$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5db6969d-67a3-3925-aa91-5cd42fe537ca.roa File: 5db6969d-67a3-3925-aa91-5cd42fe537ca.roa (raw, json) Hash identifier: KG8Sl6D+lQ1tZNsbB8TfMBB9bCn9a+auudqgU+0yHQo= Subject key identifier: 48:E0:70:24:C9:82:22:B4:7B:84:A8:89:70:58:1A:30:08:2D:C9:2F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD566D568B5AF259DC3A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5db6969d-67a3-3925-aa91-5cd42fe537ca.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 146.148.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:56:6d:56:8b:5a:f2:59:dc:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3cc2d68d-7e0a-46bc-9565-3f1ac860889b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:cf:22:ad:b7:42:f9:5e:ee:c4:bb:b7:c3: 4c:e2:60:34:ca:f8:f9:46:91:86:b3:b7:d5:72:6d: f0:ea:74:9f:a8:c9:71:89:da:2e:23:8f:94:4f:4e: f8:27:2e:a4:75:1b:31:5a:e4:aa:2c:16:43:73:8c: ec:25:1e:c0:8b:52:90:b0:51:47:da:11:15:6d:69: 63:24:57:c9:96:4c:e4:82:9e:46:9a:03:a7:ad:11: 2f:a3:df:73:6d:1a:85:8d:bf:df:ba:fd:30:d5:c4: 70:25:d9:84:fb:70:50:8a:e7:6b:bb:cb:07:53:02: 80:bf:3d:7b:74:23:9b:fe:cb:57:2b:02:2e:7c:99: 38:3a:60:67:93:38:d8:3c:fa:c5:14:cc:e0:9d:2b: 09:8a:72:c8:98:d0:af:f9:39:4f:65:4e:68:0d:32: c1:32:b7:04:00:91:dd:f8:72:0d:96:59:25:b4:ce: 8a:7d:2b:e5:ec:81:46:91:06:7a:b3:73:86:48:29: 05:db:65:98:a1:85:99:52:47:e8:fd:ad:b5:ad:02: cd:cb:8f:a8:3b:ee:0b:1a:de:b9:56:93:04:e7:63: 7f:7c:d3:76:a7:83:f4:53:ed:a1:c8:04:42:ff:9c: fd:57:ee:c8:cc:07:fe:a1:6f:0a:ef:88:b5:49:75: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:70:24:C9:82:22:B4:7B:84:A8:89:70:58:1A:30:08:2D:C9:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5db6969d-67a3-3925-aa91-5cd42fe537ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 146.148.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1a:c9:5e:c5:29:0d:15:81:ae:3d:59:5f:b7:9c:8f:6d:0c: ba:5a:1a:6f:3d:b6:a0:41:42:63:51:6a:f8:6e:8c:38:66:34: db:f3:5a:9c:e8:6d:5f:1d:b4:48:2e:0d:03:83:b0:ad:d2:5f: ed:d5:26:46:c8:9d:8c:9a:bd:bd:df:61:6c:22:11:45:36:e1: b4:e9:0d:4b:b8:20:fb:19:99:ae:0c:6c:1c:1e:65:00:19:91: fe:f6:00:76:15:5a:1e:ef:7c:43:c1:65:31:ca:6e:0f:0d:6b: 9f:7d:39:97:31:9f:f5:02:e6:b5:dc:f2:ed:8e:e2:d9:c6:f8: 2a:e9:40:71:69:fd:2f:5e:31:ab:de:79:48:2c:a3:4b:0b:ef: 82:f7:ad:61:7b:b8:ed:71:9d:c8:c3:1c:ba:52:3c:b6:38:34: 6b:43:e2:07:6f:97:42:2f:fd:5f:25:d0:25:0a:f3:64:16:ac: 8e:d3:8d:de:36:2e:c1:bb:f7:04:93:81:ec:6a:36:1b:df:1a: 83:51:c3:56:24:9b:33:d9:eb:9e:a7:f9:6d:b6:d7:d4:f0:45: ad:93:37:12:69:d9:f1:81:61:4b:30:41:00:5b:ee:b9:82:4a: de:46:18:9a:0e:c8:9a:f9:82:9b:30:e0:fd:38:e0:43:58:98: cf:bc:5e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVZtVota8lncOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2NjMmQ2OGQtN2UwYS00NmJjLTk1NjUtM2YxYWM4NjA4ODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UbPIq23Qvle7sS7t8NM4mA0yvj5RpGGs7fV cm3w6nSfqMlxidouI4+UT074Jy6kdRsxWuSqLBZDc4zsJR7Ai1KQsFFH2hEVbWlj JFfJlkzkgp5GmgOnrREvo99zbRqFjb/fuv0w1cRwJdmE+3BQiudru8sHUwKAvz17 dCOb/stXKwIufJk4OmBnkzjYPPrFFMzgnSsJinLImNCv+TlPZU5oDTLBMrcEAJHd +HINllkltM6KfSvl7IFGkQZ6s3OGSCkF22WYoYWZUkfo/a21rQLNy4+oO+4LGt65 VpME52N/fNN2p4P0U+2hyARC/5z9V+7IzAf+oW8K74i1SXURUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjgcCTJgiK0e4SoiXBYGjAILckvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRiNjk2OWQtNjdhMy0z OTI1LWFhOTEtNWNkNDJmZTUzN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkpQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8ayV7FKQ0Vga49WV+3nI9tDLpaGm89tqBBQmNRavhujDhmNNvzWpzo bV8dtEguDQODsK3SX+3VJkbInYyavb3fYWwiEUU24bTpDUu4IPsZma4MbBweZQAZ kf72AHYVWh7vfEPBZTHKbg8Na599OZcxn/UC5rXc8u2O4tnG+CrpQHFp/S9eMave eUgso0sL74L3rWF7uO1xncjDHLpSPLY4NGtD4gdvl0Iv/V8l0CUK82QWrI7Tjd42 LsG79wSTgexqNhvfGoNRw1YkmzPZ656n+W2219TwRa2TNxJp2fGBYUswQQBb7rmC St5GGJoOyJr5gpsw4P044ENYmM+8Xsw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:46 2025 by rpki-client