$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/65bc7bee-f047-3365-b535-203f0a0fbeb5.roa File: 65bc7bee-f047-3365-b535-203f0a0fbeb5.roa (raw, json) Hash identifier: PwsNPJxgrabFcCLIh0dYPLDambLhtTsYEmoSog9MwGE= Subject key identifier: 65:18:97:19:2C:36:F8:6E:E5:4D:C5:A7:6C:F1:A0:85:79:3F:CC:3A Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584BB5C25259B13EAA4CE5E60300 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/65bc7bee-f047-3365-b535-203f0a0fbeb5.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 170.200.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:52:59:b1:3e:aa:4c:e5:e6:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=235120e2-1177-4304-9975-c966897581bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:cb:e5:6a:1a:93:eb:98:33:5d:66:32:18: 01:f1:28:28:0f:b2:8a:94:f6:de:82:fd:82:4b:a3: c4:39:0f:3b:73:45:be:ac:6f:8b:27:43:02:51:1a: 3d:ff:c5:6d:d3:c4:37:bf:05:3c:86:0b:b9:54:d5: 92:6b:b0:3f:af:03:45:0c:80:ce:ab:e7:ee:89:ee: b1:12:24:38:c5:e7:31:f1:88:e0:74:93:e9:81:bf: f1:a3:bc:c2:fa:17:62:67:0d:24:0a:e7:e4:23:d0: 39:73:40:51:5b:22:ee:33:31:d2:be:8d:ce:24:15: c5:51:e6:82:a2:a1:5e:9c:8a:48:4b:18:64:69:0d: d2:08:bc:0a:4c:01:69:de:ab:e6:f4:a4:7d:58:03: 53:45:2c:d0:f9:35:ea:a2:21:1e:74:bf:17:0d:48: da:54:10:56:c9:fa:20:2f:f1:09:0d:d7:08:39:78: 61:18:65:06:20:c7:8e:22:3b:98:ab:1b:1a:9e:a7: 14:34:61:74:b4:6c:4d:cc:66:e7:f4:9d:25:b4:2c: 22:97:b0:63:e2:df:8a:47:15:53:56:71:5c:73:d0: 2f:9b:f1:dd:29:d9:f7:3a:51:49:f4:c7:4f:6e:df: 3c:9b:1b:c9:50:6a:45:72:18:f5:4a:8c:80:75:4e: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:97:19:2C:36:F8:6E:E5:4D:C5:A7:6C:F1:A0:85:79:3F:CC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/65bc7bee-f047-3365-b535-203f0a0fbeb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:04:46:17:11:c7:17:d9:9a:57:1c:3e:0e:db:58:b3:8b:6a: 7c:5f:3c:54:26:4b:e3:b9:21:55:1b:08:75:1b:51:b0:9f:6d: 24:34:9e:24:4f:a9:db:d7:e0:8d:e3:13:70:69:51:54:92:04: e0:6c:8f:03:6d:40:05:66:04:17:81:a6:8f:b5:bd:54:79:f6: 7d:0b:a0:58:4c:ea:9f:fe:8a:ef:8d:fc:6f:09:47:74:6d:98: ea:d6:c5:02:a2:00:59:8e:1c:3c:f9:66:15:5f:bf:cd:c0:ff: 48:ec:82:c8:09:54:53:f5:01:05:be:5f:9f:b5:5e:7d:d6:ed: 58:ac:5a:99:b8:46:8c:79:d7:0c:a1:ae:26:5a:cb:ed:c5:a7: 14:bd:28:ca:1c:ce:dd:ba:5e:3b:6a:42:b0:b3:d7:30:48:51: fa:61:e6:0f:1d:ff:be:e6:be:3f:ce:0c:03:8e:1f:e2:85:b8: 6f:eb:9f:4c:63:75:fb:ef:20:81:c6:d0:7f:85:ed:b5:39:0b: 7e:28:ad:08:01:7c:70:db:9c:30:62:17:bd:48:d6:ab:43:d2: a0:c7:cc:10:5c:8a:ad:2b:51:01:52:dc:53:43:45:13:ce:e5: b5:43:56:c8:0f:24:eb:c7:5d:a6:71:fb:7f:e3:f3:49:47:40: 9a:e2:b4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlJZsT6qTOXmAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MjM1MTIwZTItMTE3Ny00MzA0LTk5NzUtYzk2Njg5NzU4MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog/L5Woak+uYM11mMhgB8SgoD7KKlPbegv2C S6PEOQ87c0W+rG+LJ0MCURo9/8Vt08Q3vwU8hgu5VNWSa7A/rwNFDIDOq+fuie6x EiQ4xecx8YjgdJPpgb/xo7zC+hdiZw0kCufkI9A5c0BRWyLuMzHSvo3OJBXFUeaC oqFenIpISxhkaQ3SCLwKTAFp3qvm9KR9WANTRSzQ+TXqoiEedL8XDUjaVBBWyfog L/EJDdcIOXhhGGUGIMeOIjuYqxsanqcUNGF0tGxNzGbn9J0ltCwil7Bj4t+KRxVT VnFcc9Avm/HdKdn3OlFJ9MdPbt88mxvJUGpFchj1SoyAdU5HLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUYlxksNvhu5U3Fp2zxoIV5P8w6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvNjViYzdiZWUtZjA0Ny0z MzY1LWI1MzUtMjAzZjBhMGZiZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkERhcRxxfZmlccPg7bWLOLanxfPFQmS+O5IVUbCHUbUbCfbSQ0niRP qdvX4I3jE3BpUVSSBOBsjwNtQAVmBBeBpo+1vVR59n0LoFhM6p/+iu+N/G8JR3Rt mOrWxQKiAFmOHDz5ZhVfv83A/0jsgsgJVFP1AQW+X5+1Xn3W7VisWpm4Rox51wyh riZay+3FpxS9KMoczt26XjtqQrCz1zBIUfph5g8d/77mvj/ODAOOH+KFuG/rn0xj dfvvIIHG0H+F7bU5C34orQgBfHDbnDBiF71I1qtD0qDHzBBciq0rUQFS3FNDRRPO 5bVDVsgPJOvHXaZx+3/j80lHQJritDM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:31:44 2025 by rpki-client