$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/b8a83eda-1148-36a6-8f0c-77acc5558120.roa File: b8a83eda-1148-36a6-8f0c-77acc5558120.roa (raw, json) Hash identifier: sipiL89C59ksrRR+GDUPLjhJHrKPtGDMHQc8Eg/YGhI= Subject key identifier: B1:7D:B7:4B:ED:91:ED:83:EA:ED:62:D7:B6:86:AB:C1:8E:C0:2E:71 Certificate issuer: /CN=aed2676f-2a52-4e10-9b06-0b423a5503c5 Certificate serial: 010D0C9F4328584B636739E28043A2C6A801B500 Authority key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/b8a83eda-1148-36a6-8f0c-77acc5558120.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 11452 IP address blocks: 146.203.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:39:e2:80:43:a2:c6:a8:01:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=bb688a62-6ad2-4e32-b3b9-653c77b11559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:69:da:f4:17:6a:01:49:e9:ee:0b:7f:ee: 87:a8:94:e8:8e:c4:62:6e:07:7d:f7:f5:4d:1e:f3: 78:b0:ed:2e:5e:5e:0c:c6:72:a0:9c:5d:f6:ee:c3: 54:ce:6c:b2:a8:5d:e9:e3:51:02:ac:3a:a4:a5:c3: fc:08:26:5f:ab:a7:5b:ec:52:fd:a2:c7:ff:d1:7a: e2:30:f5:32:98:ba:2a:20:a6:62:11:cf:af:67:92: 64:a4:78:2e:30:bb:4b:c1:b0:b5:f1:4d:da:5c:18: a2:d7:2d:d5:a4:2f:b3:00:f7:15:7d:af:e7:91:8a: 04:dc:ab:46:e7:02:a7:04:74:88:9a:32:43:46:61: 20:8f:a6:82:d2:70:c6:04:9a:27:ec:24:0d:e9:fb: 75:85:99:98:e1:ea:c3:14:4c:db:8d:04:cd:b5:a1: c3:72:a5:87:f9:65:cc:aa:44:64:53:7a:95:11:92: 03:4d:5e:8a:69:e5:ab:d8:f6:e0:58:7e:66:6d:ff: f4:a9:0e:93:18:0c:30:cc:d9:f5:e3:7d:6c:12:1b: ad:d3:a3:35:77:3d:81:90:ef:32:a2:05:e3:6d:d1: d6:7d:d1:76:aa:4e:bf:9b:67:65:66:46:91:07:95: 62:11:95:e9:1d:b3:87:44:b8:bf:72:e9:6f:40:10: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:B7:4B:ED:91:ED:83:EA:ED:62:D7:B6:86:AB:C1:8E:C0:2E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/b8a83eda-1148-36a6-8f0c-77acc5558120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl X509v3 Authority Key Identifier: keyid:C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer sbgp-ipAddrBlock: critical IPv4: 146.203.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:e5:05:f4:da:71:47:dd:dd:c6:42:3d:54:37:fa:c7:df:8a: 34:c4:06:5f:15:61:f3:29:d8:3e:97:f2:4c:d4:cb:c1:e7:dd: b0:47:e7:aa:9f:0f:81:61:bb:87:84:55:3f:df:59:27:09:35: ac:90:11:2b:54:19:14:e4:88:03:d8:ec:63:69:50:27:48:28: 32:93:85:6a:f3:8e:d5:ed:b1:45:15:51:bd:bd:12:07:92:84: 49:b4:84:6f:7c:dc:84:9f:53:9d:39:30:bd:bc:41:fa:dc:0c: 25:10:7c:3f:c0:b2:97:e5:8f:c7:53:0e:ad:22:1d:bb:43:a4: 80:68:d1:8c:9e:68:4d:f8:e4:24:a5:6c:d2:1e:fd:e1:8a:5f: 95:ae:a9:ee:c8:da:36:8a:33:4e:28:4f:6d:b0:c0:15:54:f3: eb:5d:e9:b3:9d:1e:4c:06:98:63:52:77:59:f2:cc:6b:8d:03: 51:da:b2:4e:cb:8f:28:0c:96:fb:da:3b:a5:09:7f:57:59:3f: 41:a4:01:00:93:15:22:4f:cd:f3:2b:c5:3e:c5:e9:7c:b5:eb: b7:08:80:b5:f9:1f:bd:c5:fb:7d:cd:bf:5b:5c:12:1d:8d:64: 9f:67:cb:74:ea:cd:e4:59:d2:fc:29:b5:63:dc:61:dd:91:5f: ac:50:21:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZznigEOixqgBtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMjY3NmYtMmE1Mi00ZTEwLTliMDYtMGI0MjNhNTUw M2M1MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YmI2ODhhNjItNmFkMi00ZTMyLWIzYjktNjUzYzc3YjExNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Bp2vQXagFJ6e4Lf+6HqJTojsRibgd99/VN HvN4sO0uXl4MxnKgnF327sNUzmyyqF3p41ECrDqkpcP8CCZfq6db7FL9osf/0Xri MPUymLoqIKZiEc+vZ5JkpHguMLtLwbC18U3aXBii1y3VpC+zAPcVfa/nkYoE3KtG 5wKnBHSImjJDRmEgj6aC0nDGBJon7CQN6ft1hZmY4erDFEzbjQTNtaHDcqWH+WXM qkRkU3qVEZIDTV6KaeWr2PbgWH5mbf/0qQ6TGAwwzNn1431sEhut06M1dz2BkO8y ogXjbdHWfdF2qk6/m2dlZkaRB5ViEZXpHbOHRLi/culvQBAv2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF9t0vtke2D6u1i17aGq8GOwC5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZWQy Njc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQyM2E1NTAzYzUvYjhhODNlZGEtMTE0OC0z NmE2LThmMGMtNzdhY2M1NTU4MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWVkMjY3NmYtMmE1Mi00ZTEwLTli MDYtMGI0MjNhNTUwM2M1L2FlZDI2NzZmLTJhNTItNGUxMC05YjA2LTBiNDIzYTU1 MDNjNS5jcmwwHwYDVR0jBBgwFoAUwRkl2rK7BcG3dZbBJxb8bHevdn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZWQyNjc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQy M2E1NTAzYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAksuHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOXlBfTacUfd3cZCPVQ3+sffijTEBl8VYfMp2D6X8kzUy8Hn3bBH56qf D4Fhu4eEVT/fWScJNayQEStUGRTkiAPY7GNpUCdIKDKThWrzjtXtsUUVUb29EgeS hEm0hG983ISfU505ML28QfrcDCUQfD/Aspflj8dTDq0iHbtDpIBo0YyeaE345CSl bNIe/eGKX5Wuqe7I2jaKM04oT22wwBVU8+td6bOdHkwGmGNSd1nyzGuNA1Hask7L jygMlvvaO6UJf1dZP0GkAQCTFSJPzfMrxT7F6Xy167cIgLX5H73F+33Nv1tcEh2N ZJ9ny3TqzeRZ0vwptWPcYd2RX6xQIf8= -----END CERTIFICATE-----Generated at Wed Oct 22 00:23:43 2025 by rpki-client