$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/58fb0752-8888-3f45-8e83-4781b693e7d6.roa File: 58fb0752-8888-3f45-8e83-4781b693e7d6.roa (raw, json) Hash identifier: dnMGXJpudq2OSczvzMu/DPPaf/9aJx7kxLsNa/iZRZs= Subject key identifier: AE:0C:44:DC:CB:EF:62:5C:60:23:09:68:93:AF:92:DB:99:66:A6:63 Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb Certificate serial: 010D0C9F4328584B99D7800BD55B5C8B11D3AF00 Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/58fb0752-8888-3f45-8e83-4781b693e7d6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 19331 IP address blocks: 168.245.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:80:0b:d5:5b:5c:8b:11:d3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e3d9dd4f-6432-4ab6-a9b4-81bd336b8c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:93:ef:7c:97:f8:df:d5:fa:e9:6f:e9:4c: 76:9f:42:df:77:df:ac:d1:b5:44:3e:5e:bc:67:c0: 9c:d6:21:a5:c8:28:45:9b:54:a4:ba:e7:38:14:cd: 38:00:a6:36:26:a3:08:3c:b5:78:cf:7f:9e:e1:01: 8b:d6:a1:b6:fe:4f:ad:7c:b9:30:28:5c:4d:d9:65: 9b:5d:d4:43:a4:36:88:37:a3:d5:cc:38:4d:51:f7: e7:8c:31:b8:3e:32:11:4b:94:cd:ba:37:ca:d6:8d: 45:7e:fd:77:ce:c9:c8:24:d9:66:7a:25:6b:17:2f: 5a:39:4c:8a:dd:5a:03:b7:fe:be:39:68:e7:55:b5: ea:a7:1e:f9:b8:b1:75:b8:f5:92:d7:ee:d7:11:95: 8e:0e:24:3c:4b:97:59:d0:20:01:d5:7f:46:47:c0: 0f:55:03:9b:53:1a:bb:03:19:11:29:5c:5b:c4:0f: 40:ef:a1:73:47:ce:9b:fe:0d:a0:0b:ba:90:c2:db: 85:d5:00:e8:79:dd:46:f1:a6:15:a5:c2:08:c0:8c: fd:30:07:e8:9e:a3:cd:f7:98:e6:9a:f0:0a:1b:80: 90:db:17:a7:03:31:7d:3b:3f:8c:71:13:ba:bb:6a: 40:f3:43:ac:3e:32:12:27:98:39:86:f1:f4:74:de: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:44:DC:CB:EF:62:5C:60:23:09:68:93:AF:92:DB:99:66:A6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/58fb0752-8888-3f45-8e83-4781b693e7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl X509v3 Authority Key Identifier: keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer sbgp-ipAddrBlock: critical IPv4: 168.245.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:17:46:f9:41:32:65:6f:a9:6f:a3:f8:4f:72:de:f1:84:28: 33:cd:52:17:f2:c6:bf:14:b8:45:a0:f9:43:38:6d:bb:3e:a4: e1:7f:f8:8a:d7:81:02:30:c1:a1:09:64:5a:2e:af:a6:39:84: c7:7a:d1:a8:99:76:87:bc:7f:6a:67:a2:cf:35:ee:52:2c:0b: 10:8f:b1:13:3f:90:16:06:cd:99:3e:7a:98:97:ca:4f:53:6a: 59:27:0d:1c:7d:e1:27:e0:08:7e:c7:7f:4c:52:91:f2:36:bd: 0b:c8:07:9a:f3:91:3d:06:e1:fe:32:73:85:7d:02:b8:b4:9f: 11:c0:71:8d:05:f0:06:62:ed:e2:d5:6b:c2:bb:a6:49:f3:a7: 3a:45:10:ab:e6:d8:2e:d3:cf:fd:67:27:e8:d2:40:55:ac:9d: d1:13:c9:79:94:28:6e:73:e9:ae:61:b1:05:36:63:ad:cc:72: 36:c5:83:4b:2a:6b:75:18:c0:aa:2f:be:cb:2d:98:e3:6c:af: 5f:b4:f6:76:f0:d5:73:59:50:3f:1a:b3:4e:61:e9:b0:9c:e9: 0a:93:32:4d:78:ec:b2:56:67:81:3f:7b:18:6f:45:f0:64:49: 5d:35:30:c1:33:41:62:63:d1:5b:78:c1:e1:b4:2d:a3:cb:fd: 5b:3d:b2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14AL1VtcixHTrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4 ZWNiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTNkOWRkNGYtNjQzMi00YWI2LWE5YjQtODFiZDMzNmI4YzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTST73yX+N/V+ulv6Ux2n0Lfd9+s0bVEPl68 Z8Cc1iGlyChFm1Skuuc4FM04AKY2JqMIPLV4z3+e4QGL1qG2/k+tfLkwKFxN2WWb XdRDpDaIN6PVzDhNUffnjDG4PjIRS5TNujfK1o1Ffv13zsnIJNlmeiVrFy9aOUyK 3VoDt/6+OWjnVbXqpx75uLF1uPWS1+7XEZWODiQ8S5dZ0CAB1X9GR8APVQObUxq7 AxkRKVxbxA9A76FzR86b/g2gC7qQwtuF1QDoed1G8aYVpcIIwIz9MAfonqPN95jm mvAKG4CQ2xenAzF9Oz+McRO6u2pA80OsPjISJ5g5hvH0dN47MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4MRNzL72JcYCMJaJOvktuZZqZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvNThmYjA3NTItODg4OC0z ZjQ1LThlODMtNDc4MWI2OTNlN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5 ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqPWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkXRvlBMmVvqW+j+E9y3vGEKDPNUhfyxr8UuEWg+UM4bbs+pOF/+IrX gQIwwaEJZFour6Y5hMd60aiZdoe8f2pnos817lIsCxCPsRM/kBYGzZk+epiXyk9T alknDRx94SfgCH7Hf0xSkfI2vQvIB5rzkT0G4f4yc4V9Ari0nxHAcY0F8AZi7eLV a8K7pknzpzpFEKvm2C7Tz/1nJ+jSQFWsndETyXmUKG5z6a5hsQU2Y63McjbFg0sq a3UYwKovvsstmONsr1+09nbw1XNZUD8as05h6bCc6QqTMk147LJWZ4E/exhvRfBk SV01MMEzQWJj0Vt4weG0LaPL/Vs9smE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:25 2025 by rpki-client