$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa File: 96785cf8-7262-32e6-b7e6-3db134e27f1c.roa (raw, json) Hash identifier: 4KUhRP/TiDQ5EHiLS2znLegocZgwvtUB5dJ8UVqSqFA= Subject key identifier: 71:3B:22:3C:DB:65:DF:FA:68:53:C5:C9:61:3F:0A:35:AE:E5:AD:D4 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584B6D2C91379E9EE58B047C0E80 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7862 IP address blocks: 146.23.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:91:37:9e:9e:e5:8b:04:7c:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=441c02bd-8f60-4413-870c-db77e2dc3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:d3:55:88:0c:de:b6:14:10:3a:c5:8c:79: 8a:39:57:ef:04:85:1f:29:28:30:ed:e0:6e:1b:f3: 55:ad:85:ee:d6:7e:fd:2e:d3:39:88:ed:cb:4e:44: 46:1c:ef:58:0c:d1:54:3e:28:f8:ac:bb:b8:4f:c3: d2:07:09:12:90:d5:6f:ca:08:5f:93:53:d0:b8:46: 0e:13:38:cc:dc:75:4b:68:5b:6c:8c:49:5f:1f:84: 5d:a2:ab:b2:a4:91:95:ae:66:7c:76:9f:1f:af:d6: fe:f4:8e:28:cf:fe:2c:84:99:f9:73:ff:54:73:3f: 26:d8:7c:8d:8c:56:ce:71:66:02:42:84:8e:4e:c6: 90:62:47:af:c8:10:ec:f0:8c:e7:cd:28:16:36:cb: 1e:b1:b7:6f:54:7f:6c:ab:49:36:ec:7f:4b:0a:87: ca:ea:6e:f8:0d:74:d3:a2:0c:53:d9:6d:f3:3a:1c: 9f:44:af:8c:75:84:9f:39:5b:03:b7:e5:04:a8:d3: c3:99:ca:9d:05:5b:33:92:66:97:72:08:6f:63:fc: 8f:16:97:2e:25:4d:75:b1:21:b9:24:82:75:d2:cf: d7:bf:4a:bc:71:e6:3a:6e:47:34:7f:0c:64:1e:39: 1f:f0:c5:f8:90:1a:71:9f:d9:9b:26:1f:13:ba:af: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:22:3C:DB:65:DF:FA:68:53:C5:C9:61:3F:0A:35:AE:E5:AD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:eb:51:28:8e:f4:61:94:5a:58:fe:e8:ab:4e:67:19:bc:31: ce:ba:87:61:25:56:79:99:85:89:dd:4a:af:83:75:62:89:56: a0:58:f2:4d:1a:d5:e4:67:b0:93:24:ed:ad:9d:e4:4e:9e:f5: fe:10:90:b0:94:c8:ef:e0:ad:60:27:71:ee:ac:99:41:96:dc: 5f:2b:e5:b9:7f:5d:66:bd:25:5b:bf:3c:ac:28:d4:9f:b4:f0: 83:8e:b2:68:dc:9a:82:bf:28:b2:6c:cc:9b:ce:fd:13:dd:1c: d9:a2:ec:61:42:e2:3b:91:ff:ca:de:d8:7f:ab:87:f3:3d:79: a0:26:93:4d:0d:29:01:d4:6e:94:3d:a1:9b:63:87:e1:e9:cd: 2f:e5:48:ae:52:2c:56:81:82:85:32:ea:d4:4d:3e:6f:69:c9: 68:0f:b8:05:c6:55:46:81:b4:d9:24:c4:65:32:c5:0b:bf:6f: 9c:51:ac:70:ad:e4:4c:89:ca:78:1d:83:99:b3:22:cc:24:74: a8:8d:c1:1e:eb:9a:e5:d7:72:e0:42:9a:d5:2d:17:90:d5:1f: a7:58:ef:66:f8:74:e4:7e:b2:28:6f:c8:db:ff:32:8f:f9:28: 75:cc:c9:29:10:ea:1d:63:02:dd:5a:d7:03:8c:5e:d8:00:a4: 23:43:87:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJE3np7liwR8DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDQxYzAyYmQtOGY2MC00NDEzLTg3MGMtZGI3N2UyZGMzYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb3TVYgM3rYUEDrFjHmKOVfvBIUfKSgw7eBu G/NVrYXu1n79LtM5iO3LTkRGHO9YDNFUPij4rLu4T8PSBwkSkNVvyghfk1PQuEYO EzjM3HVLaFtsjElfH4RdoquypJGVrmZ8dp8fr9b+9I4oz/4shJn5c/9Ucz8m2HyN jFbOcWYCQoSOTsaQYkevyBDs8IznzSgWNssesbdvVH9sq0k27H9LCofK6m74DXTT ogxT2W3zOhyfRK+MdYSfOVsDt+UEqNPDmcqdBVszkmaXcghvY/yPFpcuJU11sSG5 JIJ10s/Xv0q8ceY6bkc0fwxkHjkf8MX4kBpxn9mbJh8Tuq/HaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE7IjzbZd/6aFPFyWE/CjWu5a3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOTY3ODVjZjgtNzI2Mi0z MmU2LWI3ZTYtM2RiMTM0ZTI3ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHrUSiO9GGUWlj+6KtOZxm8Mc66h2ElVnmZhYndSq+DdWKJVqBY8k0a 1eRnsJMk7a2d5E6e9f4QkLCUyO/grWAnce6smUGW3F8r5bl/XWa9JVu/PKwo1J+0 8IOOsmjcmoK/KLJszJvO/RPdHNmi7GFC4juR/8re2H+rh/M9eaAmk00NKQHUbpQ9 oZtjh+HpzS/lSK5SLFaBgoUy6tRNPm9pyWgPuAXGVUaBtNkkxGUyxQu/b5xRrHCt 5EyJyngdg5mzIswkdKiNwR7rmuXXcuBCmtUtF5DVH6dY72b4dOR+sihvyNv/Mo/5 KHXMySkQ6h1jAt1a1wOMXtgApCNDhx0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:06 2025 by rpki-client