$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa File: 8d16e8b6-023d-31c2-b651-81c42ca8072b.roa (raw, json) Hash identifier: vrXjg9/r80J4/4pUfsYXZ2u1YeC7qI4Kb2tlgmRjM70= Subject key identifier: B3:C7:44:E6:EC:6A:F2:3D:FC:FD:6B:9A:93:21:0B:C8:7D:B0:96:A0 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584B84E77F5B4748CFF34ECA8480 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 35847 IP address blocks: 146.85.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7f:5b:47:48:cf:f3:4e:ca:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=86eebeaa-6b7e-4c4c-b04d-50650bfaf58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:18:5e:30:09:c5:78:33:32:01:4c:28:db: a4:ca:31:2f:d4:d1:b7:1f:c4:d7:a3:90:b6:fe:df: 73:4c:66:09:97:26:a4:f5:03:7b:aa:f5:fe:73:43: 82:f8:89:81:16:93:d6:bd:70:f5:8d:d6:53:e9:a8: 05:0f:c8:37:fd:0d:a2:7c:96:1e:cb:ea:c6:77:5f: 47:e0:0e:e9:53:ed:08:41:b7:6a:d1:32:64:45:39: 91:ba:f5:24:37:5b:a1:c7:dc:1d:27:c0:49:99:d5: c5:eb:a7:d9:6f:c5:19:6c:c5:48:9c:8b:fc:cc:ad: 95:e7:bc:9d:98:94:2b:38:74:29:50:1c:40:59:e9: 2d:57:19:b2:4a:8b:ae:f3:a2:c8:64:33:20:4d:33: 28:a7:cd:b8:18:89:98:53:5a:76:c7:c1:55:4f:c9: 54:dd:ef:2a:76:bc:a2:5f:f4:55:89:a3:5a:7e:82: d0:07:08:0d:a6:3d:18:3e:9c:a1:44:c7:bd:7c:71: 07:83:9d:cf:37:76:3c:ed:28:92:45:ec:99:71:64: ff:6e:7d:7b:12:77:c2:b8:eb:09:06:65:ff:5f:32: 86:5d:23:08:43:fd:97:45:6d:df:6b:26:97:ce:c0: 66:c3:82:72:07:e4:78:a0:a1:7e:22:0c:f8:8c:74: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C7:44:E6:EC:6A:F2:3D:FC:FD:6B:9A:93:21:0B:C8:7D:B0:96:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 146.85.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:75:a9:9d:44:5c:d0:87:ec:56:b0:51:a7:24:d2:2c:5b:d2: 28:10:d3:df:69:6d:3b:c2:b1:1b:42:87:b8:33:a1:59:cb:70: d1:82:62:02:c8:08:66:92:96:a2:84:05:ab:73:6c:f1:65:6f: 3f:45:89:4c:5c:6f:82:5f:32:53:01:fd:49:0b:55:88:2f:84: 7e:c5:f5:fb:74:d1:a0:3e:83:89:8a:9f:f2:35:d9:19:f7:0a: ad:42:03:f7:0b:dd:a7:27:72:67:ab:d0:32:dc:4f:ad:7b:6a: f5:05:23:48:b9:58:85:26:85:d7:0d:6e:69:52:d8:96:3e:a0: 2b:67:2b:2f:d4:9d:02:73:cb:bb:09:0e:6e:6a:85:64:a3:39: 1d:94:e2:ae:c8:2c:ce:6e:03:6b:c7:da:7c:d7:12:7a:7b:4d: f6:02:b8:3e:02:34:68:82:b4:d7:c0:7b:b9:85:e5:4b:d3:69: 1d:3a:07:aa:f8:0a:66:2e:17:c8:a7:81:ad:a8:44:7d:f0:f1: 71:37:ed:62:0c:45:60:11:ae:b6:1c:23:ef:0c:4b:ef:eb:df: 57:33:b5:71:9b:bd:85:75:42:bd:e3:34:41:f8:00:f7:f9:07: f1:d0:14:d4:b7:6c:97:80:18:f5:fd:82:22:c2:91:75:2d:7d: 39:04:d9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE539bR0jP807KhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODZlZWJlYWEtNmI3ZS00YzRjLWIwNGQtNTA2NTBiZmFmNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6sYXjAJxXgzMgFMKNukyjEv1NG3H8TXo5C2 /t9zTGYJlyak9QN7qvX+c0OC+ImBFpPWvXD1jdZT6agFD8g3/Q2ifJYey+rGd19H 4A7pU+0IQbdq0TJkRTmRuvUkN1uhx9wdJ8BJmdXF66fZb8UZbMVInIv8zK2V57yd mJQrOHQpUBxAWektVxmySouu86LIZDMgTTMop824GImYU1p2x8FVT8lU3e8qdryi X/RViaNafoLQBwgNpj0YPpyhRMe9fHEHg53PN3Y87SiSReyZcWT/bn17EnfCuOsJ BmX/XzKGXSMIQ/2XRW3fayaXzsBmw4JyB+R4oKF+Igz4jHToYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPHRObsavI9/P1rmpMhC8h9sJagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvOGQxNmU4YjYtMDIzZC0z MWMyLWI2NTEtODFjNDJjYTgwNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFklWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp1qZ1EXNCH7FawUack0ixb0igQ099pbTvCsRtCh7gzoVnLcNGCYgLI CGaSlqKEBatzbPFlbz9FiUxcb4JfMlMB/UkLVYgvhH7F9ft00aA+g4mKn/I12Rn3 Cq1CA/cL3acncmer0DLcT617avUFI0i5WIUmhdcNbmlS2JY+oCtnKy/UnQJzy7sJ Dm5qhWSjOR2U4q7ILM5uA2vH2nzXEnp7TfYCuD4CNGiCtNfAe7mF5UvTaR06B6r4 CmYuF8inga2oRH3w8XE37WIMRWARrrYcI+8MS+/r31cztXGbvYV1Qr3jNEH4APf5 B/HQFNS3bJeAGPX9giLCkXUtfTkE2dU= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:11 2025 by rpki-client