$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/a5711b06-f6d5-386c-af92-cd6bc9ac5800.roa File: a5711b06-f6d5-386c-af92-cd6bc9ac5800.roa (raw, json) Hash identifier: U1NEdEff/fCG5yCjzc1k22GG48hbERs9ZiRa2lxo9L8= Subject key identifier: 00:6F:D2:2C:B9:85:A5:FC:27:AC:09:1C:25:90:C4:8E:B2:AA:7E:A1 Certificate issuer: /CN=00146dc5-48a5-4f19-81f4-b18f106b00e8 Certificate serial: 010D0C9F4328584B79D0FCB8D7F1617C3728C640 Authority key identifier: AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/a5711b06-f6d5-386c-af92-cd6bc9ac5800.roa Signing time: Fri 10 Oct 2025 13:41:36 +0000 ROA not before: Fri 10 Oct 2025 13:41:36 +0000 ROA not after: Thu 08 Jan 2026 14:41:36 +0000 asID: 16509 IP address blocks: 148.100.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:d0:fc:b8:d7:f1:61:7c:37:28:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00146dc5-48a5-4f19-81f4-b18f106b00e8 Validity Not Before: Oct 10 13:41:36 2025 GMT Not After : Jan 8 14:41:36 2026 GMT Subject: CN=598b982b-7ad7-4aa1-a80f-f30aa108dd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:c9:09:31:d1:21:01:1d:b9:39:dd:45:bd: a0:cc:1f:3d:33:c9:55:c3:fe:8e:e3:e3:10:60:11: 22:c2:a5:c6:01:75:aa:d5:d7:cd:68:dd:5f:44:01: 1e:74:1b:97:60:47:5d:4b:d2:ee:92:8c:d6:be:68: 0f:6a:3e:47:15:85:91:43:d1:b1:e7:43:01:ea:a8: 58:f4:74:39:38:1a:91:27:7d:71:c0:73:7a:92:10: 8b:63:d4:c0:1b:ea:0e:c9:3c:91:39:b6:0c:05:9a: 80:9d:f8:31:42:8e:24:7e:01:5a:df:df:26:4e:be: 46:1f:7b:c2:68:e0:db:e1:01:5c:9d:18:9c:98:47: 8f:79:34:a2:00:55:e1:9a:48:31:45:b3:2b:05:88: e5:47:da:ab:53:50:50:44:34:58:30:64:9b:5e:b1: 80:bc:b2:0c:b0:f5:ea:47:82:14:b3:0a:93:cd:52: 75:b1:4c:6a:d9:1f:2b:89:4c:ca:5c:8b:bd:6f:e7: c3:4f:29:f8:10:37:b3:e6:e3:6c:82:3b:b7:c8:6a: 12:57:1d:95:c7:96:5f:68:84:1e:6c:66:ad:fb:b7: 48:70:a0:78:75:a6:46:73:4f:16:55:00:cf:4b:8d: 72:39:b4:69:bc:c9:3c:f4:3a:c6:4f:d4:26:da:4f: 2f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6F:D2:2C:B9:85:A5:FC:27:AC:09:1C:25:90:C4:8E:B2:AA:7E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/a5711b06-f6d5-386c-af92-cd6bc9ac5800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl X509v3 Authority Key Identifier: keyid:AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer sbgp-ipAddrBlock: critical IPv4: 148.100.