$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/7d151b6a-f88a-388d-937a-b0867833151e.roa File: 7d151b6a-f88a-388d-937a-b0867833151e.roa (raw, json) Hash identifier: 7/NDsbPf1v1B+BikNAsfIOdVPumPirgRRHWlFDgSNk4= Subject key identifier: C6:47:34:9E:DC:F2:B9:72:74:C4:D5:29:28:85:57:A9:59:D6:67:91 Certificate issuer: /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a Certificate serial: 010D0C9F4328584B0CDC082E82802FBB7487E480 Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/7d151b6a-f88a-388d-937a-b0867833151e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 3737 IP address blocks: 146.12.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:08:2e:82:80:2f:bb:74:87:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=02742aa9-32d1-46a1-8a27-1cb51f2a83f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:fd:ba:35:ac:3f:e3:9b:13:93:f8:e4:70: f0:90:07:db:c2:c8:36:42:25:74:39:87:2f:a0:54: 33:31:ba:a3:48:1b:20:4b:4b:80:df:73:37:03:c3: c6:d2:bb:4e:40:43:d2:f7:84:9a:d7:40:45:7b:5c: 7d:ae:81:88:bd:f0:dc:b3:a1:2e:b2:11:4a:ba:6c: 77:ab:a7:45:b3:51:bd:68:ee:d5:ce:b6:5d:be:5e: 3c:85:fd:8b:1d:1f:4a:17:58:18:c8:98:4f:5f:bc: 96:38:93:9e:05:cd:78:26:8f:e0:43:65:7a:36:a8: 2a:05:ba:9b:5a:cb:3d:1f:af:ac:76:14:18:85:01: a8:ca:cf:ae:9b:5e:fe:1f:6c:d9:9d:7b:68:15:b3: 01:56:06:60:8a:b5:64:1e:fd:ba:05:db:95:c0:1e: cc:64:f7:68:a6:fb:9d:81:9b:5f:70:04:ae:ac:7b: ea:5a:84:f7:e3:1f:dc:7b:dd:f5:d9:6c:af:89:ea: 97:f1:5b:c9:d0:e6:d0:f1:bb:1f:9c:68:e9:65:cb: 27:54:eb:6b:41:bc:3b:1d:2f:24:38:03:11:c6:ca: 75:b0:fb:bc:8f:4c:8d:1b:7e:72:9c:40:dc:c5:3b: 28:11:cc:2c:85:04:07:ac:2a:31:e0:05:76:c9:96: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:47:34:9E:DC:F2:B9:72:74:C4:D5:29:28:85:57:A9:59:D6:67:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/7d151b6a-f88a-388d-937a-b0867833151e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl X509v3 Authority Key Identifier: keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer sbgp-ipAddrBlock: critical IPv4: 146.12.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:7b:86:ca:99:c7:10:df:80:09:09:4a:52:7e:ec:06:5f:a1: b2:3e:70:70:87:77:d9:6a:31:98:3b:5d:07:96:49:6a:19:27: f2:36:a4:04:2c:28:be:ba:45:e0:26:e1:32:98:97:dc:8b:48: 0e:8d:9e:6c:bd:94:f2:09:2d:b8:2e:7b:0b:03:d4:e9:15:9b: 0e:2a:f0:cf:6b:ed:9d:7c:8e:ec:b5:9c:48:9b:27:1e:56:72: 65:c1:d8:84:ad:6d:ed:93:b9:08:8e:88:84:67:a3:ca:a2:51: c8:82:c3:47:f7:f3:ad:d3:15:74:ab:01:7f:8d:1f:3d:45:68: 61:01:bc:33:91:24:19:cc:aa:7c:bf:b2:38:ae:4a:fa:85:28: 62:0d:76:c9:e1:01:41:a1:49:95:41:58:5c:b1:39:3b:6e:b2: 66:06:be:d5:26:0d:6d:d4:59:00:ba:72:e1:5c:0c:76:f9:c8: c2:23:f2:74:f2:d8:cd:b8:61:af:b5:67:55:6e:ae:b1:92:e0: ed:29:69:39:8a:b5:a1:a3:b3:2c:de:26:81:8e:14:78:0c:16: ed:d0:12:6d:19:88:99:7c:4e:c4:dd:b0:94:e9:3e:f8:4e:bf: a9:d0:26:89:37:6b:e8:d2:e1:30:a1:3b:9c:2d:b2:29:ad:64: 44:02:db:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AgugoAvu3SH5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjNDY1Y2EtMGE0NC00M2VhLWEyM2YtZTBkMmRlMjIw ZTFhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MDI3NDJhYTktMzJkMS00NmExLThhMjctMWNiNTFmMmE4M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44L9ujWsP+ObE5P45HDwkAfbwsg2QiV0OYcv oFQzMbqjSBsgS0uA33M3A8PG0rtOQEPS94Sa10BFe1x9roGIvfDcs6EushFKumx3 q6dFs1G9aO7VzrZdvl48hf2LHR9KF1gYyJhPX7yWOJOeBc14Jo/gQ2V6NqgqBbqb Wss9H6+sdhQYhQGoys+um17+H2zZnXtoFbMBVgZgirVkHv26BduVwB7MZPdopvud gZtfcASurHvqWoT34x/ce9312WyvieqX8VvJ0ObQ8bsfnGjpZcsnVOtrQbw7HS8k OAMRxsp1sPu8j0yNG35ynEDcxTsoEcwshQQHrCox4AV2yZaeEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZHNJ7c8rlydMTVKSiFV6lZ1meRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNWM0 NjVjYS0wYTQ0LTQzZWEtYTIzZi1lMGQyZGUyMjBlMWEvN2QxNTFiNmEtZjg4YS0z ODhkLTkzN2EtYjA4Njc4MzMxNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzVjNDY1Y2EtMGE0NC00M2VhLWEy M2YtZTBkMmRlMjIwZTFhLzM1YzQ2NWNhLTBhNDQtNDNlYS1hMjNmLWUwZDJkZTIy MGUxYS5jcmwwHwYDVR0jBBgwFoAUtzcwHiCDy8kUQ5t8bkNKt3pCQi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNWM0NjVjYS0wYTQ0LTQzZWEtYTIzZi1lMGQy ZGUyMjBlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkgwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd7hsqZxxDfgAkJSlJ+7AZfobI+cHCHd9lqMZg7XQeWSWoZJ/I2pAQs KL66ReAm4TKYl9yLSA6Nnmy9lPIJLbguewsD1OkVmw4q8M9r7Z18juy1nEibJx5W cmXB2IStbe2TuQiOiIRno8qiUciCw0f3863TFXSrAX+NHz1FaGEBvDORJBnMqny/ sjiuSvqFKGINdsnhAUGhSZVBWFyxOTtusmYGvtUmDW3UWQC6cuFcDHb5yMIj8nTy 2M24Ya+1Z1VurrGS4O0paTmKtaGjsyzeJoGOFHgMFu3QEm0ZiJl8TsTdsJTpPvhO v6nQJok3a+jS4TChO5wtsimtZEQC2yI= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:47 2025 by rpki-client