$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa File: 02c67eec-fa8e-34db-b94d-008faf554b49.roa (raw, json) Hash identifier: AiYhkIEup/PWG/3R8g5o5i/DBK3mch9vUMXaT10ZdiE= Subject key identifier: 5A:0F:6C:9B:0D:19:52:7B:1A:BE:47:30:01:2A:DD:7D:C8:5E:EF:4E Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584AD9367506DE51E768470F05F4 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 54535 IP address blocks: 146.197.60.0/23 maxlen: 23 146.197.62.0/24 maxlen: 24 146.197.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:75:06:de:51:e7:68:47:0f:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=f76fbb22-b5c1-4d49-8077-f14ea5cfbde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:90:a9:ba:38:0a:f5:f9:41:3d:1e:74:77: da:15:9f:7d:59:31:da:a3:f6:29:b8:c8:bf:38:06: 39:43:10:16:9e:63:60:7b:8f:57:6c:55:f0:4b:7c: 5b:25:cb:07:4d:97:88:a2:bc:68:20:e0:09:34:87: 01:4a:51:2f:3e:ee:1b:62:2f:c1:3a:62:e6:ab:1f: c2:65:03:1d:c3:ae:97:68:82:89:c3:3a:d0:d0:a3: ae:78:93:13:04:cd:90:a6:78:6b:88:e8:ab:4e:ad: ee:07:d7:57:df:4f:a5:1a:59:52:ba:ee:d0:cc:2f: 8c:a2:e6:d0:b6:8b:06:e1:ef:4b:6e:1a:4e:ae:4b: b9:be:18:95:63:fc:48:eb:2d:8a:2e:af:3e:b5:85: 0c:7a:be:00:7c:c0:d1:6f:05:9e:9f:7b:6d:be:23: c6:ab:58:58:b7:97:e6:00:66:9b:e6:3e:65:a8:08: 2d:19:70:ce:22:95:9e:f3:f0:37:a7:8d:53:9f:08: 61:b7:85:68:99:7d:91:4e:6a:f1:c9:2a:dc:ae:43: 04:8b:2e:77:65:0b:43:cb:53:a5:42:79:b8:c0:40: 47:6f:f9:46:40:7e:7e:46:09:52:24:93:28:75:06: d4:cc:d2:00:25:69:54:07:a2:74:f7:af:7b:38:e0: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:6C:9B:0D:19:52:7B:1A:BE:47:30:01:2A:DD:7D:C8:5E:EF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 146.197.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:55:9a:e3:15:bc:33:8f:17:eb:17:8d:ce:1b:7b:1c:5c:bc: 7e:b2:22:1c:74:9c:10:b9:e8:6d:1c:dc:32:c1:95:90:ab:f4: 0d:b7:57:c3:af:02:19:a9:a8:d9:d0:33:d4:c9:dd:17:0c:99: 27:9b:d8:a9:3b:bb:8f:f4:92:16:8c:70:7c:34:b8:42:cc:50: 01:19:a0:8c:34:31:1a:6a:cb:1d:27:ec:e7:78:80:67:0d:c8: b6:c9:9a:c2:06:79:c9:7f:6c:36:d1:aa:8c:36:e7:54:82:23: 83:eb:6c:83:9c:07:88:70:94:3d:4b:6d:3d:de:3f:54:ba:70: 0b:78:4e:76:a9:f2:01:0f:a1:9f:d5:78:8a:53:3d:2a:a8:51: 66:6f:59:7a:85:eb:5d:6c:02:c5:62:0e:d1:09:ea:51:93:83: b3:f1:42:4f:59:1b:e0:2b:82:1e:ab:61:d3:7d:bc:09:73:e8: 58:50:1d:f3:5f:f4:b3:7a:a3:34:3a:c8:46:ee:78:28:e3:fb: 3c:09:5a:1f:46:11:15:ff:cc:f6:a2:29:32:6e:06:17:3c:ea: f1:fc:e6:36:af:98:29:18:50:8f:75:15:c5:24:71:f8:1f:8a: 53:04:cc:ff:c4:9a:6d:b3:1f:c0:e6:f0:17:85:07:24:d6:b8: d4:38:85:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNnUG3lHnaEcPBfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc2ZmJiMjItYjVjMS00ZDQ5LTgwNzctZjE0ZWE1Y2ZiZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqruQqbo4CvX5QT0edHfaFZ99WTHao/YpuMi/ OAY5QxAWnmNge49XbFXwS3xbJcsHTZeIorxoIOAJNIcBSlEvPu4bYi/BOmLmqx/C ZQMdw66XaIKJwzrQ0KOueJMTBM2QpnhriOirTq3uB9dX30+lGllSuu7QzC+MoubQ tosG4e9LbhpOrku5vhiVY/xI6y2KLq8+tYUMer4AfMDRbwWen3ttviPGq1hYt5fm AGab5j5lqAgtGXDOIpWe8/A3p41Tnwhht4VomX2RTmrxySrcrkMEiy53ZQtDy1Ol Qnm4wEBHb/lGQH5+RglSJJModQbUzNIAJWlUB6J09697OOAw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoPbJsNGVJ7Gr5HMAEq3X3IXu9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvMDJjNjdlZWMtZmE4ZS0z NGRiLWI5NGQtMDA4ZmFmNTU0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCksU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRVmuMVvDOPF+sXjc4bexxcvH6yIhx0nBC56G0c3DLBlZCr9A23V8Ov AhmpqNnQM9TJ3RcMmSeb2Kk7u4/0khaMcHw0uELMUAEZoIw0MRpqyx0n7Od4gGcN yLbJmsIGecl/bDbRqow251SCI4PrbIOcB4hwlD1LbT3eP1S6cAt4Tnap8gEPoZ/V eIpTPSqoUWZvWXqF611sAsViDtEJ6lGTg7PxQk9ZG+Argh6rYdN9vAlz6FhQHfNf 9LN6ozQ6yEbueCjj+zwJWh9GERX/zPaiKTJuBhc86vH85javmCkYUI91FcUkcfgf ilMEzP/Emm2zH8Dm8BeFByTWuNQ4hSs= -----END CERTIFICATE-----Generated at Sat Aug 23 20:03:17 2025 by rpki-client