$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/dd7dfbef-97ab-3c89-9144-21c8cfa4208d.roa File: dd7dfbef-97ab-3c89-9144-21c8cfa4208d.roa (raw, json) Hash identifier: hBQDV5qftVP6qcM5Uem5kwd5UVVqNnpqfF9TjWe8QN8= Subject key identifier: 49:4E:65:48:1A:12:51:45:B5:B8:1A:F3:4B:A3:92:1E:6A:C0:D9:C3 Certificate issuer: /CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6 Certificate serial: 010D0C9F4328584B80B76C11C10AE8CE2021D080 Authority key identifier: 1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/dd7dfbef-97ab-3c89-9144-21c8cfa4208d.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 30517 IP address blocks: 148.59.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6c:11:c1:0a:e8:ce:20:21:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=027a1c73-6b76-4ff1-9bfa-0d48c381e333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:a7:fa:b9:85:2c:12:22:ec:d6:cd:b3:fb: 09:d8:08:53:3e:7e:1e:b3:43:42:66:19:d6:c5:38: 9e:f0:73:df:51:52:86:32:d6:11:26:d3:b8:14:07: 36:a1:74:61:67:b8:8e:14:12:36:ac:5c:e5:d1:08: 1d:21:80:70:03:e2:92:73:b8:4c:db:67:f4:be:ef: 9b:31:e6:7a:3e:eb:00:b7:33:4c:3b:37:cb:12:a1: cc:99:3d:b7:76:70:e2:71:ce:47:3b:35:34:9f:48: d9:c1:04:70:57:44:f2:ad:2a:0f:22:76:de:e8:13: 8f:fe:55:e7:23:16:4f:13:35:0d:d6:e7:2f:3b:d1: 78:b9:c5:4a:4b:1f:a1:f6:2a:0a:ee:f9:17:b5:97: ac:2b:46:58:8b:63:cd:58:6d:f8:32:db:04:5a:82: 6d:25:1e:5e:d9:ee:37:67:80:47:da:a1:8d:55:88: 9e:6d:7e:a2:c2:33:d4:b8:27:4c:10:4e:fb:2b:d2: 22:f7:17:11:37:9d:9c:15:31:dc:c3:23:4c:87:bc: 82:99:8e:92:04:ba:5f:2c:2a:0c:ea:57:b8:65:ed: b3:c1:b8:91:5c:6e:bb:7a:06:5b:6d:79:6b:2a:d1: e8:c7:fc:57:2f:a7:c1:14:50:f5:2f:e6:16:69:14: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4E:65:48:1A:12:51:45:B5:B8:1A:F3:4B:A3:92:1E:6A:C0:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/dd7dfbef-97ab-3c89-9144-21c8cfa4208d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl X509v3 Authority Key Identifier: keyid:1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer sbgp-ipAddrBlock: critical IPv4: 148.59.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c0:6a:60:f0:56:07:ef:61:04:80:b3:37:bb:dc:b3:f3:dc: 28:09:79:34:be:09:e7:ea:1d:95:73:9f:e1:f1:ae:48:c8:ce: 23:b7:2f:49:53:95:66:b5:da:26:bf:dc:0f:1f:08:9a:88:2a: 8c:3d:28:07:c5:d1:93:55:a9:e3:80:24:c4:cd:ec:34:e0:90: 7f:04:a3:bd:43:58:00:ad:05:11:54:29:d7:62:d4:b3:12:b7: e2:94:9a:83:cd:66:16:e1:54:ff:84:9a:90:64:ad:62:f4:08: 84:1b:84:c4:76:76:41:aa:f6:0e:dc:2d:ce:62:01:79:03:39: b2:63:78:e8:0c:e1:41:10:cb:d7:c2:c1:79:80:3e:b4:e4:2d: 85:f8:80:cf:ce:84:94:36:56:ca:60:66:99:a1:5c:ad:6a:a2: fb:48:04:5d:2a:be:23:1b:05:e0:79:3e:6e:d2:21:10:a0:c6: 70:9d:36:c4:2a:fe:57:fd:2f:c7:fc:0d:86:f1:ee:39:e2:12: 50:c5:89:08:8d:c5:af:96:38:af:59:8c:20:ab:86:52:12:2b: 0f:01:d9:34:4b:d1:e8:61:33:1d:32:e5:5c:a4:65:61:a7:59: 0f:65:f8:b9:a9:3e:6a:21:ac:f1:67:28:45:0c:a9:a3:cd:60: d8:5e:53:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2wRwQroziAh0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU0OGU4N2EtNjNkZS00ZTExLTkyYzYtMGEyZTFiYzA0 ZGQ2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MDI3YTFjNzMtNmI3Ni00ZmYxLTliZmEtMGQ0OGMzODFlMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Gn+rmFLBIi7NbNs/sJ2AhTPn4es0NCZhnW xTie8HPfUVKGMtYRJtO4FAc2oXRhZ7iOFBI2rFzl0QgdIYBwA+KSc7hM22f0vu+b MeZ6PusAtzNMOzfLEqHMmT23dnDicc5HOzU0n0jZwQRwV0TyrSoPInbe6BOP/lXn IxZPEzUN1ucvO9F4ucVKSx+h9ioK7vkXtZesK0ZYi2PNWG34MtsEWoJtJR5e2e43 Z4BH2qGNVYiebX6iwjPUuCdMEE77K9Ii9xcRN52cFTHcwyNMh7yCmY6SBLpfLCoM 6le4Ze2zwbiRXG67egZbbXlrKtHox/xXL6fBFFD1L+YWaRQiGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElOZUgaElFFtbga80ujkh5qwNnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80NTQ4 ZTg3YS02M2RlLTRlMTEtOTJjNi0wYTJlMWJjMDRkZDYvZGQ3ZGZiZWYtOTdhYi0z Yzg5LTkxNDQtMjFjOGNmYTQyMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDU0OGU4N2EtNjNkZS00ZTExLTky YzYtMGEyZTFiYzA0ZGQ2LzQ1NDhlODdhLTYzZGUtNGUxMS05MmM2LTBhMmUxYmMw NGRkNi5jcmwwHwYDVR0jBBgwFoAUHcdwQ5hT54l1+s7RkAgEan0Ve1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80NTQ4ZTg3YS02M2RlLTRlMTEtOTJjNi0wYTJl MWJjMDRkZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDs9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXAamDwVgfvYQSAsze73LPz3CgJeTS+CefqHZVzn+HxrkjIziO3L0lT lWa12ia/3A8fCJqIKow9KAfF0ZNVqeOAJMTN7DTgkH8Eo71DWACtBRFUKddi1LMS t+KUmoPNZhbhVP+EmpBkrWL0CIQbhMR2dkGq9g7cLc5iAXkDObJjeOgM4UEQy9fC wXmAPrTkLYX4gM/OhJQ2VspgZpmhXK1qovtIBF0qviMbBeB5Pm7SIRCgxnCdNsQq /lf9L8f8DYbx7jniElDFiQiNxa+WOK9ZjCCrhlISKw8B2TRL0ehhMx0y5VykZWGn WQ9l+LmpPmohrPFnKEUMqaPNYNheU5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:49 2025 by rpki-client