$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa File: 7949338e-45a1-3525-b96e-1f1f879e2b21.roa (raw, json) Hash identifier: fLhlBuj91ngnMLI/U+1ZDnyxT+oG5FLSWst/GM+t6ok= Subject key identifier: D6:D9:98:97:12:68:44:26:54:EC:42:65:D9:5E:E6:84:58:03:6C:24 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584B80B7689D9D061120D334EB00 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 1403 IP address blocks: 146.71.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:68:9d:9d:06:11:20:d3:34:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=49c647d1-e2f4-48fd-af15-a29a7739e30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:78:86:88:4d:97:40:8f:48:37:31:d3:50: af:49:00:82:f9:f2:2b:75:41:68:38:54:45:2d:77: fa:d3:65:47:0e:6d:b3:6d:2f:2d:80:b7:92:d2:8a: d5:d9:59:e5:a0:00:58:cb:28:83:be:84:08:3d:94: ad:68:ae:81:b9:29:54:c7:1e:cb:39:ab:7e:d1:61: 4d:01:8b:5b:34:c0:f0:ac:b1:d6:61:ae:9e:c6:87: 59:1b:c7:07:69:e5:e0:b5:05:fa:58:8c:a1:91:97: 93:68:8f:88:98:25:da:49:34:96:f5:e1:e3:c8:f6: 58:f5:47:96:a4:4c:d4:29:99:bd:a4:07:dc:59:9f: 30:d9:65:4d:b9:62:94:4c:63:2a:f9:68:fc:b0:74: a3:f1:41:90:b0:61:92:43:5d:f3:ec:97:51:ba:73: 7b:4b:b7:69:38:cb:04:cd:b0:10:41:81:00:ee:5d: df:93:a9:05:a6:92:f5:8c:9c:2f:52:3b:e3:8b:5e: a7:97:f1:9c:2e:1e:3f:d6:cc:ff:b7:95:3c:d6:1e: d5:80:3a:c3:e3:1a:84:0c:04:20:a7:69:41:8b:47: 4b:e6:99:bf:ff:f7:96:78:ba:dd:ed:9d:9c:d5:cc: e7:59:e3:62:55:57:f3:94:4c:b5:1b:d8:18:4f:53: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D9:98:97:12:68:44:26:54:EC:42:65:D9:5E:E6:84:58:03:6C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 146.71.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:6c:8a:c4:73:50:66:5e:db:82:67:7f:d2:59:70:79:d1:2a: 67:8a:9b:38:33:89:ea:f9:06:4e:7c:aa:a3:9c:08:5b:14:f2: ab:19:5e:3d:09:46:cc:cd:9a:29:51:b7:68:e8:00:88:f5:77: c6:55:1a:05:8e:3b:de:44:9e:76:15:39:b0:01:d7:01:c6:b3: c6:43:54:71:18:62:05:4d:24:a4:45:fb:66:d8:8f:cc:b0:53: 95:df:6d:c3:ec:14:35:7d:62:03:21:d9:58:51:e0:39:c2:28: a9:32:25:d3:28:e3:7a:c3:5b:cb:c0:30:5d:f0:51:47:3f:0b: f0:bc:5d:43:d0:f1:cd:f0:d2:03:32:50:ce:f8:ae:76:4d:c6: 5a:87:61:c5:cc:f9:11:88:c4:dd:82:f8:a0:5f:da:ab:3b:72: 26:56:85:f4:e5:8b:aa:a0:39:f0:31:25:01:74:62:47:46:37: 3d:1a:b0:99:61:bd:92:9c:8d:b1:a8:be:88:cf:9c:dd:8e:6f: 23:3e:c4:c7:66:5a:f6:f5:d9:9a:c0:16:64:25:bc:0d:ec:ab: b7:5c:a0:99:6e:73:df:3c:50:b9:26:29:85:95:43:6a:c6:70: dc:c3:85:22:c8:8f:0b:2c:ae:38:b0:81:4b:b4:68:64:cf:f4: d1:4e:01:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2idnQYRINM06wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NDljNjQ3ZDEtZTJmNC00OGZkLWFmMTUtYTI5YTc3MzllMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsR4hohNl0CPSDcx01CvSQCC+fIrdUFoOFRF LXf602VHDm2zbS8tgLeS0orV2VnloABYyyiDvoQIPZStaK6BuSlUxx7LOat+0WFN AYtbNMDwrLHWYa6exodZG8cHaeXgtQX6WIyhkZeTaI+ImCXaSTSW9eHjyPZY9UeW pEzUKZm9pAfcWZ8w2WVNuWKUTGMq+Wj8sHSj8UGQsGGSQ13z7JdRunN7S7dpOMsE zbAQQYEA7l3fk6kFppL1jJwvUjvji16nl/GcLh4/1sz/t5U81h7VgDrD4xqEDAQg p2lBi0dL5pm///eWeLrd7Z2c1cznWeNiVVfzlEy1G9gYT1NCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbZmJcSaEQmVOxCZdle5oRYA2wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvNzk0OTMzOGUtNDVhMS0z NTI1LWI5NmUtMWYxZjg3OWUyYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkkcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJsisRzUGZe24Jnf9JZcHnRKmeKmzgzier5Bk58qqOcCFsU8qsZXj0J RszNmilRt2joAIj1d8ZVGgWOO95EnnYVObAB1wHGs8ZDVHEYYgVNJKRF+2bYj8yw U5XfbcPsFDV9YgMh2VhR4DnCKKkyJdMo43rDW8vAMF3wUUc/C/C8XUPQ8c3w0gMy UM74rnZNxlqHYcXM+RGIxN2C+KBf2qs7ciZWhfTli6qgOfAxJQF0YkdGNz0asJlh vZKcjbGovojPnN2ObyM+xMdmWvb12ZrAFmQlvA3sq7dcoJluc988ULkmKYWVQ2rG cNzDhSLIjwssrjiwgUu0aGTP9NFOAb4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:04 2025 by rpki-client