$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa File: 96785cf8-7262-32e6-b7e6-3db134e27f1c.roa (raw, json) Hash identifier: 9NMgsR2kmBxRhPgg848JJGbGoVOIWcJSr419xXo5jTc= Subject key identifier: B0:17:4A:9A:70:61:B9:C0:C7:3C:E9:47:44:06:0D:83:1E:A9:75:F5 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584F51D2AC5D6F36EC6959F00CC0 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7862 IP address blocks: 146.23.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ac:5d:6f:36:ec:69:59:f0:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=b7e75c48-c53b-45eb-a97f-d396514b243b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:e6:75:66:0e:c8:b9:3a:f3:04:58:60:15: eb:51:55:ba:e1:6b:9f:21:2d:3a:f1:61:2d:17:12: f9:47:b2:18:ae:30:38:e7:86:03:39:db:f6:12:62: be:7a:b0:34:c1:57:ac:2a:c1:63:be:bf:27:79:5a: 6e:60:10:2a:cc:8d:03:5a:1f:76:76:51:ba:b7:28: 8f:70:f5:22:3e:55:4c:3c:65:48:22:05:82:1c:a0: 07:ad:c0:78:7e:3c:87:01:72:dc:da:ef:60:d9:76: 04:1a:5d:9a:bb:d8:9c:f0:ad:8e:d4:d2:99:01:70: 8e:91:24:53:0f:97:10:87:10:2e:df:e3:2b:df:9f: a4:9b:e6:dc:3d:e8:52:dd:10:5a:67:62:ed:4e:cc: 07:af:ec:97:94:49:d4:3a:d1:c5:0c:8c:d1:71:47: d8:f2:de:c1:67:9a:83:87:fb:0d:d2:a8:7f:7d:d8: ed:c5:73:c2:d0:4c:37:5b:78:8a:a0:74:fd:5f:63: a0:0d:96:5a:9e:9f:fd:97:71:60:79:57:0a:b6:76: 37:27:c2:f5:e9:ac:92:8e:61:b6:09:ad:dc:ea:e1: 98:79:41:b9:6b:fd:22:e1:65:af:37:c5:f1:d1:e8: bf:ab:5e:f5:5b:93:82:02:a3:0e:04:23:44:24:5c: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:4A:9A:70:61:B9:C0:C7:3C:E9:47:44:06:0D:83:1E:A9:75:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:87:1d:63:0a:33:ab:c1:8f:21:6b:7f:6b:19:9d:18:30:fb: c7:8a:b3:55:a1:44:f4:49:95:47:bc:a4:e0:99:54:78:8d:eb: 50:4a:3e:7b:bf:79:53:45:3a:e6:32:c9:3d:54:63:2b:eb:6b: e2:da:e3:1b:8f:e7:12:55:47:8f:c1:1e:4c:ea:00:f5:ca:4d: 80:7b:54:cd:9b:7f:17:e9:ac:90:89:8f:6b:ed:6c:16:03:e2: 09:40:43:58:39:34:6d:48:96:22:4d:b3:8e:8c:db:1b:d0:0d: cf:5d:17:31:4e:4e:64:cf:ce:3f:1b:c8:03:52:27:d8:e8:bf: 82:44:fa:ce:e0:ce:b7:11:56:8e:84:c1:ae:e7:c1:08:34:a3: da:be:88:a8:3b:5d:f3:ab:e5:80:d8:ec:d0:a2:2d:52:5c:82: 05:1b:67:d5:e0:0c:1d:56:b8:c7:4b:57:a2:f8:9b:86:05:9a: 62:ae:83:73:71:6f:1c:fc:3f:36:39:dc:dd:05:ba:95:25:89: b4:d9:59:cb:64:6e:97:3b:13:50:54:52:05:63:be:78:ba:7e: 41:d5:e9:2d:9f:94:c8:2c:94:95:16:86:98:2e:24:da:1a:10: 3c:cd:fb:fc:7e:d1:65:c8:60:5b:b4:56:94:06:73:11:8a:1a: fd:34:06:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qxdbzbsaVnwDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjdlNzVjNDgtYzUzYi00NWViLWE5N2YtZDM5NjUxNGIyNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrmdWYOyLk68wRYYBXrUVW64WufIS068WEt FxL5R7IYrjA454YDOdv2EmK+erA0wVesKsFjvr8neVpuYBAqzI0DWh92dlG6tyiP cPUiPlVMPGVIIgWCHKAHrcB4fjyHAXLc2u9g2XYEGl2au9ic8K2O1NKZAXCOkSRT D5cQhxAu3+Mr35+km+bcPehS3RBaZ2LtTswHr+yXlEnUOtHFDIzRcUfY8t7BZ5qD h/sN0qh/fdjtxXPC0Ew3W3iKoHT9X2OgDZZanp/9l3FgeVcKtnY3J8L16aySjmG2 Ca3c6uGYeUG5a/0i4WWvN8Xx0ei/q171W5OCAqMOBCNEJFykSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAXSppwYbnAxzzpR0QGDYMeqXX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOTY3ODVjZjgtNzI2Mi0z MmU2LWI3ZTYtM2RiMTM0ZTI3ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2HHWMKM6vBjyFrf2sZnRgw+8eKs1WhRPRJlUe8pOCZVHiN61BKPnu/ eVNFOuYyyT1UYyvra+La4xuP5xJVR4/BHkzqAPXKTYB7VM2bfxfprJCJj2vtbBYD 4glAQ1g5NG1IliJNs46M2xvQDc9dFzFOTmTPzj8byANSJ9jov4JE+s7gzrcRVo6E wa7nwQg0o9q+iKg7XfOr5YDY7NCiLVJcggUbZ9XgDB1WuMdLV6L4m4YFmmKug3Nx bxz8PzY53N0FupUlibTZWctkbpc7E1BUUgVjvni6fkHV6S2flMgslJUWhpguJNoa EDzN+/x+0WXIYFu0VpQGcxGKGv00BqE= -----END CERTIFICATE-----Generated at Sat Oct 3 12:56:53 2026 by rpki-client