$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa File: 428ad678-24bc-37e4-b693-03a9901a94b0.roa (raw, json) Hash identifier: xN9NlVC67QicpuD6EuABplcQWbDCaQEeXFEx0rW5Pyw= Subject key identifier: 85:E6:B0:53:A0:41:6C:63:70:F4:F6:56:D4:CF:1E:DC:57:0D:7E:20 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584D2D3F79DA0061A65A920B5450 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7862 IP address blocks: 146.23.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:79:da:00:61:a6:5a:92:0b:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=172e729b-495e-4912-a4e7-c27da5726fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:4f:1f:a0:89:87:63:60:9f:5f:81:63:23: c2:95:f1:e0:9b:0e:c4:45:44:8c:61:ce:68:e2:60: 5b:24:0b:77:fe:f4:ad:1d:ad:68:70:c4:06:29:3e: 25:9e:78:40:e5:50:21:2b:c9:ac:5b:a4:80:1b:4e: 08:ef:3f:98:21:96:4e:7f:e7:26:fb:47:f3:98:4a: fc:a0:b5:2d:fe:aa:bc:52:f5:25:3d:2f:44:14:77: c2:69:a2:8e:8b:4f:f5:5f:8e:51:a2:97:bb:31:0e: 24:7d:2b:7c:05:21:2e:db:ca:27:c0:b8:86:2e:95: dd:e7:60:17:78:9b:06:79:ab:d9:1d:e5:0f:fc:60: 4d:39:11:39:8e:9c:e7:ef:81:2d:14:82:89:c2:85: c7:b5:22:38:a8:e3:75:bb:ba:be:ce:41:04:c6:a5: f7:b2:0d:11:65:35:fd:56:48:e5:95:92:b2:bb:ee: 82:66:4d:53:16:ba:f9:bc:39:b8:e4:67:14:18:46: 06:39:0a:ab:4b:bd:05:a9:f8:93:26:83:e7:78:6f: 18:9b:ec:c6:a7:ca:82:57:da:e5:39:07:ee:27:db: e4:13:ea:ee:14:a2:23:dd:bf:b7:5a:c5:7b:aa:5d: 11:b1:79:4e:33:a5:d4:fb:2a:c9:b1:80:53:f8:c0: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:B0:53:A0:41:6C:63:70:F4:F6:56:D4:CF:1E:DC:57:0D:7E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:fe:d6:45:3d:36:d1:f5:10:8a:b0:65:27:94:f7:f9:a7:c9: 5f:5e:a1:0e:3f:80:02:25:5c:75:0a:2c:1a:7b:6a:4c:57:d9: b3:1d:0c:a4:bb:3e:1d:09:cb:71:a6:78:57:4a:51:a8:e1:be: 89:60:13:f1:d7:8b:6b:3f:5a:bb:b2:e4:ad:2d:5b:f8:3d:aa: ef:e0:bf:31:ef:ed:17:61:15:53:73:30:11:b0:e2:6c:c8:ab: 6d:21:44:27:60:3e:da:1b:20:0f:39:f0:72:70:ce:4d:41:46: a2:a9:6d:9f:ca:3a:72:c9:94:28:06:84:c3:78:b8:c4:b4:6a: c9:3c:26:13:9b:43:41:93:f4:28:99:cd:fb:f6:6a:16:90:80: 79:a4:c6:1a:07:bd:9e:a4:79:6e:a5:29:19:40:cf:9a:a4:0f: ff:85:36:57:72:ae:e7:ea:70:29:73:64:3e:74:42:65:4e:2c: 4d:db:85:d0:47:aa:d9:19:61:55:a0:70:dc:b8:a9:35:8b:1e: c8:76:a1:da:52:90:0d:c2:4d:ba:79:8c:05:20:e1:f6:8e:fb: 38:3b:95:59:73:69:43:ad:84:a1:58:67:c5:61:b4:87:a5:11: d4:1d:96:11:6d:96:1d:dd:1a:36:6d:bc:35:c0:37:90:5b:93: f1:f6:e9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3naAGGmWpILVFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MTcyZTcyOWItNDk1ZS00OTEyLWE0ZTctYzI3ZGE1NzI2ZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sNPH6CJh2Ngn1+BYyPClfHgmw7ERUSMYc5o 4mBbJAt3/vStHa1ocMQGKT4lnnhA5VAhK8msW6SAG04I7z+YIZZOf+cm+0fzmEr8 oLUt/qq8UvUlPS9EFHfCaaKOi0/1X45Rope7MQ4kfSt8BSEu28onwLiGLpXd52AX eJsGeavZHeUP/GBNORE5jpzn74EtFIKJwoXHtSI4qON1u7q+zkEExqX3sg0RZTX9 VkjllZKyu+6CZk1TFrr5vDm45GcUGEYGOQqrS70FqfiTJoPneG8Ym+zGp8qCV9rl OQfuJ9vkE+ruFKIj3b+3WsV7ql0RsXlOM6XU+yrJsYBT+MBxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXmsFOgQWxjcPT2VtTPHtxXDX4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvNDI4YWQ2NzgtMjRiYy0z N2U0LWI2OTMtMDNhOTkwMWE5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH+1kU9NtH1EIqwZSeU9/mnyV9eoQ4/gAIlXHUKLBp7akxX2bMdDKS7 Ph0Jy3GmeFdKUajhvolgE/HXi2s/Wruy5K0tW/g9qu/gvzHv7RdhFVNzMBGw4mzI q20hRCdgPtobIA858HJwzk1BRqKpbZ/KOnLJlCgGhMN4uMS0ask8JhObQ0GT9CiZ zfv2ahaQgHmkxhoHvZ6keW6lKRlAz5qkD/+FNldyrufqcClzZD50QmVOLE3bhdBH qtkZYVWgcNy4qTWLHsh2odpSkA3CTbp5jAUg4faO+zg7lVlzaUOthKFYZ8VhtIel EdQdlhFtlh3dGjZtvDXAN5Bbk/H26aU= -----END CERTIFICATE-----Generated at Thu Mar 26 22:20:02 2026 by rpki-client