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8a:1a:1d:97:1e:c6:d8:0e:9a:e5:a0:6b:e1:d1:a3:6a:3a: ef:84:42:1a:31:05:e4:d3:86:39:33:ff:60:70:4e:e5:69:a8: 98:49:1f:c1:47:ba:51:35:a5:c3:ca:f7:f0:55:0b:65:34:00: 7d:d7:11:58:b9:2e:ad:13:06:0a:6a:ff:e4:89:17:51:7e:61: c7:67:91:7b:b5:9d:aa:8b:86:a7:0d:2a:09:1b:bb:23:67:4b: ca:41:fd:10:6e:9e:7d:3a:1e:99:16:72:1c:91:5a:88:ee:c6: 5c:08:4a:11:33:73:90:59:d2:e4:15:80:96:68:12:ad:74:eb: 54:46:12:87:68:87:e7:c2:48:87:fb:9a:82:63:b1:57:99:d1: 54:6c:42:ac:06:48:5f:06:4c:15:ed:1b:64:28:ce:97:83:50: 0b:58:a5:23:69:9d:9e:1b:92:b1:b6:91:29:dd:54:dc:29:c8: 9d:23:b7:22:86:46:ea:a8:6c:71:ad:42:3f:03:6b:44:60:64: 00:42:73:07:0b:cf:20:a5:87:d2:3a:bc:0d:7c:b0:e2:f3:42: 4c:6d:90:d4:fb:12:f3:3f:b9:79:c9:e0:54:4c:53:4b:fe:04: 04:35:79:75:ad:41:86:ec:93:91:8c:4e:eb:c2:4d:d7:c0:a1: 08:11:b4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt50Py41/FhfDcoxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDAxNDZkYzUtNDhhNS00ZjE5LTgxZjQtYjE4ZjEwNmIw MGU4MB4XDTI1MTAxMDEzNDEzNloXDTI2MDEwODE0NDEzNlowLzEtMCsGA1UEAxMk NTk4Yjk4MmItN2FkNy00YWExLWE4MGYtZjMwYWExMDhkZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCjJCTHRIQEduTndRb2gzB89M8lVw/6O4+MQ YBEiwqXGAXWq1dfNaN1fRAEedBuXYEddS9LukozWvmgPaj5HFYWRQ9Gx50MB6qhY 9HQ5OBqRJ31xwHN6khCLY9TAG+oOyTyRObYMBZqAnfgxQo4kfgFa398mTr5GH3vC aODb4QFcnRicmEePeTSiAFXhmkgxRbMrBYjlR9qrU1BQRDRYMGSbXrGAvLIMsPXq R4IUswqTzVJ1sUxq2R8riUzKXIu9b+fDTyn4EDez5uNsgju3yGoSVx2Vx5ZfaIQe bGat+7dIcKB4daZGc08WVQDPS41yObRpvMk89DrGT9Qm2k8vUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABv0iy5haX8J6wJHCWQxI6yqn6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wMDE0 NmRjNS00OGE1LTRmMTktODFmNC1iMThmMTA2YjAwZTgvYTU3MTFiMDYtZjZkNS0z ODZjLWFmOTItY2Q2YmM5YWM1ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDAxNDZkYzUtNDhhNS00ZjE5LTgx ZjQtYjE4ZjEwNmIwMGU4LzAwMTQ2ZGM1LTQ4YTUtNGYxOS04MWY0LWIxOGYxMDZi MDBlOC5jcmwwHwYDVR0jBBgwFoAUrcV/olYVhYTzRN0gwNsh5UcuGcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wMDE0NmRjNS00OGE1LTRmMTktODFmNC1iMThm MTA2YjAwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlGT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGKGh2XHsbYDprloGvh0aNqOu+EQhoxBeTThjkz/2BwTuVpqJhJH8FH ulE1pcPK9/BVC2U0AH3XEVi5Lq0TBgpq/+SJF1F+YcdnkXu1naqLhqcNKgkbuyNn S8pB/RBunn06HpkWchyRWojuxlwIShEzc5BZ0uQVgJZoEq1061RGEodoh+fCSIf7 moJjsVeZ0VRsQqwGSF8GTBXtG2QozpeDUAtYpSNpnZ4bkrG2kSndVNwpyJ0jtyKG RuqobHGtQj8Da0RgZABCcwcLzyClh9I6vA18sOLzQkxtkNT7EvM/uXnJ4FRMU0v+ BAQ1eXWtQYbsk5GMTuvCTdfAoQgRtH8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:17 2025 by rpki-client