$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa File: 2a28dd70-b06b-3843-af4d-73a9482b3961.roa (raw, json) Hash identifier: 6NO4TQ5DhrEcYQlSaN63E96WjxaDNb9y7F1eyLVXIS0= Subject key identifier: A6:EF:01:F8:0F:A6:5D:51:F4:00:81:D9:B3:5F:A3:5A:34:33:01:D3 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584B6D2C91D07DB9AFA0E9A11C80 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7862 IP address blocks: 146.23.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:91:d0:7d:b9:af:a0:e9:a1:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=314d456a-b909-4bb6-b2b9-64f9a1b69724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:f9:3e:30:5c:5b:78:81:67:cb:a6:22:33: 89:c5:af:1d:36:26:23:b5:bf:85:a2:19:17:b9:98: 0a:c3:5f:3b:cb:fe:0a:ff:61:03:29:e9:38:21:a2: dd:58:78:f7:bc:9a:9b:5f:16:ce:1b:c3:c0:1b:cf: a9:31:57:38:11:c0:56:5a:84:39:d1:0b:8b:99:e8: 3e:3b:b3:54:5d:6e:0b:4f:dc:f8:a7:3b:56:76:ba: 03:1d:26:86:ce:e8:65:d8:50:4e:4c:71:1d:26:91: 07:c3:af:74:f7:e0:2a:a7:bc:70:df:0c:d5:35:65: 5d:da:35:70:f3:3b:3b:7d:1a:24:e2:a1:5f:72:5c: 2e:09:e6:96:d7:c4:de:bc:c5:04:90:33:df:7f:ee: ee:85:a0:f9:d4:8e:b5:a3:cc:30:8a:a0:8f:d4:36: f3:45:24:3a:3a:2a:eb:3a:b7:71:dd:ad:32:cc:e2: 5d:35:ef:fe:ce:71:aa:e6:b8:b4:1c:44:af:06:7b: 63:fc:06:d1:ab:b1:25:ce:d3:04:0b:62:ba:92:e2: 70:1e:88:d7:d1:bf:0b:1b:6e:b6:1e:59:25:22:ed: a3:6f:5f:02:f1:00:10:b4:29:45:2a:0b:05:77:34: 38:92:e0:61:2c:f8:2f:c6:0e:25:12:e1:15:db:8f: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EF:01:F8:0F:A6:5D:51:F4:00:81:D9:B3:5F:A3:5A:34:33:01:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6d:eb:bd:d6:44:66:87:4c:1e:1e:d0:a7:1f:09:13:60:59: 60:90:94:81:3a:3b:d6:c3:0d:dc:1b:ab:46:19:6b:72:06:80: 14:3f:7f:9d:e2:bb:f1:cf:90:a7:b7:7e:d9:76:67:e7:3b:62: ec:54:63:7f:e1:91:38:62:3c:c1:2d:6b:c6:1f:b2:01:83:92: 1d:67:04:f2:b4:be:58:ba:f6:62:ed:ef:9b:08:a4:17:21:f4: 6d:eb:7f:35:cd:c6:a2:d8:92:9c:73:0f:be:7c:de:ec:c0:f5: 12:75:2c:a9:24:e8:ea:47:6a:32:a8:3c:26:ce:69:cf:a4:85: 9e:4b:d3:c6:80:13:e6:b7:1b:63:69:70:8f:aa:c6:c1:4f:45: d1:5b:2d:4f:07:9b:a7:d6:40:68:d2:8d:c0:6b:86:5e:09:b3: f4:f2:5d:78:84:f9:19:3a:f0:b4:c9:22:78:59:0e:e3:ef:5a: cb:f1:90:11:b8:93:3b:84:41:ed:13:a6:37:17:73:1e:6d:33: ae:35:1d:dc:85:97:5d:db:2b:1b:d3:72:dd:cb:0c:d2:35:ad: 5f:a4:c2:86:c4:35:46:2e:5e:78:04:b4:4c:24:a1:2a:bd:90: 92:14:87:c6:cb:72:01:ac:49:32:43:76:49:91:c0:c7:b8:3e: d2:88:7b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJHQfbmvoOmhHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzE0ZDQ1NmEtYjkwOS00YmI2LWIyYjktNjRmOWExYjY5NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1P5PjBcW3iBZ8umIjOJxa8dNiYjtb+FohkX uZgKw187y/4K/2EDKek4IaLdWHj3vJqbXxbOG8PAG8+pMVc4EcBWWoQ50QuLmeg+ O7NUXW4LT9z4pztWdroDHSaGzuhl2FBOTHEdJpEHw6909+Aqp7xw3wzVNWVd2jVw 8zs7fRok4qFfclwuCeaW18TevMUEkDPff+7uhaD51I61o8wwiqCP1DbzRSQ6Oirr Ordx3a0yzOJdNe/+znGq5ri0HESvBntj/AbRq7ElztMEC2K6kuJwHojX0b8LG262 HlklIu2jb18C8QAQtClFKgsFdzQ4kuBhLPgvxg4lEuEV24+pywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbvAfgPpl1R9ACB2bNfo1o0MwHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMmEyOGRkNzAtYjA2Yi0z ODQzLWFmNGQtNzNhOTQ4MmIzOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNt673WRGaHTB4e0KcfCRNgWWCQlIE6O9bDDdwbq0YZa3IGgBQ/f53i u/HPkKe3ftl2Z+c7YuxUY3/hkThiPMEta8YfsgGDkh1nBPK0vli69mLt75sIpBch 9G3rfzXNxqLYkpxzD7583uzA9RJ1LKkk6OpHajKoPCbOac+khZ5L08aAE+a3G2Np cI+qxsFPRdFbLU8Hm6fWQGjSjcBrhl4Js/TyXXiE+Rk68LTJInhZDuPvWsvxkBG4 kzuEQe0TpjcXcx5tM641HdyFl13bKxvTct3LDNI1rV+kwobENUYuXngEtEwkoSq9 kJIUh8bLcgGsSTJDdkmRwMe4PtKIe8k= -----END CERTIFICATE-----Generated at Mon Oct 20 07:58:38 2025 by rpki-client