$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa File: a36da157-b4f8-3fa1-861a-594dc015fe56.roa (raw, json) Hash identifier: V4CGke+ABQFOs20IdWOXDVxImJstfWVEq9KgR/epSWU= Subject key identifier: 3F:47:05:EC:00:D7:DA:B9:95:45:23:42:F4:73:DE:F4:20:33:70:F5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B5B073B012115C7CA195F4260 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 64267 IP address blocks: 148.59.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3b:01:21:15:c7:ca:19:5f:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e3a14187-4157-403a-a1a9-5f567fcc708a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:51:e9:2f:74:74:35:13:02:2f:78:6b:6d: c1:7f:13:bb:fd:0b:63:98:3d:f6:19:7d:de:42:eb: fb:32:f8:59:88:96:02:20:e2:ce:c6:6b:41:a6:27: 40:81:67:3a:a9:cb:df:ec:c5:65:95:a2:f8:e6:f4: 0d:e4:c7:71:38:76:0d:b3:f6:25:55:63:52:3c:ac: aa:4a:9f:d0:34:a6:fe:c9:05:b5:45:36:d8:4e:1f: 26:5d:49:72:83:41:6e:17:0b:cc:1c:30:cd:0c:73: f1:82:7a:1b:70:57:c6:df:f7:1f:d8:5e:ff:1b:33: a4:24:fb:a1:d8:a5:6c:5b:79:46:a8:6c:81:09:2a: ba:b6:66:b4:8f:9b:c0:2a:8b:08:41:4b:26:d2:6c: ae:13:e1:af:c3:1a:ec:db:2f:da:f0:74:96:86:97: ab:a5:2a:a1:1f:4e:85:f1:96:66:0b:bd:f7:cb:3a: f3:36:33:c5:96:1f:c5:a3:8b:b8:79:35:8e:1a:f7: 38:ed:06:0d:d8:1c:4f:90:e8:cc:f2:2d:da:64:ff: db:2b:f1:c8:23:7a:5f:48:d4:3f:bb:b2:39:1d:b1: 30:fa:db:de:91:30:ea:a3:d9:e7:55:d3:73:5c:a2: 7f:8f:9b:2e:9c:5f:f4:e6:0e:e5:a5:4a:92:7a:71: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:47:05:EC:00:D7:DA:B9:95:45:23:42:F4:73:DE:F4:20:33:70:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 148.59.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:27:4d:25:a4:17:c6:a5:1d:bf:c8:07:06:13:82:a5:68:a4: c5:da:dc:a7:39:06:6a:b2:3b:78:83:5e:4b:e3:82:ab:e8:2c: df:43:b0:95:66:9d:0d:1d:da:f0:90:f1:60:3f:06:73:04:98: fc:cc:5c:42:3d:68:af:eb:57:4d:05:b8:fb:7a:73:44:ec:a4: 21:25:4a:b5:37:d6:cd:49:91:26:b7:47:21:dd:b6:a6:93:ce: 01:0c:c9:20:b5:49:ab:b5:ff:c0:88:e8:9b:d5:4b:83:fa:75: 4b:cf:4b:a5:f6:88:17:1b:60:9d:7b:a4:4f:92:d2:43:3c:40: 32:69:bc:a4:e6:a6:db:fd:a9:8e:8c:66:67:f8:60:7c:c6:d3: 7c:dc:40:9d:cd:1c:ee:ef:e6:77:e9:12:b7:74:79:a7:0d:49: 45:f1:2e:f1:23:2d:72:cb:53:bb:24:02:90:30:82:37:12:00: a6:c1:ac:e2:02:5b:78:07:89:b6:b3:7d:ce:16:4f:99:1f:21: 68:87:36:49:8a:a9:4d:58:79:9a:96:67:3f:22:cf:c3:30:59: 78:9e:a3:32:b0:16:44:8e:58:ee:dc:11:02:af:3d:38:76:e6: a7:66:24:ed:c9:fa:4c:f9:d9:77:3a:76:c9:f2:cc:bd:d5:e1: 64:cd:be:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzsBIRXHyhlfQmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTNhMTQxODctNDE1Ny00MDNhLWExYTktNWY1NjdmY2M3MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPJR6S90dDUTAi94a23BfxO7/QtjmD32GX3e Quv7MvhZiJYCIOLOxmtBpidAgWc6qcvf7MVllaL45vQN5MdxOHYNs/YlVWNSPKyq Sp/QNKb+yQW1RTbYTh8mXUlyg0FuFwvMHDDNDHPxgnobcFfG3/cf2F7/GzOkJPuh 2KVsW3lGqGyBCSq6tma0j5vAKosIQUsm0myuE+Gvwxrs2y/a8HSWhperpSqhH06F 8ZZmC733yzrzNjPFlh/Fo4u4eTWOGvc47QYN2BxPkOjM8i3aZP/bK/HII3pfSNQ/ u7I5HbEw+tvekTDqo9nnVdNzXKJ/j5sunF/05g7lpUqSenFKwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9HBewA19q5lUUjQvRz3vQgM3D1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTM2ZGExNTctYjRmOC0z ZmExLTg2MWEtNTk0ZGMwMTVmZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwnTSWkF8alHb/IBwYTgqVopMXa3Kc5BmqyO3iDXkvjgqvoLN9DsJVm nQ0d2vCQ8WA/BnMEmPzMXEI9aK/rV00FuPt6c0TspCElSrU31s1JkSa3RyHdtqaT zgEMySC1Sau1/8CI6JvVS4P6dUvPS6X2iBcbYJ17pE+S0kM8QDJpvKTmptv9qY6M Zmf4YHzG03zcQJ3NHO7v5nfpErd0eacNSUXxLvEjLXLLU7skApAwgjcSAKbBrOIC W3gHibazfc4WT5kfIWiHNkmKqU1YeZqWZz8iz8MwWXieozKwFkSOWO7cEQKvPTh2 5qdmJO3J+kz52Xc6dsnyzL3V4WTNvgA= -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:14 2025 by rpki-client