2M2mTuxdh/ED8HvC TTOT9r5u3yyTDRVcf0EDHhEIMWNQ6/MmasgVPN5GTR3XqNpi0PwCMmXFsoZLSl1m 9WESlQgeiMP06ZPBk2DSKzdKj9mjaE7CBXzxffZWA2mep5ywuRs6KTAGRLOqeVfH pyzrtYtFwRa2HxoW5vNBkE9z0GN1qMdJWNJYeHU7I8OR+vHwX+7E5AbLfPmxKloc TYfcsJrFe/05nIqJulPE39aQyFGYzeg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:13 2025 by rpki-client