$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa File: 299846a5-9f5b-32a0-8287-286e8857888f.roa (raw, json) Hash identifier: LUu5hPTuxibPNavJUayvIHTC869CXdzIqQve2o6ZA38= Subject key identifier: FB:8E:E9:BD:F0:7C:E4:19:04:32:C9:40:D3:BF:BE:3F:6F:B2:A8:E9 Certificate issuer: /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Certificate serial: 010D0C9F4328584B8EAD0F6A2461B0C289447C40 Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 148.59.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0f:6a:24:61:b0:c2:89:44:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=bfa992b9-ce3d-4136-a6f3-b545722d153c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:3e:06:95:9f:06:d1:06:e7:8c:c2:b5:a3: 76:43:ed:2c:36:e8:bd:ad:9c:84:de:ef:69:38:3a: 26:a4:ca:4d:89:37:bf:af:d5:f8:31:d3:1e:cf:76: 1d:02:36:10:19:d2:54:80:b6:9f:5f:56:66:2c:7b: 2a:9d:fd:38:b8:ac:88:41:a7:b1:e4:e0:29:8b:8e: 3c:d2:20:37:81:ae:a0:37:df:9e:48:80:4c:2e:7b: 72:23:49:9c:e3:e5:7c:7f:a2:7f:d9:71:53:a6:0c: e8:55:13:2f:1c:57:a8:60:df:03:9e:d3:5e:ad:12: ad:ea:da:b5:9a:72:59:9b:97:60:05:d9:cf:19:83: c8:95:5a:94:87:64:da:9b:fd:4b:b2:d7:ee:75:0b: 03:b5:ee:9d:3c:97:3d:01:c6:66:5b:90:6c:bf:ed: 09:6c:33:07:08:39:db:2c:93:d0:e8:43:36:8e:96: e9:d1:3e:36:7f:48:29:1f:98:a1:5d:97:41:c7:b4: cc:eb:c1:cd:6e:ba:a3:b7:75:9b:70:75:7f:83:ae: 9e:00:06:d2:74:79:bd:ff:3b:ec:51:68:17:44:8c: 46:64:b1:60:e9:1a:99:c6:54:db:81:88:ba:84:48: fa:85:7a:1c:63:2f:60:7b:29:e7:b3:f4:7a:50:a2: d1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:E9:BD:F0:7C:E4:19:04:32:C9:40:D3:BF:BE:3F:6F:B2:A8:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl X509v3 Authority Key Identifier: keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer sbgp-ipAddrBlock: critical IPv4: 148.59.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:48:6e:2a:92:86:03:6e:2f:3a:0a:9f:85:48:35:57:5d:da: 1b:72:f3:3a:16:97:4a:fd:e8:46:71:51:88:02:cb:83:9b:c2: c2:57:79:f4:2e:16:2c:31:2d:b9:88:7d:73:b7:5c:79:69:ec: 46:26:9b:38:b2:3c:aa:97:eb:1e:2b:21:43:4e:6f:3a:81:ba: 8c:3b:d5:5f:81:23:09:b5:3c:ba:f4:be:74:b9:60:50:42:16: 10:07:24:89:20:d7:4f:06:75:b1:68:ae:20:4f:42:73:15:62: 2c:83:f4:99:4c:39:cc:45:77:b5:80:ff:3e:47:dc:57:18:08: fd:ea:f0:84:80:d5:89:7e:97:a3:a6:16:7e:47:a5:b3:ef:7f: b5:84:4a:d0:e2:16:ce:c2:9b:a9:55:06:4c:96:4a:51:74:d8: e3:a7:e0:0e:88:e1:40:42:cd:53:89:9c:1f:3d:e0:69:1d:6f: 8e:f7:54:9b:ab:c1:d4:4d:55:b3:fc:99:c3:3a:00:d1:ce:5d: 87:11:45:5f:3b:00:15:b5:52:e1:a0:c7:54:76:77:ae:aa:87: 17:24:fd:4f:0e:3a:29:36:3e:00:da:08:c5:2d:1a:fd:0a:12: 71:df:bb:28:a2:d4:f3:7e:81:c8:00:a1:7d:45:d1:d1:e6:3e: f3:35:13:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQ9qJGGwwolEfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk YjU1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YmZhOTkyYjktY2UzZC00MTM2LWE2ZjMtYjU0NTcyMmQxNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbw+BpWfBtEG54zCtaN2Q+0sNui9rZyE3u9p ODompMpNiTe/r9X4MdMez3YdAjYQGdJUgLafX1ZmLHsqnf04uKyIQaex5OApi448 0iA3ga6gN9+eSIBMLntyI0mc4+V8f6J/2XFTpgzoVRMvHFeoYN8DntNerRKt6tq1 mnJZm5dgBdnPGYPIlVqUh2Tam/1LstfudQsDte6dPJc9AcZmW5Bsv+0JbDMHCDnb LJPQ6EM2jpbp0T42f0gpH5ihXZdBx7TM68HNbrqjt3WbcHV/g66eAAbSdHm9/zvs UWgXRIxGZLFg6RqZxlTbgYi6hEj6hXocYy9geynns/R6UKLRIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuO6b3wfOQZBDLJQNO/vj9vsqjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1 ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvMjk5ODQ2YTUtOWY1Yi0z MmEwLTgyODctMjg2ZTg4NTc4ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3 MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1 ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2 YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9IbiqShgNuLzoKn4VINVdd2hty8zoWl0r96EZxUYgCy4ObwsJXefQu FiwxLbmIfXO3XHlp7EYmmziyPKqX6x4rIUNObzqBuow71V+BIwm1PLr0vnS5YFBC FhAHJIkg108GdbForiBPQnMVYiyD9JlMOcxFd7WA/z5H3FcYCP3q8ISA1Yl+l6Om Fn5HpbPvf7WEStDiFs7Cm6lVBkyWSlF02OOn4A6I4UBCzVOJnB894Gkdb473VJur wdRNVbP8mcM6ANHOXYcRRV87ABW1UuGgx1R2d66qhxck/U8OOik2PgDaCMUtGv0K EnHfuyii1PN+gcgAoX1F0dHmPvM1Ew8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:39 2025 by rpki-client